./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/loops/eureka_05.i --full-output --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --traceabstraction.encode.modifies.clause.in.ensures.clause.of.contracts true --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version fb1cb0b9 Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/loops/eureka_05.i -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3f12ca1e314a03dfb1c8beadd0c1a180c2d2339dd5f3109d5999df06d52395ab --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --traceabstraction.encode.modifies.clause.in.ensures.clause.of.contracts true --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --- Real Ultimate output --- This is Ultimate 0.2.4-tmp.dk.referee-eval-fb1cb0b-m [2024-09-25 10:17:27,631 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-25 10:17:27,713 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-25 10:17:27,719 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-25 10:17:27,720 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-25 10:17:27,752 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-25 10:17:27,754 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-25 10:17:27,755 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-25 10:17:27,756 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-25 10:17:27,757 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-25 10:17:27,758 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-25 10:17:27,758 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-25 10:17:27,761 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-25 10:17:27,761 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-25 10:17:27,761 INFO L153 SettingsManager]: * Use SBE=true [2024-09-25 10:17:27,762 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-25 10:17:27,762 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-25 10:17:27,762 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-25 10:17:27,763 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-25 10:17:27,763 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-25 10:17:27,763 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-25 10:17:27,767 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-25 10:17:27,767 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-25 10:17:27,767 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-25 10:17:27,767 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-25 10:17:27,768 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-25 10:17:27,768 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-25 10:17:27,768 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-25 10:17:27,768 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-25 10:17:27,768 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-25 10:17:27,769 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-25 10:17:27,769 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-25 10:17:27,769 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-25 10:17:27,769 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-25 10:17:27,770 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-25 10:17:27,780 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-25 10:17:27,781 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-25 10:17:27,781 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-25 10:17:27,781 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-25 10:17:27,781 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-25 10:17:27,782 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-25 10:17:27,785 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-25 10:17:27,785 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3f12ca1e314a03dfb1c8beadd0c1a180c2d2339dd5f3109d5999df06d52395ab Applying setting for plugin de.uni_freiburg.informatik.ultimate.boogie.procedureinliner: Inline calls to implemented procedures -> NEVER Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Encode 'modifies' clause in 'ensures' clause of contracts -> true Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Generate GraphML witnesses -> false [2024-09-25 10:17:28,148 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-25 10:17:28,170 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-25 10:17:28,173 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-25 10:17:28,175 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-25 10:17:28,175 INFO L274 PluginConnector]: CDTParser initialized [2024-09-25 10:17:28,177 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/loops/eureka_05.i [2024-09-25 10:17:29,813 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-25 10:17:30,009 INFO L384 CDTParser]: Found 1 translation units. [2024-09-25 10:17:30,009 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/eureka_05.i [2024-09-25 10:17:30,020 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/c5fc5d672/cad5126e8aaf448aaf5f1cdee4498015/FLAG2f1b5dc0a [2024-09-25 10:17:30,040 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/c5fc5d672/cad5126e8aaf448aaf5f1cdee4498015 [2024-09-25 10:17:30,043 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-25 10:17:30,044 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-09-25 10:17:30,047 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-25 10:17:30,047 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-25 10:17:30,054 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-25 10:17:30,054 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.09 10:17:30" (1/1) ... [2024-09-25 10:17:30,055 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@394196ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30, skipping insertion in model container [2024-09-25 10:17:30,055 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.09 10:17:30" (1/1) ... [2024-09-25 10:17:30,075 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-25 10:17:30,236 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/eureka_05.i[810,823] [2024-09-25 10:17:30,261 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-25 10:17:30,275 INFO L200 MainTranslator]: Completed pre-run [2024-09-25 10:17:30,286 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/eureka_05.i[810,823] [2024-09-25 10:17:30,301 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-25 10:17:30,331 INFO L204 MainTranslator]: Completed translation [2024-09-25 10:17:30,332 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30 WrapperNode [2024-09-25 10:17:30,332 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-25 10:17:30,333 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-25 10:17:30,334 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-25 10:17:30,334 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-25 10:17:30,340 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30" (1/1) ... [2024-09-25 10:17:30,351 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30" (1/1) ... [2024-09-25 10:17:30,358 INFO L138 Inliner]: procedures = 16, calls = 24, calls flagged for inlining = 0, calls inlined = 0, statements flattened = 0 [2024-09-25 10:17:30,362 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-25 10:17:30,363 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-25 10:17:30,367 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-25 10:17:30,367 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-25 10:17:30,380 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30" (1/1) ... [2024-09-25 10:17:30,381 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30" (1/1) ... [2024-09-25 10:17:30,384 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30" (1/1) ... [2024-09-25 10:17:30,404 INFO L175 MemorySlicer]: Split 15 memory accesses to 3 slices as follows [2, 2, 11]. 73 percent of accesses are in the largest equivalence class. The 7 initializations are split as follows [2, 0, 5]. The 3 writes are split as follows [0, 1, 2]. [2024-09-25 10:17:30,405 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30" (1/1) ... [2024-09-25 10:17:30,406 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30" (1/1) ... [2024-09-25 10:17:30,416 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30" (1/1) ... [2024-09-25 10:17:30,420 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30" (1/1) ... [2024-09-25 10:17:30,423 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30" (1/1) ... [2024-09-25 10:17:30,427 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30" (1/1) ... [2024-09-25 10:17:30,430 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-25 10:17:30,430 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-25 10:17:30,431 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-25 10:17:30,431 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-25 10:17:30,432 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30" (1/1) ... [2024-09-25 10:17:30,439 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-25 10:17:30,452 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:30,475 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-25 10:17:30,482 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-25 10:17:30,527 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-25 10:17:30,528 INFO L130 BoogieDeclarations]: Found specification of procedure main [2024-09-25 10:17:30,528 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2024-09-25 10:17:30,528 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-09-25 10:17:30,528 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-09-25 10:17:30,528 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-09-25 10:17:30,528 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-09-25 10:17:30,530 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-09-25 10:17:30,530 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-09-25 10:17:30,530 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2024-09-25 10:17:30,530 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2024-09-25 10:17:30,531 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2024-09-25 10:17:30,531 INFO L130 BoogieDeclarations]: Found specification of procedure SelectionSort [2024-09-25 10:17:30,531 INFO L138 BoogieDeclarations]: Found implementation of procedure SelectionSort [2024-09-25 10:17:30,531 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-25 10:17:30,531 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-25 10:17:30,532 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-09-25 10:17:30,532 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-09-25 10:17:30,532 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2024-09-25 10:17:30,532 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-25 10:17:30,532 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-25 10:17:30,533 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-09-25 10:17:30,617 INFO L241 CfgBuilder]: Building ICFG [2024-09-25 10:17:30,619 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-25 10:17:30,778 INFO L? ?]: Removed 9 outVars from TransFormulas that were not future-live. [2024-09-25 10:17:30,778 INFO L290 CfgBuilder]: Performing block encoding [2024-09-25 10:17:30,808 INFO L312 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-25 10:17:30,809 INFO L317 CfgBuilder]: Removed 4 assume(true) statements. [2024-09-25 10:17:30,809 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.09 10:17:30 BoogieIcfgContainer [2024-09-25 10:17:30,809 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-25 10:17:30,811 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-25 10:17:30,814 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-25 10:17:30,817 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-25 10:17:30,817 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.09 10:17:30" (1/3) ... [2024-09-25 10:17:30,817 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3905ccc5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.09 10:17:30, skipping insertion in model container [2024-09-25 10:17:30,818 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:30" (2/3) ... [2024-09-25 10:17:30,818 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3905ccc5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.09 10:17:30, skipping insertion in model container [2024-09-25 10:17:30,818 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.09 10:17:30" (3/3) ... [2024-09-25 10:17:30,821 INFO L112 eAbstractionObserver]: Analyzing ICFG eureka_05.i [2024-09-25 10:17:30,837 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-25 10:17:30,837 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-09-25 10:17:30,908 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-25 10:17:30,917 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@79a4d44b, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-25 10:17:30,918 INFO L337 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-09-25 10:17:30,926 INFO L276 IsEmpty]: Start isEmpty. Operand has 29 states, 19 states have (on average 1.5789473684210527) internal successors, (30), 20 states have internal predecessors, (30), 4 states have call successors, (4), 4 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-25 10:17:30,936 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2024-09-25 10:17:30,936 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:30,937 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:30,938 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:30,946 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:30,947 INFO L85 PathProgramCache]: Analyzing trace with hash -2080310768, now seen corresponding path program 1 times [2024-09-25 10:17:30,966 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:30,967 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [658152271] [2024-09-25 10:17:30,968 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:30,969 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:31,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:31,185 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:31,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:31,224 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2024-09-25 10:17:31,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:31,239 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 10:17:31,240 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:31,240 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [658152271] [2024-09-25 10:17:31,241 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [658152271] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 10:17:31,241 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-25 10:17:31,245 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-09-25 10:17:31,247 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1711507420] [2024-09-25 10:17:31,248 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 10:17:31,257 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-09-25 10:17:31,260 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:31,289 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-09-25 10:17:31,290 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-09-25 10:17:31,292 INFO L87 Difference]: Start difference. First operand has 29 states, 19 states have (on average 1.5789473684210527) internal successors, (30), 20 states have internal predecessors, (30), 4 states have call successors, (4), 4 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Second operand has 4 states, 4 states have (on average 2.75) internal successors, (11), 2 states have internal predecessors, (11), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-25 10:17:31,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:31,513 INFO L93 Difference]: Finished difference Result 65 states and 92 transitions. [2024-09-25 10:17:31,515 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-25 10:17:31,516 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 2.75) internal successors, (11), 2 states have internal predecessors, (11), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 17 [2024-09-25 10:17:31,517 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:31,525 INFO L225 Difference]: With dead ends: 65 [2024-09-25 10:17:31,525 INFO L226 Difference]: Without dead ends: 36 [2024-09-25 10:17:31,528 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2024-09-25 10:17:31,532 INFO L434 NwaCegarLoop]: 5 mSDtfsCounter, 61 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 7 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:31,534 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 7 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 10:17:31,551 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2024-09-25 10:17:31,590 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 25. [2024-09-25 10:17:31,592 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 17 states have (on average 1.2941176470588236) internal successors, (22), 17 states have internal predecessors, (22), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-25 10:17:31,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 29 transitions. [2024-09-25 10:17:31,597 INFO L78 Accepts]: Start accepts. Automaton has 25 states and 29 transitions. Word has length 17 [2024-09-25 10:17:31,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:31,598 INFO L474 AbstractCegarLoop]: Abstraction has 25 states and 29 transitions. [2024-09-25 10:17:31,598 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 2.75) internal successors, (11), 2 states have internal predecessors, (11), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-25 10:17:31,599 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:31,600 INFO L276 IsEmpty]: Start isEmpty. Operand 25 states and 29 transitions. [2024-09-25 10:17:31,600 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2024-09-25 10:17:31,600 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:31,600 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:31,601 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-25 10:17:31,601 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:31,602 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:31,604 INFO L85 PathProgramCache]: Analyzing trace with hash 156377847, now seen corresponding path program 1 times [2024-09-25 10:17:31,604 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:31,605 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1875509220] [2024-09-25 10:17:31,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:31,605 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:31,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:31,721 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:31,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:31,745 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2024-09-25 10:17:31,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:31,752 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 10:17:31,755 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:31,755 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1875509220] [2024-09-25 10:17:31,756 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1875509220] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 10:17:31,756 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-25 10:17:31,756 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-09-25 10:17:31,756 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1692116984] [2024-09-25 10:17:31,757 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 10:17:31,758 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-25 10:17:31,759 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:31,760 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-25 10:17:31,761 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-09-25 10:17:31,761 INFO L87 Difference]: Start difference. First operand 25 states and 29 transitions. Second operand has 5 states, 5 states have (on average 2.2) internal successors, (11), 3 states have internal predecessors, (11), 2 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-25 10:17:31,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:31,949 INFO L93 Difference]: Finished difference Result 56 states and 68 transitions. [2024-09-25 10:17:31,951 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-09-25 10:17:31,951 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.2) internal successors, (11), 3 states have internal predecessors, (11), 2 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 17 [2024-09-25 10:17:31,951 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:31,952 INFO L225 Difference]: With dead ends: 56 [2024-09-25 10:17:31,952 INFO L226 Difference]: Without dead ends: 37 [2024-09-25 10:17:31,953 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2024-09-25 10:17:31,954 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 57 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 5 SdHoareTripleChecker+Invalid, 82 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:31,955 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 5 Invalid, 82 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 10:17:31,956 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2024-09-25 10:17:31,969 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 26. [2024-09-25 10:17:31,973 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 18 states have (on average 1.2777777777777777) internal successors, (23), 18 states have internal predecessors, (23), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-25 10:17:31,973 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 30 transitions. [2024-09-25 10:17:31,975 INFO L78 Accepts]: Start accepts. Automaton has 26 states and 30 transitions. Word has length 17 [2024-09-25 10:17:31,975 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:31,976 INFO L474 AbstractCegarLoop]: Abstraction has 26 states and 30 transitions. [2024-09-25 10:17:31,976 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.2) internal successors, (11), 3 states have internal predecessors, (11), 2 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-25 10:17:31,976 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:31,977 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states and 30 transitions. [2024-09-25 10:17:31,977 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2024-09-25 10:17:31,977 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:31,977 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:31,977 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-09-25 10:17:31,978 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:31,978 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:31,978 INFO L85 PathProgramCache]: Analyzing trace with hash 364897058, now seen corresponding path program 1 times [2024-09-25 10:17:31,979 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:31,980 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1564825394] [2024-09-25 10:17:31,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:31,980 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:32,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:32,087 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:32,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:32,105 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2024-09-25 10:17:32,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:32,112 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 10:17:32,113 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:32,113 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1564825394] [2024-09-25 10:17:32,113 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1564825394] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:32,113 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1546341667] [2024-09-25 10:17:32,113 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:32,114 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:32,114 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:32,118 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:32,120 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-25 10:17:32,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:32,192 INFO L262 TraceCheckSpWp]: Trace formula consists of 104 conjuncts, 3 conjuncts are in the unsatisfiable core [2024-09-25 10:17:32,197 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:32,224 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 10:17:32,225 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:17:32,267 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 10:17:32,269 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1546341667] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:17:32,269 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:17:32,269 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 4, 4] total 8 [2024-09-25 10:17:32,270 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [19304298] [2024-09-25 10:17:32,270 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:17:32,270 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-09-25 10:17:32,270 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:32,273 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-09-25 10:17:32,273 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2024-09-25 10:17:32,274 INFO L87 Difference]: Start difference. First operand 26 states and 30 transitions. Second operand has 8 states, 8 states have (on average 2.5) internal successors, (20), 6 states have internal predecessors, (20), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-09-25 10:17:32,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:32,543 INFO L93 Difference]: Finished difference Result 65 states and 81 transitions. [2024-09-25 10:17:32,544 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-09-25 10:17:32,544 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.5) internal successors, (20), 6 states have internal predecessors, (20), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 18 [2024-09-25 10:17:32,544 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:32,545 INFO L225 Difference]: With dead ends: 65 [2024-09-25 10:17:32,545 INFO L226 Difference]: Without dead ends: 46 [2024-09-25 10:17:32,546 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 38 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=76, Invalid=134, Unknown=0, NotChecked=0, Total=210 [2024-09-25 10:17:32,547 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 66 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 7 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:32,547 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 7 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 10:17:32,548 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2024-09-25 10:17:32,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 29. [2024-09-25 10:17:32,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 21 states have (on average 1.2380952380952381) internal successors, (26), 21 states have internal predecessors, (26), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-25 10:17:32,559 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2024-09-25 10:17:32,559 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 18 [2024-09-25 10:17:32,560 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:32,560 INFO L474 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2024-09-25 10:17:32,560 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.5) internal successors, (20), 6 states have internal predecessors, (20), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-09-25 10:17:32,560 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:32,561 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2024-09-25 10:17:32,561 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2024-09-25 10:17:32,561 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:32,561 INFO L216 NwaCegarLoop]: trace histogram [4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:32,579 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-09-25 10:17:32,762 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:32,763 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:32,763 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:32,766 INFO L85 PathProgramCache]: Analyzing trace with hash -1764338249, now seen corresponding path program 2 times [2024-09-25 10:17:32,766 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:32,766 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [389360674] [2024-09-25 10:17:32,766 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:32,767 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:32,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:32,853 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:32,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:32,870 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-25 10:17:32,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:32,895 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-25 10:17:32,895 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:32,895 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [389360674] [2024-09-25 10:17:32,896 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [389360674] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 10:17:32,896 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-25 10:17:32,896 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-09-25 10:17:32,896 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1784018183] [2024-09-25 10:17:32,896 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 10:17:32,897 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-09-25 10:17:32,897 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:32,898 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-09-25 10:17:32,898 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-09-25 10:17:32,899 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 7 states, 6 states have (on average 2.0) internal successors, (12), 4 states have internal predecessors, (12), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-25 10:17:33,069 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:33,069 INFO L93 Difference]: Finished difference Result 46 states and 53 transitions. [2024-09-25 10:17:33,070 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-25 10:17:33,070 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 2.0) internal successors, (12), 4 states have internal predecessors, (12), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 21 [2024-09-25 10:17:33,070 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:33,071 INFO L225 Difference]: With dead ends: 46 [2024-09-25 10:17:33,071 INFO L226 Difference]: Without dead ends: 34 [2024-09-25 10:17:33,072 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=91, Unknown=0, NotChecked=0, Total=132 [2024-09-25 10:17:33,072 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 75 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 7 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:33,073 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 7 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 10:17:33,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2024-09-25 10:17:33,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 30. [2024-09-25 10:17:33,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 22 states have (on average 1.2272727272727273) internal successors, (27), 22 states have internal predecessors, (27), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-25 10:17:33,084 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 34 transitions. [2024-09-25 10:17:33,085 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 34 transitions. Word has length 21 [2024-09-25 10:17:33,085 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:33,085 INFO L474 AbstractCegarLoop]: Abstraction has 30 states and 34 transitions. [2024-09-25 10:17:33,085 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 2.0) internal successors, (12), 4 states have internal predecessors, (12), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-25 10:17:33,086 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:33,086 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 34 transitions. [2024-09-25 10:17:33,086 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2024-09-25 10:17:33,087 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:33,087 INFO L216 NwaCegarLoop]: trace histogram [4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:33,087 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-09-25 10:17:33,087 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:33,088 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:33,088 INFO L85 PathProgramCache]: Analyzing trace with hash 1674322940, now seen corresponding path program 1 times [2024-09-25 10:17:33,088 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:33,088 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1441307227] [2024-09-25 10:17:33,088 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:33,088 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:33,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:33,176 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:33,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:33,200 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-25 10:17:33,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:33,250 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-25 10:17:33,252 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:33,252 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1441307227] [2024-09-25 10:17:33,253 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1441307227] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:33,253 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [205427252] [2024-09-25 10:17:33,253 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:33,253 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:33,253 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:33,256 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:33,259 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-25 10:17:33,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:33,324 INFO L262 TraceCheckSpWp]: Trace formula consists of 139 conjuncts, 6 conjuncts are in the unsatisfiable core [2024-09-25 10:17:33,325 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:33,396 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-25 10:17:33,396 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:17:33,469 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-25 10:17:33,470 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [205427252] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:17:33,471 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:17:33,471 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 13 [2024-09-25 10:17:33,471 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [55975130] [2024-09-25 10:17:33,471 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:17:33,472 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2024-09-25 10:17:33,472 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:33,472 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2024-09-25 10:17:33,473 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=123, Unknown=0, NotChecked=0, Total=156 [2024-09-25 10:17:33,473 INFO L87 Difference]: Start difference. First operand 30 states and 34 transitions. Second operand has 13 states, 13 states have (on average 2.6153846153846154) internal successors, (34), 11 states have internal predecessors, (34), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-25 10:17:33,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:34,000 INFO L93 Difference]: Finished difference Result 70 states and 87 transitions. [2024-09-25 10:17:34,000 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2024-09-25 10:17:34,000 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 2.6153846153846154) internal successors, (34), 11 states have internal predecessors, (34), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 24 [2024-09-25 10:17:34,001 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:34,001 INFO L225 Difference]: With dead ends: 70 [2024-09-25 10:17:34,002 INFO L226 Difference]: Without dead ends: 50 [2024-09-25 10:17:34,002 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 44 SyntacticMatches, 4 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 98 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=210, Invalid=602, Unknown=0, NotChecked=0, Total=812 [2024-09-25 10:17:34,003 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 109 mSDsluCounter, 10 mSDsCounter, 0 mSdLazyCounter, 276 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 109 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 299 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 276 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:34,004 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [109 Valid, 13 Invalid, 299 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 276 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-25 10:17:34,004 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2024-09-25 10:17:34,019 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 32. [2024-09-25 10:17:34,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 24 states have (on average 1.2083333333333333) internal successors, (29), 24 states have internal predecessors, (29), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-25 10:17:34,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 36 transitions. [2024-09-25 10:17:34,021 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 36 transitions. Word has length 24 [2024-09-25 10:17:34,021 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:34,021 INFO L474 AbstractCegarLoop]: Abstraction has 32 states and 36 transitions. [2024-09-25 10:17:34,022 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 2.6153846153846154) internal successors, (34), 11 states have internal predecessors, (34), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-25 10:17:34,022 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:34,022 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 36 transitions. [2024-09-25 10:17:34,023 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2024-09-25 10:17:34,023 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:34,023 INFO L216 NwaCegarLoop]: trace histogram [5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:34,041 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-09-25 10:17:34,223 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:34,224 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:34,224 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:34,225 INFO L85 PathProgramCache]: Analyzing trace with hash 2009987497, now seen corresponding path program 1 times [2024-09-25 10:17:34,225 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:34,225 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1683449696] [2024-09-25 10:17:34,225 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:34,225 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:34,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:34,289 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:34,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:34,312 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:17:34,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:34,358 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-09-25 10:17:34,359 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:34,359 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1683449696] [2024-09-25 10:17:34,359 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1683449696] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:34,360 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1415205595] [2024-09-25 10:17:34,360 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:34,360 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:34,360 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:34,362 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:34,364 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-25 10:17:34,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:34,431 INFO L262 TraceCheckSpWp]: Trace formula consists of 156 conjuncts, 5 conjuncts are in the unsatisfiable core [2024-09-25 10:17:34,433 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:34,515 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-25 10:17:34,517 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:17:34,688 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-25 10:17:34,689 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1415205595] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:17:34,689 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:17:34,689 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6, 7] total 16 [2024-09-25 10:17:34,689 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1685484520] [2024-09-25 10:17:34,689 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:17:34,690 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2024-09-25 10:17:34,691 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:34,691 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2024-09-25 10:17:34,694 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=186, Unknown=0, NotChecked=0, Total=240 [2024-09-25 10:17:34,694 INFO L87 Difference]: Start difference. First operand 32 states and 36 transitions. Second operand has 16 states, 16 states have (on average 2.5625) internal successors, (41), 13 states have internal predecessors, (41), 4 states have call successors, (8), 6 states have call predecessors, (8), 5 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-25 10:17:35,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:35,237 INFO L93 Difference]: Finished difference Result 83 states and 112 transitions. [2024-09-25 10:17:35,237 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2024-09-25 10:17:35,237 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 2.5625) internal successors, (41), 13 states have internal predecessors, (41), 4 states have call successors, (8), 6 states have call predecessors, (8), 5 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 28 [2024-09-25 10:17:35,238 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:35,238 INFO L225 Difference]: With dead ends: 83 [2024-09-25 10:17:35,238 INFO L226 Difference]: Without dead ends: 66 [2024-09-25 10:17:35,239 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 190 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=289, Invalid=767, Unknown=0, NotChecked=0, Total=1056 [2024-09-25 10:17:35,240 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 290 mSDsluCounter, 10 mSDsCounter, 0 mSdLazyCounter, 241 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 272 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:35,240 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [290 Valid, 13 Invalid, 272 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 241 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-25 10:17:35,241 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2024-09-25 10:17:35,266 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 62. [2024-09-25 10:17:35,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62 states, 54 states have (on average 1.2777777777777777) internal successors, (69), 54 states have internal predecessors, (69), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-25 10:17:35,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62 states to 62 states and 76 transitions. [2024-09-25 10:17:35,269 INFO L78 Accepts]: Start accepts. Automaton has 62 states and 76 transitions. Word has length 28 [2024-09-25 10:17:35,269 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:35,269 INFO L474 AbstractCegarLoop]: Abstraction has 62 states and 76 transitions. [2024-09-25 10:17:35,270 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 2.5625) internal successors, (41), 13 states have internal predecessors, (41), 4 states have call successors, (8), 6 states have call predecessors, (8), 5 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-25 10:17:35,270 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:35,270 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 76 transitions. [2024-09-25 10:17:35,271 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2024-09-25 10:17:35,272 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:35,272 INFO L216 NwaCegarLoop]: trace histogram [9, 9, 9, 5, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:35,290 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2024-09-25 10:17:35,476 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2024-09-25 10:17:35,477 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:35,477 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:35,477 INFO L85 PathProgramCache]: Analyzing trace with hash 752690779, now seen corresponding path program 2 times [2024-09-25 10:17:35,478 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:35,478 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1688188228] [2024-09-25 10:17:35,478 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:35,478 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:35,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:35,620 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:35,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:35,632 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:17:35,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:35,728 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 0 proven. 108 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2024-09-25 10:17:35,729 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:35,729 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1688188228] [2024-09-25 10:17:35,732 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1688188228] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:35,732 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [299607017] [2024-09-25 10:17:35,732 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-25 10:17:35,732 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:35,732 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:35,734 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:35,736 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-25 10:17:35,825 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-25 10:17:35,826 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:17:35,829 INFO L262 TraceCheckSpWp]: Trace formula consists of 264 conjuncts, 6 conjuncts are in the unsatisfiable core [2024-09-25 10:17:35,832 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:36,032 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 0 proven. 108 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2024-09-25 10:17:36,032 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:17:36,294 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 0 proven. 108 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2024-09-25 10:17:36,299 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [299607017] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:17:36,299 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:17:36,299 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 7, 8] total 19 [2024-09-25 10:17:36,300 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2107968923] [2024-09-25 10:17:36,300 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:17:36,300 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2024-09-25 10:17:36,300 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:36,301 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2024-09-25 10:17:36,301 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2024-09-25 10:17:36,302 INFO L87 Difference]: Start difference. First operand 62 states and 76 transitions. Second operand has 19 states, 19 states have (on average 4.0) internal successors, (76), 16 states have internal predecessors, (76), 4 states have call successors, (8), 6 states have call predecessors, (8), 4 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-25 10:17:36,574 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:36,574 INFO L93 Difference]: Finished difference Result 84 states and 104 transitions. [2024-09-25 10:17:36,575 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-09-25 10:17:36,575 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 19 states have (on average 4.0) internal successors, (76), 16 states have internal predecessors, (76), 4 states have call successors, (8), 6 states have call predecessors, (8), 4 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 58 [2024-09-25 10:17:36,575 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:36,576 INFO L225 Difference]: With dead ends: 84 [2024-09-25 10:17:36,576 INFO L226 Difference]: Without dead ends: 72 [2024-09-25 10:17:36,577 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 135 GetRequests, 109 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 151 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=200, Invalid=556, Unknown=0, NotChecked=0, Total=756 [2024-09-25 10:17:36,578 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 137 mSDsluCounter, 5 mSDsCounter, 0 mSdLazyCounter, 167 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 8 SdHoareTripleChecker+Invalid, 183 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 167 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:36,578 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 8 Invalid, 183 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 167 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 10:17:36,579 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2024-09-25 10:17:36,595 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 72. [2024-09-25 10:17:36,596 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 64 states have (on average 1.296875) internal successors, (83), 64 states have internal predecessors, (83), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-25 10:17:36,598 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 90 transitions. [2024-09-25 10:17:36,598 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 90 transitions. Word has length 58 [2024-09-25 10:17:36,600 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:36,601 INFO L474 AbstractCegarLoop]: Abstraction has 72 states and 90 transitions. [2024-09-25 10:17:36,602 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 19 states have (on average 4.0) internal successors, (76), 16 states have internal predecessors, (76), 4 states have call successors, (8), 6 states have call predecessors, (8), 4 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-25 10:17:36,602 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:36,602 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 90 transitions. [2024-09-25 10:17:36,604 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2024-09-25 10:17:36,606 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:36,606 INFO L216 NwaCegarLoop]: trace histogram [9, 9, 9, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:36,625 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2024-09-25 10:17:36,807 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:36,807 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:36,808 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:36,808 INFO L85 PathProgramCache]: Analyzing trace with hash 1101248827, now seen corresponding path program 3 times [2024-09-25 10:17:36,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:36,808 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1432734379] [2024-09-25 10:17:36,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:36,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:36,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:36,947 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:36,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:36,958 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:17:36,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:37,088 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 0 proven. 147 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2024-09-25 10:17:37,088 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:37,088 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1432734379] [2024-09-25 10:17:37,089 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1432734379] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:37,089 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1418572815] [2024-09-25 10:17:37,089 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-25 10:17:37,089 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:37,089 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:37,091 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:37,093 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-25 10:17:37,161 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2024-09-25 10:17:37,161 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:17:37,162 INFO L262 TraceCheckSpWp]: Trace formula consists of 125 conjuncts, 12 conjuncts are in the unsatisfiable core [2024-09-25 10:17:37,165 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:37,192 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-25 10:17:37,547 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 198 trivial. 0 not checked. [2024-09-25 10:17:37,547 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-25 10:17:37,547 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1418572815] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 10:17:37,547 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-25 10:17:37,547 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [10] total 18 [2024-09-25 10:17:37,548 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1231594692] [2024-09-25 10:17:37,548 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 10:17:37,548 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2024-09-25 10:17:37,548 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:37,549 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2024-09-25 10:17:37,549 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=263, Unknown=0, NotChecked=0, Total=306 [2024-09-25 10:17:37,549 INFO L87 Difference]: Start difference. First operand 72 states and 90 transitions. Second operand has 9 states, 8 states have (on average 2.375) internal successors, (19), 8 states have internal predecessors, (19), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-25 10:17:37,715 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:37,716 INFO L93 Difference]: Finished difference Result 81 states and 99 transitions. [2024-09-25 10:17:37,716 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-09-25 10:17:37,716 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 2.375) internal successors, (19), 8 states have internal predecessors, (19), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 64 [2024-09-25 10:17:37,717 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:37,718 INFO L225 Difference]: With dead ends: 81 [2024-09-25 10:17:37,718 INFO L226 Difference]: Without dead ends: 79 [2024-09-25 10:17:37,718 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 57 SyntacticMatches, 1 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=67, Invalid=395, Unknown=0, NotChecked=0, Total=462 [2024-09-25 10:17:37,719 INFO L434 NwaCegarLoop]: 19 mSDtfsCounter, 18 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 73 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 82 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 73 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:37,719 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 107 Invalid, 82 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 73 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 10:17:37,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2024-09-25 10:17:37,754 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 78. [2024-09-25 10:17:37,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 68 states have (on average 1.2794117647058822) internal successors, (87), 69 states have internal predecessors, (87), 5 states have call successors, (5), 5 states have call predecessors, (5), 4 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-25 10:17:37,755 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 96 transitions. [2024-09-25 10:17:37,755 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 96 transitions. Word has length 64 [2024-09-25 10:17:37,756 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:37,756 INFO L474 AbstractCegarLoop]: Abstraction has 78 states and 96 transitions. [2024-09-25 10:17:37,756 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 2.375) internal successors, (19), 8 states have internal predecessors, (19), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-25 10:17:37,756 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:37,757 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 96 transitions. [2024-09-25 10:17:37,758 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2024-09-25 10:17:37,758 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:37,758 INFO L216 NwaCegarLoop]: trace histogram [9, 9, 9, 5, 5, 5, 5, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:37,776 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2024-09-25 10:17:37,959 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2024-09-25 10:17:37,960 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:37,960 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:37,960 INFO L85 PathProgramCache]: Analyzing trace with hash -2042194420, now seen corresponding path program 1 times [2024-09-25 10:17:37,960 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:37,960 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2103116266] [2024-09-25 10:17:37,960 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:37,960 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:37,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:38,100 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:38,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:38,111 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:17:38,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:38,245 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2024-09-25 10:17:38,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:38,247 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 2 proven. 147 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2024-09-25 10:17:38,248 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:38,248 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2103116266] [2024-09-25 10:17:38,248 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2103116266] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:38,248 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [791680774] [2024-09-25 10:17:38,248 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:38,248 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:38,248 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:38,250 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:38,252 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-25 10:17:38,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:38,359 INFO L262 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 7 conjuncts are in the unsatisfiable core [2024-09-25 10:17:38,365 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:38,549 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 27 proven. 120 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2024-09-25 10:17:38,549 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:17:38,854 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 29 proven. 120 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2024-09-25 10:17:38,854 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [791680774] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:17:38,854 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:17:38,854 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 8, 9] total 21 [2024-09-25 10:17:38,855 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1544252015] [2024-09-25 10:17:38,855 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:17:38,855 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-09-25 10:17:38,855 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:38,856 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-09-25 10:17:38,856 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=100, Invalid=320, Unknown=0, NotChecked=0, Total=420 [2024-09-25 10:17:38,856 INFO L87 Difference]: Start difference. First operand 78 states and 96 transitions. Second operand has 21 states, 21 states have (on average 4.238095238095238) internal successors, (89), 19 states have internal predecessors, (89), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-25 10:17:39,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:39,274 INFO L93 Difference]: Finished difference Result 106 states and 129 transitions. [2024-09-25 10:17:39,274 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2024-09-25 10:17:39,274 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 21 states have (on average 4.238095238095238) internal successors, (89), 19 states have internal predecessors, (89), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 71 [2024-09-25 10:17:39,274 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:39,276 INFO L225 Difference]: With dead ends: 106 [2024-09-25 10:17:39,276 INFO L226 Difference]: Without dead ends: 81 [2024-09-25 10:17:39,277 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 172 GetRequests, 134 SyntacticMatches, 2 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 323 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=360, Invalid=1046, Unknown=0, NotChecked=0, Total=1406 [2024-09-25 10:17:39,278 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 168 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 247 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 10 SdHoareTripleChecker+Invalid, 263 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 247 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:39,278 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 10 Invalid, 263 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 247 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-25 10:17:39,278 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2024-09-25 10:17:39,302 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 79. [2024-09-25 10:17:39,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 69 states have (on average 1.2753623188405796) internal successors, (88), 70 states have internal predecessors, (88), 5 states have call successors, (5), 5 states have call predecessors, (5), 4 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-25 10:17:39,303 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 97 transitions. [2024-09-25 10:17:39,303 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 97 transitions. Word has length 71 [2024-09-25 10:17:39,304 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:39,304 INFO L474 AbstractCegarLoop]: Abstraction has 79 states and 97 transitions. [2024-09-25 10:17:39,304 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 21 states have (on average 4.238095238095238) internal successors, (89), 19 states have internal predecessors, (89), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-25 10:17:39,304 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:39,304 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 97 transitions. [2024-09-25 10:17:39,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2024-09-25 10:17:39,305 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:39,305 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 10, 5, 5, 5, 5, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:39,318 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2024-09-25 10:17:39,506 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:39,506 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:39,507 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:39,507 INFO L85 PathProgramCache]: Analyzing trace with hash 2083039638, now seen corresponding path program 2 times [2024-09-25 10:17:39,507 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:39,507 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1487529755] [2024-09-25 10:17:39,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:39,507 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:39,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:39,942 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:39,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:39,980 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:17:40,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:40,435 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-25 10:17:40,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:40,439 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 2 proven. 126 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2024-09-25 10:17:40,439 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:40,439 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1487529755] [2024-09-25 10:17:40,439 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1487529755] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:40,439 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [430652002] [2024-09-25 10:17:40,440 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-25 10:17:40,440 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:40,440 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:40,442 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:40,443 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-25 10:17:40,538 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-25 10:17:40,539 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:17:40,541 INFO L262 TraceCheckSpWp]: Trace formula consists of 316 conjuncts, 19 conjuncts are in the unsatisfiable core [2024-09-25 10:17:40,543 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:40,622 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:17:40,623 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 15 treesize of output 7 [2024-09-25 10:17:40,942 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 0 proven. 58 refuted. 0 times theorem prover too weak. 181 trivial. 0 not checked. [2024-09-25 10:17:40,942 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:17:41,324 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 58 proven. 2 refuted. 0 times theorem prover too weak. 179 trivial. 0 not checked. [2024-09-25 10:17:41,325 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [430652002] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:17:41,325 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:17:41,325 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 10, 10] total 30 [2024-09-25 10:17:41,326 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [313091152] [2024-09-25 10:17:41,327 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:17:41,327 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2024-09-25 10:17:41,327 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:41,328 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2024-09-25 10:17:41,328 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=147, Invalid=723, Unknown=0, NotChecked=0, Total=870 [2024-09-25 10:17:41,329 INFO L87 Difference]: Start difference. First operand 79 states and 97 transitions. Second operand has 30 states, 30 states have (on average 2.5) internal successors, (75), 26 states have internal predecessors, (75), 5 states have call successors, (10), 9 states have call predecessors, (10), 8 states have return successors, (8), 4 states have call predecessors, (8), 5 states have call successors, (8) [2024-09-25 10:17:41,967 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:41,967 INFO L93 Difference]: Finished difference Result 153 states and 187 transitions. [2024-09-25 10:17:41,968 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2024-09-25 10:17:41,968 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 2.5) internal successors, (75), 26 states have internal predecessors, (75), 5 states have call successors, (10), 9 states have call predecessors, (10), 8 states have return successors, (8), 4 states have call predecessors, (8), 5 states have call successors, (8) Word has length 74 [2024-09-25 10:17:41,969 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:41,970 INFO L225 Difference]: With dead ends: 153 [2024-09-25 10:17:41,971 INFO L226 Difference]: Without dead ends: 93 [2024-09-25 10:17:41,972 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 177 GetRequests, 138 SyntacticMatches, 0 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 351 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=313, Invalid=1327, Unknown=0, NotChecked=0, Total=1640 [2024-09-25 10:17:41,973 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 135 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 376 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 4 SdHoareTripleChecker+Invalid, 392 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 376 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:41,974 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 4 Invalid, 392 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 376 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-09-25 10:17:41,974 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2024-09-25 10:17:42,009 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 82. [2024-09-25 10:17:42,010 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 72 states have (on average 1.2638888888888888) internal successors, (91), 73 states have internal predecessors, (91), 5 states have call successors, (5), 5 states have call predecessors, (5), 4 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-25 10:17:42,011 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 100 transitions. [2024-09-25 10:17:42,011 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 100 transitions. Word has length 74 [2024-09-25 10:17:42,011 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:42,011 INFO L474 AbstractCegarLoop]: Abstraction has 82 states and 100 transitions. [2024-09-25 10:17:42,012 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 2.5) internal successors, (75), 26 states have internal predecessors, (75), 5 states have call successors, (10), 9 states have call predecessors, (10), 8 states have return successors, (8), 4 states have call predecessors, (8), 5 states have call successors, (8) [2024-09-25 10:17:42,012 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:42,012 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 100 transitions. [2024-09-25 10:17:42,012 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2024-09-25 10:17:42,013 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:42,013 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 9, 5, 5, 5, 5, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:42,032 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2024-09-25 10:17:42,213 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:42,214 INFO L399 AbstractCegarLoop]: === Iteration 11 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:42,214 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:42,214 INFO L85 PathProgramCache]: Analyzing trace with hash 2123714388, now seen corresponding path program 1 times [2024-09-25 10:17:42,214 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:42,214 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1780315171] [2024-09-25 10:17:42,214 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:42,214 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:42,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:42,580 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:42,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:42,597 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:17:42,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:43,685 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-25 10:17:43,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:43,689 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 119 proven. 61 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2024-09-25 10:17:43,689 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:43,689 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1780315171] [2024-09-25 10:17:43,689 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1780315171] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:43,690 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [628423471] [2024-09-25 10:17:43,690 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:43,690 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:43,690 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:43,692 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:43,693 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-25 10:17:43,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:43,801 INFO L262 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 29 conjuncts are in the unsatisfiable core [2024-09-25 10:17:43,804 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:43,893 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:17:43,894 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 15 treesize of output 7 [2024-09-25 10:17:44,917 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 0 proven. 109 refuted. 0 times theorem prover too weak. 130 trivial. 0 not checked. [2024-09-25 10:17:44,917 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:17:45,082 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [628423471] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:45,082 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-25 10:17:45,082 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 15] total 37 [2024-09-25 10:17:45,082 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1690460916] [2024-09-25 10:17:45,082 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-25 10:17:45,083 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2024-09-25 10:17:45,083 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:45,083 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2024-09-25 10:17:45,084 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=140, Invalid=1266, Unknown=0, NotChecked=0, Total=1406 [2024-09-25 10:17:45,084 INFO L87 Difference]: Start difference. First operand 82 states and 100 transitions. Second operand has 37 states, 37 states have (on average 1.972972972972973) internal successors, (73), 34 states have internal predecessors, (73), 4 states have call successors, (8), 7 states have call predecessors, (8), 5 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2024-09-25 10:17:48,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:48,557 INFO L93 Difference]: Finished difference Result 308 states and 421 transitions. [2024-09-25 10:17:48,558 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 59 states. [2024-09-25 10:17:48,558 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 37 states have (on average 1.972972972972973) internal successors, (73), 34 states have internal predecessors, (73), 4 states have call successors, (8), 7 states have call predecessors, (8), 5 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 74 [2024-09-25 10:17:48,558 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:48,559 INFO L225 Difference]: With dead ends: 308 [2024-09-25 10:17:48,559 INFO L226 Difference]: Without dead ends: 251 [2024-09-25 10:17:48,561 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 174 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 92 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2327 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=1277, Invalid=7465, Unknown=0, NotChecked=0, Total=8742 [2024-09-25 10:17:48,562 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 255 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 1265 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 256 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 1312 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 1265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:48,562 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [256 Valid, 17 Invalid, 1312 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 1265 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2024-09-25 10:17:48,563 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 251 states. [2024-09-25 10:17:48,623 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 251 to 177. [2024-09-25 10:17:48,623 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 177 states, 167 states have (on average 1.4191616766467066) internal successors, (237), 168 states have internal predecessors, (237), 5 states have call successors, (5), 5 states have call predecessors, (5), 4 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-25 10:17:48,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 246 transitions. [2024-09-25 10:17:48,624 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 246 transitions. Word has length 74 [2024-09-25 10:17:48,625 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:48,625 INFO L474 AbstractCegarLoop]: Abstraction has 177 states and 246 transitions. [2024-09-25 10:17:48,625 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 37 states have (on average 1.972972972972973) internal successors, (73), 34 states have internal predecessors, (73), 4 states have call successors, (8), 7 states have call predecessors, (8), 5 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2024-09-25 10:17:48,625 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:48,625 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 246 transitions. [2024-09-25 10:17:48,626 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2024-09-25 10:17:48,626 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:48,626 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 8, 5, 5, 5, 5, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:48,642 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2024-09-25 10:17:48,827 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:48,827 INFO L399 AbstractCegarLoop]: === Iteration 12 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:48,828 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:48,828 INFO L85 PathProgramCache]: Analyzing trace with hash -1727352234, now seen corresponding path program 2 times [2024-09-25 10:17:48,828 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:48,828 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1137272114] [2024-09-25 10:17:48,828 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:48,828 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:48,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:49,199 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:49,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:49,219 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:17:49,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:50,955 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-25 10:17:50,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:50,958 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 78 proven. 135 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-25 10:17:50,959 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:50,959 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1137272114] [2024-09-25 10:17:50,959 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1137272114] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:50,959 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2105526895] [2024-09-25 10:17:50,959 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-25 10:17:50,959 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:50,960 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:50,965 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:50,968 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-09-25 10:17:51,063 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-25 10:17:51,064 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:17:51,065 INFO L262 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 24 conjuncts are in the unsatisfiable core [2024-09-25 10:17:51,068 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:51,150 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:17:51,151 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 15 treesize of output 7 [2024-09-25 10:17:51,739 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 0 proven. 109 refuted. 0 times theorem prover too weak. 130 trivial. 0 not checked. [2024-09-25 10:17:51,740 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:17:51,850 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2105526895] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:51,850 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-25 10:17:51,850 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [31, 13] total 42 [2024-09-25 10:17:51,850 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1934029522] [2024-09-25 10:17:51,850 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-25 10:17:51,851 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2024-09-25 10:17:51,851 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:51,851 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2024-09-25 10:17:51,852 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=175, Invalid=1631, Unknown=0, NotChecked=0, Total=1806 [2024-09-25 10:17:51,852 INFO L87 Difference]: Start difference. First operand 177 states and 246 transitions. Second operand has 42 states, 42 states have (on average 2.0) internal successors, (84), 39 states have internal predecessors, (84), 4 states have call successors, (8), 7 states have call predecessors, (8), 5 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2024-09-25 10:17:56,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:56,245 INFO L93 Difference]: Finished difference Result 532 states and 764 transitions. [2024-09-25 10:17:56,245 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 83 states. [2024-09-25 10:17:56,245 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 42 states have (on average 2.0) internal successors, (84), 39 states have internal predecessors, (84), 4 states have call successors, (8), 7 states have call predecessors, (8), 5 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 74 [2024-09-25 10:17:56,246 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:56,248 INFO L225 Difference]: With dead ends: 532 [2024-09-25 10:17:56,248 INFO L226 Difference]: Without dead ends: 374 [2024-09-25 10:17:56,253 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 206 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 121 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4558 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=2068, Invalid=12938, Unknown=0, NotChecked=0, Total=15006 [2024-09-25 10:17:56,253 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 461 mSDsluCounter, 19 mSDsCounter, 0 mSdLazyCounter, 1346 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 462 SdHoareTripleChecker+Valid, 22 SdHoareTripleChecker+Invalid, 1413 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 1346 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:56,254 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [462 Valid, 22 Invalid, 1413 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 1346 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-09-25 10:17:56,254 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 374 states. [2024-09-25 10:17:56,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 374 to 269. [2024-09-25 10:17:56,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 269 states, 259 states have (on average 1.4517374517374517) internal successors, (376), 260 states have internal predecessors, (376), 5 states have call successors, (5), 5 states have call predecessors, (5), 4 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-25 10:17:56,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 269 states to 269 states and 385 transitions. [2024-09-25 10:17:56,390 INFO L78 Accepts]: Start accepts. Automaton has 269 states and 385 transitions. Word has length 74 [2024-09-25 10:17:56,390 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:56,390 INFO L474 AbstractCegarLoop]: Abstraction has 269 states and 385 transitions. [2024-09-25 10:17:56,391 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 42 states have (on average 2.0) internal successors, (84), 39 states have internal predecessors, (84), 4 states have call successors, (8), 7 states have call predecessors, (8), 5 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2024-09-25 10:17:56,391 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:56,391 INFO L276 IsEmpty]: Start isEmpty. Operand 269 states and 385 transitions. [2024-09-25 10:17:56,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2024-09-25 10:17:56,392 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:56,392 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 7, 5, 5, 5, 5, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:56,405 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2024-09-25 10:17:56,592 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2024-09-25 10:17:56,592 INFO L399 AbstractCegarLoop]: === Iteration 13 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:56,593 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:56,593 INFO L85 PathProgramCache]: Analyzing trace with hash -1688407464, now seen corresponding path program 3 times [2024-09-25 10:17:56,593 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:56,593 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1161274897] [2024-09-25 10:17:56,593 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:56,593 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:56,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:56,974 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:56,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:56,989 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:17:57,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:59,106 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-25 10:17:59,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:59,110 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 9 proven. 204 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-25 10:17:59,111 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:59,111 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1161274897] [2024-09-25 10:17:59,111 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1161274897] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:59,111 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1982280766] [2024-09-25 10:17:59,111 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-25 10:17:59,111 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:59,112 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:59,113 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:59,114 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-09-25 10:17:59,193 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2024-09-25 10:17:59,194 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:17:59,195 INFO L262 TraceCheckSpWp]: Trace formula consists of 177 conjuncts, 20 conjuncts are in the unsatisfiable core [2024-09-25 10:17:59,197 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:59,200 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2024-09-25 10:17:59,223 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 30 treesize of output 29 [2024-09-25 10:17:59,827 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 8 proven. 5 refuted. 0 times theorem prover too weak. 226 trivial. 0 not checked. [2024-09-25 10:17:59,828 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:00,065 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 10 proven. 3 refuted. 0 times theorem prover too weak. 226 trivial. 0 not checked. [2024-09-25 10:18:00,065 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1982280766] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:00,065 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:00,065 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [35, 11, 10] total 49 [2024-09-25 10:18:00,066 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1935174126] [2024-09-25 10:18:00,066 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:00,066 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2024-09-25 10:18:00,066 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:00,067 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2024-09-25 10:18:00,068 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=201, Invalid=2151, Unknown=0, NotChecked=0, Total=2352 [2024-09-25 10:18:00,068 INFO L87 Difference]: Start difference. First operand 269 states and 385 transitions. Second operand has 49 states, 47 states have (on average 2.106382978723404) internal successors, (99), 46 states have internal predecessors, (99), 9 states have call successors, (13), 7 states have call predecessors, (13), 4 states have return successors, (8), 7 states have call predecessors, (8), 7 states have call successors, (8) [2024-09-25 10:18:03,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:03,900 INFO L93 Difference]: Finished difference Result 466 states and 651 transitions. [2024-09-25 10:18:03,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2024-09-25 10:18:03,900 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 47 states have (on average 2.106382978723404) internal successors, (99), 46 states have internal predecessors, (99), 9 states have call successors, (13), 7 states have call predecessors, (13), 4 states have return successors, (8), 7 states have call predecessors, (8), 7 states have call successors, (8) Word has length 74 [2024-09-25 10:18:03,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:03,902 INFO L225 Difference]: With dead ends: 466 [2024-09-25 10:18:03,902 INFO L226 Difference]: Without dead ends: 416 [2024-09-25 10:18:03,906 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 250 GetRequests, 137 SyntacticMatches, 5 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3788 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=1199, Invalid=10791, Unknown=0, NotChecked=0, Total=11990 [2024-09-25 10:18:03,907 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 240 mSDsluCounter, 17 mSDsCounter, 0 mSdLazyCounter, 1496 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 240 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 1546 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 1496 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:03,908 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [240 Valid, 20 Invalid, 1546 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 1496 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-09-25 10:18:03,909 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 416 states. [2024-09-25 10:18:04,060 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 416 to 319. [2024-09-25 10:18:04,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 319 states, 307 states have (on average 1.4234527687296417) internal successors, (437), 308 states have internal predecessors, (437), 6 states have call successors, (6), 6 states have call predecessors, (6), 5 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-25 10:18:04,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 319 states to 319 states and 448 transitions. [2024-09-25 10:18:04,062 INFO L78 Accepts]: Start accepts. Automaton has 319 states and 448 transitions. Word has length 74 [2024-09-25 10:18:04,063 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:04,063 INFO L474 AbstractCegarLoop]: Abstraction has 319 states and 448 transitions. [2024-09-25 10:18:04,063 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 47 states have (on average 2.106382978723404) internal successors, (99), 46 states have internal predecessors, (99), 9 states have call successors, (13), 7 states have call predecessors, (13), 4 states have return successors, (8), 7 states have call predecessors, (8), 7 states have call successors, (8) [2024-09-25 10:18:04,063 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:04,063 INFO L276 IsEmpty]: Start isEmpty. Operand 319 states and 448 transitions. [2024-09-25 10:18:04,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2024-09-25 10:18:04,065 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:04,065 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 6, 5, 5, 5, 5, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:04,078 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2024-09-25 10:18:04,265 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2024-09-25 10:18:04,265 INFO L399 AbstractCegarLoop]: === Iteration 14 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:04,266 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:04,266 INFO L85 PathProgramCache]: Analyzing trace with hash 1248576269, now seen corresponding path program 4 times [2024-09-25 10:18:04,266 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:04,266 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1787970287] [2024-09-25 10:18:04,266 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:04,266 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:04,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:04,739 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:04,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:04,757 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:18:04,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:05,607 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-25 10:18:05,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:05,609 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2024-09-25 10:18:05,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:05,613 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 4 proven. 163 refuted. 0 times theorem prover too weak. 83 trivial. 0 not checked. [2024-09-25 10:18:05,613 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:05,614 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1787970287] [2024-09-25 10:18:05,614 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1787970287] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:05,614 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1645042900] [2024-09-25 10:18:05,614 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-25 10:18:05,615 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:05,615 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:05,617 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:05,619 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-09-25 10:18:05,724 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-25 10:18:05,724 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:18:05,727 INFO L262 TraceCheckSpWp]: Trace formula consists of 273 conjuncts, 50 conjuncts are in the unsatisfiable core [2024-09-25 10:18:05,729 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:05,870 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:05,870 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 17 [2024-09-25 10:18:06,057 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:06,057 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 48 treesize of output 33 [2024-09-25 10:18:06,202 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:06,202 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 48 treesize of output 33 [2024-09-25 10:18:06,274 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:06,274 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 36 treesize of output 12 [2024-09-25 10:18:06,299 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 49 proven. 165 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2024-09-25 10:18:06,299 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:06,774 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 145 proven. 51 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2024-09-25 10:18:06,774 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1645042900] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:06,774 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:06,775 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 21, 14] total 51 [2024-09-25 10:18:06,775 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [973850633] [2024-09-25 10:18:06,775 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:06,775 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2024-09-25 10:18:06,775 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:06,776 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2024-09-25 10:18:06,777 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=180, Invalid=2370, Unknown=0, NotChecked=0, Total=2550 [2024-09-25 10:18:06,777 INFO L87 Difference]: Start difference. First operand 319 states and 448 transitions. Second operand has 51 states, 51 states have (on average 2.4705882352941178) internal successors, (126), 49 states have internal predecessors, (126), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2024-09-25 10:18:15,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:15,941 INFO L93 Difference]: Finished difference Result 1288 states and 1838 transitions. [2024-09-25 10:18:15,942 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 134 states. [2024-09-25 10:18:15,942 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 51 states have (on average 2.4705882352941178) internal successors, (126), 49 states have internal predecessors, (126), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 81 [2024-09-25 10:18:15,942 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:15,947 INFO L225 Difference]: With dead ends: 1288 [2024-09-25 10:18:15,947 INFO L226 Difference]: Without dead ends: 1023 [2024-09-25 10:18:15,951 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 318 GetRequests, 139 SyntacticMatches, 0 SemanticMatches, 179 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11173 ImplicationChecksByTransitivity, 7.9s TimeCoverageRelationStatistics Valid=2783, Invalid=29797, Unknown=0, NotChecked=0, Total=32580 [2024-09-25 10:18:15,952 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 844 mSDsluCounter, 23 mSDsCounter, 0 mSdLazyCounter, 3016 mSolverCounterSat, 80 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 845 SdHoareTripleChecker+Valid, 26 SdHoareTripleChecker+Invalid, 3096 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 80 IncrementalHoareTripleChecker+Valid, 3016 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:15,952 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [845 Valid, 26 Invalid, 3096 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [80 Valid, 3016 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2024-09-25 10:18:15,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1023 states. [2024-09-25 10:18:16,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1023 to 568. [2024-09-25 10:18:16,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 568 states, 556 states have (on average 1.4550359712230216) internal successors, (809), 557 states have internal predecessors, (809), 6 states have call successors, (6), 6 states have call predecessors, (6), 5 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-25 10:18:16,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 568 states to 568 states and 820 transitions. [2024-09-25 10:18:16,296 INFO L78 Accepts]: Start accepts. Automaton has 568 states and 820 transitions. Word has length 81 [2024-09-25 10:18:16,296 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:16,297 INFO L474 AbstractCegarLoop]: Abstraction has 568 states and 820 transitions. [2024-09-25 10:18:16,297 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 51 states have (on average 2.4705882352941178) internal successors, (126), 49 states have internal predecessors, (126), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2024-09-25 10:18:16,297 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:16,297 INFO L276 IsEmpty]: Start isEmpty. Operand 568 states and 820 transitions. [2024-09-25 10:18:16,299 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2024-09-25 10:18:16,299 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:16,299 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 5, 5, 5, 5, 5, 5, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:16,315 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2024-09-25 10:18:16,500 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2024-09-25 10:18:16,500 INFO L399 AbstractCegarLoop]: === Iteration 15 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:16,500 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:16,500 INFO L85 PathProgramCache]: Analyzing trace with hash 1736737935, now seen corresponding path program 5 times [2024-09-25 10:18:16,500 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:16,501 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [458253866] [2024-09-25 10:18:16,501 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:16,501 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:16,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:16,786 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:16,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:16,798 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:18:16,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:17,932 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-25 10:18:17,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:17,934 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2024-09-25 10:18:17,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:17,936 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 82 proven. 133 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2024-09-25 10:18:17,936 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:17,936 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [458253866] [2024-09-25 10:18:17,936 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [458253866] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:17,936 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1330877680] [2024-09-25 10:18:17,936 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-25 10:18:17,937 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:17,937 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:17,938 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:17,940 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2024-09-25 10:18:18,034 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 8 check-sat command(s) [2024-09-25 10:18:18,034 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:18:18,035 INFO L262 TraceCheckSpWp]: Trace formula consists of 116 conjuncts, 38 conjuncts are in the unsatisfiable core [2024-09-25 10:18:18,037 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:18,278 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:18,278 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 65 treesize of output 41 [2024-09-25 10:18:18,379 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:18,380 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 48 treesize of output 12 [2024-09-25 10:18:18,404 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 148 proven. 46 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2024-09-25 10:18:18,405 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:18,898 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 109 treesize of output 93 [2024-09-25 10:18:18,941 INFO L349 Elim1Store]: treesize reduction 13, result has 80.0 percent of original size [2024-09-25 10:18:18,941 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 113 treesize of output 112 [2024-09-25 10:18:19,154 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 158 proven. 30 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2024-09-25 10:18:19,155 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1330877680] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:19,155 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:19,155 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30, 16, 14] total 54 [2024-09-25 10:18:19,155 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2100489880] [2024-09-25 10:18:19,155 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:19,156 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2024-09-25 10:18:19,156 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:19,157 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2024-09-25 10:18:19,157 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=269, Invalid=2593, Unknown=0, NotChecked=0, Total=2862 [2024-09-25 10:18:19,158 INFO L87 Difference]: Start difference. First operand 568 states and 820 transitions. Second operand has 54 states, 54 states have (on average 2.037037037037037) internal successors, (110), 52 states have internal predecessors, (110), 3 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2024-09-25 10:18:29,439 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:29,440 INFO L93 Difference]: Finished difference Result 1950 states and 2785 transitions. [2024-09-25 10:18:29,440 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 162 states. [2024-09-25 10:18:29,441 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 2.037037037037037) internal successors, (110), 52 states have internal predecessors, (110), 3 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 81 [2024-09-25 10:18:29,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:29,450 INFO L225 Difference]: With dead ends: 1950 [2024-09-25 10:18:29,451 INFO L226 Difference]: Without dead ends: 1648 [2024-09-25 10:18:29,457 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 358 GetRequests, 147 SyntacticMatches, 1 SemanticMatches, 210 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15196 ImplicationChecksByTransitivity, 8.3s TimeCoverageRelationStatistics Valid=4514, Invalid=40218, Unknown=0, NotChecked=0, Total=44732 [2024-09-25 10:18:29,458 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 333 mSDsluCounter, 31 mSDsCounter, 0 mSdLazyCounter, 3029 mSolverCounterSat, 118 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 334 SdHoareTripleChecker+Valid, 34 SdHoareTripleChecker+Invalid, 3147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 118 IncrementalHoareTripleChecker+Valid, 3029 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:29,458 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [334 Valid, 34 Invalid, 3147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [118 Valid, 3029 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2024-09-25 10:18:29,460 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1648 states. [2024-09-25 10:18:30,191 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1648 to 1046. [2024-09-25 10:18:30,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1046 states, 1034 states have (on average 1.369439071566731) internal successors, (1416), 1035 states have internal predecessors, (1416), 6 states have call successors, (6), 6 states have call predecessors, (6), 5 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-25 10:18:30,196 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1046 states to 1046 states and 1427 transitions. [2024-09-25 10:18:30,198 INFO L78 Accepts]: Start accepts. Automaton has 1046 states and 1427 transitions. Word has length 81 [2024-09-25 10:18:30,199 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:30,199 INFO L474 AbstractCegarLoop]: Abstraction has 1046 states and 1427 transitions. [2024-09-25 10:18:30,199 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 2.037037037037037) internal successors, (110), 52 states have internal predecessors, (110), 3 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2024-09-25 10:18:30,199 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:30,199 INFO L276 IsEmpty]: Start isEmpty. Operand 1046 states and 1427 transitions. [2024-09-25 10:18:30,202 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2024-09-25 10:18:30,202 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:30,202 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 6, 5, 5, 5, 5, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:30,220 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2024-09-25 10:18:30,405 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2024-09-25 10:18:30,406 INFO L399 AbstractCegarLoop]: === Iteration 16 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:30,406 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:30,406 INFO L85 PathProgramCache]: Analyzing trace with hash 1342371149, now seen corresponding path program 6 times [2024-09-25 10:18:30,406 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:30,406 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [385251718] [2024-09-25 10:18:30,406 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:30,406 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:30,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:30,625 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:30,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:30,636 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:18:30,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:30,958 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-25 10:18:30,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:30,960 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2024-09-25 10:18:30,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:30,961 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 4 proven. 126 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2024-09-25 10:18:30,962 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:30,962 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [385251718] [2024-09-25 10:18:30,962 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [385251718] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:30,962 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [597693999] [2024-09-25 10:18:30,962 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-09-25 10:18:30,962 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:30,962 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:30,963 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:30,964 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2024-09-25 10:18:31,066 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 4 check-sat command(s) [2024-09-25 10:18:31,066 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:18:31,067 INFO L262 TraceCheckSpWp]: Trace formula consists of 171 conjuncts, 24 conjuncts are in the unsatisfiable core [2024-09-25 10:18:31,069 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:31,145 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:31,145 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 22 treesize of output 10 [2024-09-25 10:18:31,386 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 0 proven. 125 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2024-09-25 10:18:31,387 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:31,446 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [597693999] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:31,447 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-25 10:18:31,447 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 9] total 22 [2024-09-25 10:18:31,447 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1928857796] [2024-09-25 10:18:31,447 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:31,447 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-09-25 10:18:31,447 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:31,448 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-09-25 10:18:31,448 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=66, Invalid=440, Unknown=0, NotChecked=0, Total=506 [2024-09-25 10:18:31,448 INFO L87 Difference]: Start difference. First operand 1046 states and 1427 transitions. Second operand has 22 states, 22 states have (on average 2.8181818181818183) internal successors, (62), 19 states have internal predecessors, (62), 4 states have call successors, (8), 7 states have call predecessors, (8), 6 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2024-09-25 10:18:33,297 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:33,298 INFO L93 Difference]: Finished difference Result 2690 states and 3701 transitions. [2024-09-25 10:18:33,298 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2024-09-25 10:18:33,298 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 2.8181818181818183) internal successors, (62), 19 states have internal predecessors, (62), 4 states have call successors, (8), 7 states have call predecessors, (8), 6 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 81 [2024-09-25 10:18:33,298 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:33,304 INFO L225 Difference]: With dead ends: 2690 [2024-09-25 10:18:33,304 INFO L226 Difference]: Without dead ends: 790 [2024-09-25 10:18:33,307 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 136 GetRequests, 101 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 266 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=213, Invalid=1119, Unknown=0, NotChecked=0, Total=1332 [2024-09-25 10:18:33,308 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 129 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 550 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 5 SdHoareTripleChecker+Invalid, 564 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 550 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:33,308 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 5 Invalid, 564 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 550 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-09-25 10:18:33,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 790 states. [2024-09-25 10:18:33,800 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 790 to 790. [2024-09-25 10:18:33,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 778 states have (on average 1.3907455012853471) internal successors, (1082), 779 states have internal predecessors, (1082), 6 states have call successors, (6), 6 states have call predecessors, (6), 5 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-25 10:18:33,803 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 1093 transitions. [2024-09-25 10:18:33,806 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 1093 transitions. Word has length 81 [2024-09-25 10:18:33,806 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:33,807 INFO L474 AbstractCegarLoop]: Abstraction has 790 states and 1093 transitions. [2024-09-25 10:18:33,807 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 2.8181818181818183) internal successors, (62), 19 states have internal predecessors, (62), 4 states have call successors, (8), 7 states have call predecessors, (8), 6 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2024-09-25 10:18:33,807 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:33,807 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 1093 transitions. [2024-09-25 10:18:33,809 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2024-09-25 10:18:33,810 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:33,810 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 6, 5, 5, 5, 5, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:33,824 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2024-09-25 10:18:34,010 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2024-09-25 10:18:34,011 INFO L399 AbstractCegarLoop]: === Iteration 17 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:34,011 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:34,011 INFO L85 PathProgramCache]: Analyzing trace with hash 1136122385, now seen corresponding path program 7 times [2024-09-25 10:18:34,011 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:34,011 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [163971276] [2024-09-25 10:18:34,011 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:34,012 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:34,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:34,311 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:34,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:34,323 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:18:34,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:35,043 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-25 10:18:35,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:35,045 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2024-09-25 10:18:35,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:35,046 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 46 proven. 136 refuted. 0 times theorem prover too weak. 68 trivial. 0 not checked. [2024-09-25 10:18:35,046 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:35,046 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [163971276] [2024-09-25 10:18:35,046 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [163971276] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:35,048 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [639024536] [2024-09-25 10:18:35,048 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-09-25 10:18:35,048 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:35,048 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:35,050 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:35,052 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2024-09-25 10:18:35,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:35,163 INFO L262 TraceCheckSpWp]: Trace formula consists of 318 conjuncts, 30 conjuncts are in the unsatisfiable core [2024-09-25 10:18:35,165 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:35,458 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:35,458 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 36 treesize of output 27 [2024-09-25 10:18:35,523 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:35,523 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 12 [2024-09-25 10:18:35,549 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 49 proven. 134 refuted. 0 times theorem prover too weak. 67 trivial. 0 not checked. [2024-09-25 10:18:35,549 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:35,779 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 109 treesize of output 93 [2024-09-25 10:18:35,826 INFO L349 Elim1Store]: treesize reduction 5, result has 92.3 percent of original size [2024-09-25 10:18:35,827 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 105 treesize of output 112 [2024-09-25 10:18:36,001 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 130 proven. 9 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2024-09-25 10:18:36,001 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [639024536] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:36,001 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:36,002 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 14, 10] total 42 [2024-09-25 10:18:36,002 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1151433002] [2024-09-25 10:18:36,002 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:36,002 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2024-09-25 10:18:36,002 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:36,003 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2024-09-25 10:18:36,003 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=144, Invalid=1578, Unknown=0, NotChecked=0, Total=1722 [2024-09-25 10:18:36,004 INFO L87 Difference]: Start difference. First operand 790 states and 1093 transitions. Second operand has 42 states, 42 states have (on average 2.5714285714285716) internal successors, (108), 40 states have internal predecessors, (108), 4 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (8), 4 states have call predecessors, (8), 4 states have call successors, (8) [2024-09-25 10:18:39,293 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:39,294 INFO L93 Difference]: Finished difference Result 1707 states and 2354 transitions. [2024-09-25 10:18:39,294 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2024-09-25 10:18:39,294 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 42 states have (on average 2.5714285714285716) internal successors, (108), 40 states have internal predecessors, (108), 4 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (8), 4 states have call predecessors, (8), 4 states have call successors, (8) Word has length 81 [2024-09-25 10:18:39,294 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:39,300 INFO L225 Difference]: With dead ends: 1707 [2024-09-25 10:18:39,300 INFO L226 Difference]: Without dead ends: 1040 [2024-09-25 10:18:39,303 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 244 GetRequests, 153 SyntacticMatches, 0 SemanticMatches, 91 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2314 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=869, Invalid=7687, Unknown=0, NotChecked=0, Total=8556 [2024-09-25 10:18:39,304 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 302 mSDsluCounter, 12 mSDsCounter, 0 mSdLazyCounter, 1647 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 302 SdHoareTripleChecker+Valid, 15 SdHoareTripleChecker+Invalid, 1695 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 1647 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:39,304 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [302 Valid, 15 Invalid, 1695 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 1647 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-09-25 10:18:39,305 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1040 states. [2024-09-25 10:18:39,906 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1040 to 863. [2024-09-25 10:18:39,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 863 states, 851 states have (on average 1.3748531139835487) internal successors, (1170), 852 states have internal predecessors, (1170), 6 states have call successors, (6), 6 states have call predecessors, (6), 5 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-25 10:18:39,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 863 states to 863 states and 1181 transitions. [2024-09-25 10:18:39,913 INFO L78 Accepts]: Start accepts. Automaton has 863 states and 1181 transitions. Word has length 81 [2024-09-25 10:18:39,914 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:39,914 INFO L474 AbstractCegarLoop]: Abstraction has 863 states and 1181 transitions. [2024-09-25 10:18:39,914 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 42 states have (on average 2.5714285714285716) internal successors, (108), 40 states have internal predecessors, (108), 4 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (8), 4 states have call predecessors, (8), 4 states have call successors, (8) [2024-09-25 10:18:39,914 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:39,915 INFO L276 IsEmpty]: Start isEmpty. Operand 863 states and 1181 transitions. [2024-09-25 10:18:39,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2024-09-25 10:18:39,917 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:39,917 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 8, 5, 5, 5, 5, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:39,936 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2024-09-25 10:18:40,118 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2024-09-25 10:18:40,118 INFO L399 AbstractCegarLoop]: === Iteration 18 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:40,118 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:40,119 INFO L85 PathProgramCache]: Analyzing trace with hash 2052240977, now seen corresponding path program 8 times [2024-09-25 10:18:40,119 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:40,119 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [639057155] [2024-09-25 10:18:40,119 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:40,119 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:40,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:40,449 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:40,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:40,460 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:18:40,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:41,708 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-25 10:18:41,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:41,710 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2024-09-25 10:18:41,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:41,711 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 9 proven. 202 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2024-09-25 10:18:41,712 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:41,712 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [639057155] [2024-09-25 10:18:41,712 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [639057155] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:41,712 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [259899205] [2024-09-25 10:18:41,712 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-25 10:18:41,712 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:41,712 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:41,713 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:41,714 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2024-09-25 10:18:41,817 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-25 10:18:41,818 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:18:41,819 INFO L262 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 51 conjuncts are in the unsatisfiable core [2024-09-25 10:18:41,821 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:41,880 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:41,880 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 15 treesize of output 7 [2024-09-25 10:18:43,097 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 0 proven. 205 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2024-09-25 10:18:43,097 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:43,331 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [259899205] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:43,331 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-25 10:18:43,331 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 20] total 44 [2024-09-25 10:18:43,331 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [807258751] [2024-09-25 10:18:43,331 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:43,332 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2024-09-25 10:18:43,332 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:43,332 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2024-09-25 10:18:43,333 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=178, Invalid=1802, Unknown=0, NotChecked=0, Total=1980 [2024-09-25 10:18:43,333 INFO L87 Difference]: Start difference. First operand 863 states and 1181 transitions. Second operand has 44 states, 44 states have (on average 2.340909090909091) internal successors, (103), 41 states have internal predecessors, (103), 4 states have call successors, (8), 7 states have call predecessors, (8), 6 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2024-09-25 10:18:56,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:56,919 INFO L93 Difference]: Finished difference Result 3464 states and 4829 transitions. [2024-09-25 10:18:56,920 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 138 states. [2024-09-25 10:18:56,920 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 2.340909090909091) internal successors, (103), 41 states have internal predecessors, (103), 4 states have call successors, (8), 7 states have call predecessors, (8), 6 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 81 [2024-09-25 10:18:56,920 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:56,929 INFO L225 Difference]: With dead ends: 3464 [2024-09-25 10:18:56,929 INFO L226 Difference]: Without dead ends: 1944 [2024-09-25 10:18:56,935 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 270 GetRequests, 92 SyntacticMatches, 0 SemanticMatches, 178 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11769 ImplicationChecksByTransitivity, 10.7s TimeCoverageRelationStatistics Valid=3323, Invalid=28897, Unknown=0, NotChecked=0, Total=32220 [2024-09-25 10:18:56,935 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 525 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 2331 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 526 SdHoareTripleChecker+Valid, 5 SdHoareTripleChecker+Invalid, 2390 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 2331 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:56,936 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [526 Valid, 5 Invalid, 2390 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 2331 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2024-09-25 10:18:56,938 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1944 states. [2024-09-25 10:18:58,286 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1944 to 1563. [2024-09-25 10:18:58,289 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1563 states, 1551 states have (on average 1.38749194068343) internal successors, (2152), 1552 states have internal predecessors, (2152), 6 states have call successors, (6), 6 states have call predecessors, (6), 5 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-25 10:18:58,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1563 states to 1563 states and 2163 transitions. [2024-09-25 10:18:58,300 INFO L78 Accepts]: Start accepts. Automaton has 1563 states and 2163 transitions. Word has length 81 [2024-09-25 10:18:58,300 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:58,300 INFO L474 AbstractCegarLoop]: Abstraction has 1563 states and 2163 transitions. [2024-09-25 10:18:58,301 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 44 states have (on average 2.340909090909091) internal successors, (103), 41 states have internal predecessors, (103), 4 states have call successors, (8), 7 states have call predecessors, (8), 6 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2024-09-25 10:18:58,301 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:58,301 INFO L276 IsEmpty]: Start isEmpty. Operand 1563 states and 2163 transitions. [2024-09-25 10:18:58,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2024-09-25 10:18:58,305 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:58,305 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 8, 5, 5, 5, 5, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:58,325 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2024-09-25 10:18:58,506 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2024-09-25 10:18:58,506 INFO L399 AbstractCegarLoop]: === Iteration 19 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:58,506 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:58,506 INFO L85 PathProgramCache]: Analyzing trace with hash 184241557, now seen corresponding path program 9 times [2024-09-25 10:18:58,506 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:58,507 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [717272959] [2024-09-25 10:18:58,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:58,507 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:58,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:58,861 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:58,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:58,874 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:18:58,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:01,122 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-25 10:19:01,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:01,125 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2024-09-25 10:19:01,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:01,128 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 10 proven. 212 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2024-09-25 10:19:01,128 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:19:01,128 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [717272959] [2024-09-25 10:19:01,128 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [717272959] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:19:01,128 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [242090670] [2024-09-25 10:19:01,128 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-25 10:19:01,129 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:19:01,129 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:19:01,130 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:19:01,131 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2024-09-25 10:19:01,247 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-09-25 10:19:01,247 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:19:01,249 INFO L262 TraceCheckSpWp]: Trace formula consists of 206 conjuncts, 28 conjuncts are in the unsatisfiable core [2024-09-25 10:19:01,251 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:19:01,337 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 10:19:01,383 INFO L349 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2024-09-25 10:19:01,383 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 20 [2024-09-25 10:19:01,474 INFO L349 Elim1Store]: treesize reduction 42, result has 28.8 percent of original size [2024-09-25 10:19:01,475 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 30 treesize of output 32 [2024-09-25 10:19:02,468 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 2 proven. 23 refuted. 0 times theorem prover too weak. 225 trivial. 0 not checked. [2024-09-25 10:19:02,468 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:19:02,831 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 14 [2024-09-25 10:19:02,833 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2024-09-25 10:19:02,932 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 4 proven. 22 refuted. 0 times theorem prover too weak. 224 trivial. 0 not checked. [2024-09-25 10:19:02,932 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [242090670] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:19:02,932 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:19:02,933 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [35, 15, 14] total 58 [2024-09-25 10:19:02,933 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1325999404] [2024-09-25 10:19:02,933 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:19:02,933 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 58 states [2024-09-25 10:19:02,933 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:19:02,934 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 58 interpolants. [2024-09-25 10:19:02,935 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=258, Invalid=3048, Unknown=0, NotChecked=0, Total=3306 [2024-09-25 10:19:02,935 INFO L87 Difference]: Start difference. First operand 1563 states and 2163 transitions. Second operand has 58 states, 56 states have (on average 2.0) internal successors, (112), 55 states have internal predecessors, (112), 11 states have call successors, (15), 7 states have call predecessors, (15), 4 states have return successors, (10), 9 states have call predecessors, (10), 9 states have call successors, (10) [2024-09-25 10:19:19,025 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:19:19,025 INFO L93 Difference]: Finished difference Result 2963 states and 4108 transitions. [2024-09-25 10:19:19,025 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 137 states. [2024-09-25 10:19:19,025 INFO L78 Accepts]: Start accepts. Automaton has has 58 states, 56 states have (on average 2.0) internal successors, (112), 55 states have internal predecessors, (112), 11 states have call successors, (15), 7 states have call predecessors, (15), 4 states have return successors, (10), 9 states have call predecessors, (10), 9 states have call successors, (10) Word has length 81 [2024-09-25 10:19:19,026 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:19:19,038 INFO L225 Difference]: With dead ends: 2963 [2024-09-25 10:19:19,038 INFO L226 Difference]: Without dead ends: 2618 [2024-09-25 10:19:19,042 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 338 GetRequests, 139 SyntacticMatches, 9 SemanticMatches, 190 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11932 ImplicationChecksByTransitivity, 13.4s TimeCoverageRelationStatistics Valid=4270, Invalid=32402, Unknown=0, NotChecked=0, Total=36672 [2024-09-25 10:19:19,043 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 313 mSDsluCounter, 27 mSDsCounter, 0 mSdLazyCounter, 3131 mSolverCounterSat, 130 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 313 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 3261 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 130 IncrementalHoareTripleChecker+Valid, 3131 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2024-09-25 10:19:19,044 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [313 Valid, 30 Invalid, 3261 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [130 Valid, 3131 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2024-09-25 10:19:19,047 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2618 states. [2024-09-25 10:19:21,097 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2618 to 2234. [2024-09-25 10:19:21,099 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2234 states, 2220 states have (on average 1.381981981981982) internal successors, (3068), 2221 states have internal predecessors, (3068), 7 states have call successors, (7), 7 states have call predecessors, (7), 6 states have return successors, (6), 5 states have call predecessors, (6), 6 states have call successors, (6) [2024-09-25 10:19:21,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2234 states to 2234 states and 3081 transitions. [2024-09-25 10:19:21,111 INFO L78 Accepts]: Start accepts. Automaton has 2234 states and 3081 transitions. Word has length 81 [2024-09-25 10:19:21,112 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:19:21,112 INFO L474 AbstractCegarLoop]: Abstraction has 2234 states and 3081 transitions. [2024-09-25 10:19:21,112 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 58 states, 56 states have (on average 2.0) internal successors, (112), 55 states have internal predecessors, (112), 11 states have call successors, (15), 7 states have call predecessors, (15), 4 states have return successors, (10), 9 states have call predecessors, (10), 9 states have call successors, (10) [2024-09-25 10:19:21,112 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:19:21,113 INFO L276 IsEmpty]: Start isEmpty. Operand 2234 states and 3081 transitions. [2024-09-25 10:19:21,118 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2024-09-25 10:19:21,118 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:19:21,118 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 9, 5, 5, 5, 5, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:19:21,137 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Ended with exit code 0 [2024-09-25 10:19:21,318 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,17 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:19:21,319 INFO L399 AbstractCegarLoop]: === Iteration 20 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:19:21,319 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:19:21,320 INFO L85 PathProgramCache]: Analyzing trace with hash 1521296884, now seen corresponding path program 10 times [2024-09-25 10:19:21,320 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:19:21,320 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [13673155] [2024-09-25 10:19:21,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:19:21,320 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:19:21,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:22,009 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:19:22,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:22,023 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:19:22,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:22,043 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-25 10:19:22,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:22,046 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2024-09-25 10:19:22,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:22,048 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2024-09-25 10:19:22,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:22,051 INFO L134 CoverageAnalysis]: Checked inductivity of 268 backedges. 7 proven. 29 refuted. 0 times theorem prover too weak. 232 trivial. 0 not checked. [2024-09-25 10:19:22,052 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:19:22,052 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [13673155] [2024-09-25 10:19:22,052 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [13673155] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:19:22,052 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1731800689] [2024-09-25 10:19:22,052 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-25 10:19:22,052 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:19:22,052 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:19:22,054 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:19:22,055 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2024-09-25 10:19:22,183 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-25 10:19:22,183 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:19:22,185 INFO L262 TraceCheckSpWp]: Trace formula consists of 277 conjuncts, 48 conjuncts are in the unsatisfiable core [2024-09-25 10:19:22,188 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:19:22,191 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2024-09-25 10:19:22,210 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 33 treesize of output 32 [2024-09-25 10:19:22,237 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:19:22,238 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 47 treesize of output 49 [2024-09-25 10:19:22,273 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:19:22,274 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 58 treesize of output 63 [2024-09-25 10:19:23,607 INFO L134 CoverageAnalysis]: Checked inductivity of 268 backedges. 17 proven. 90 refuted. 0 times theorem prover too weak. 161 trivial. 0 not checked. [2024-09-25 10:19:23,607 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:19:23,852 INFO L134 CoverageAnalysis]: Checked inductivity of 268 backedges. 14 proven. 21 refuted. 0 times theorem prover too weak. 233 trivial. 0 not checked. [2024-09-25 10:19:23,852 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1731800689] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:19:23,852 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:19:23,852 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 20, 14] total 45 [2024-09-25 10:19:23,853 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1594688512] [2024-09-25 10:19:23,853 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:19:23,853 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2024-09-25 10:19:23,853 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:19:23,854 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2024-09-25 10:19:23,855 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=249, Invalid=1731, Unknown=0, NotChecked=0, Total=1980 [2024-09-25 10:19:23,855 INFO L87 Difference]: Start difference. First operand 2234 states and 3081 transitions. Second operand has 45 states, 43 states have (on average 2.0232558139534884) internal successors, (87), 40 states have internal predecessors, (87), 16 states have call successors, (19), 7 states have call predecessors, (19), 4 states have return successors, (14), 14 states have call predecessors, (14), 13 states have call successors, (14) [2024-09-25 10:19:27,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:19:27,577 INFO L93 Difference]: Finished difference Result 2247 states and 3095 transitions. [2024-09-25 10:19:27,577 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2024-09-25 10:19:27,577 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 43 states have (on average 2.0232558139534884) internal successors, (87), 40 states have internal predecessors, (87), 16 states have call successors, (19), 7 states have call predecessors, (19), 4 states have return successors, (14), 14 states have call predecessors, (14), 13 states have call successors, (14) Word has length 88 [2024-09-25 10:19:27,578 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:19:27,587 INFO L225 Difference]: With dead ends: 2247 [2024-09-25 10:19:27,587 INFO L226 Difference]: Without dead ends: 2245 [2024-09-25 10:19:27,588 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 235 GetRequests, 153 SyntacticMatches, 7 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1638 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=825, Invalid=5027, Unknown=0, NotChecked=0, Total=5852 [2024-09-25 10:19:27,588 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 162 mSDsluCounter, 39 mSDsCounter, 0 mSdLazyCounter, 1009 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 162 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 1090 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 1009 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-25 10:19:27,589 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [162 Valid, 42 Invalid, 1090 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 1009 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-25 10:19:27,591 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2245 states. [2024-09-25 10:19:29,769 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2245 to 2241. [2024-09-25 10:19:29,771 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2241 states, 2225 states have (on average 1.381123595505618) internal successors, (3073), 2226 states have internal predecessors, (3073), 8 states have call successors, (8), 8 states have call predecessors, (8), 7 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-25 10:19:29,775 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2241 states to 2241 states and 3088 transitions. [2024-09-25 10:19:29,777 INFO L78 Accepts]: Start accepts. Automaton has 2241 states and 3088 transitions. Word has length 88 [2024-09-25 10:19:29,778 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:19:29,778 INFO L474 AbstractCegarLoop]: Abstraction has 2241 states and 3088 transitions. [2024-09-25 10:19:29,778 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 43 states have (on average 2.0232558139534884) internal successors, (87), 40 states have internal predecessors, (87), 16 states have call successors, (19), 7 states have call predecessors, (19), 4 states have return successors, (14), 14 states have call predecessors, (14), 13 states have call successors, (14) [2024-09-25 10:19:29,778 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:19:29,778 INFO L276 IsEmpty]: Start isEmpty. Operand 2241 states and 3088 transitions. [2024-09-25 10:19:29,783 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2024-09-25 10:19:29,783 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:19:29,783 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 9, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:19:29,801 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Ended with exit code 0 [2024-09-25 10:19:29,983 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,18 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:19:29,984 INFO L399 AbstractCegarLoop]: === Iteration 21 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:19:29,984 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:19:29,984 INFO L85 PathProgramCache]: Analyzing trace with hash -238741709, now seen corresponding path program 11 times [2024-09-25 10:19:29,984 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:19:29,984 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [578517044] [2024-09-25 10:19:29,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:19:29,984 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:19:30,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:30,431 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:19:30,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:30,442 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:19:30,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:32,267 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-25 10:19:32,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:32,269 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2024-09-25 10:19:32,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:32,270 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2024-09-25 10:19:32,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:32,272 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2024-09-25 10:19:32,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:32,274 INFO L134 CoverageAnalysis]: Checked inductivity of 293 backedges. 14 proven. 211 refuted. 0 times theorem prover too weak. 68 trivial. 0 not checked. [2024-09-25 10:19:32,275 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:19:32,275 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [578517044] [2024-09-25 10:19:32,275 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [578517044] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:19:32,275 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1650329586] [2024-09-25 10:19:32,275 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-25 10:19:32,275 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:19:32,275 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:19:32,277 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:19:32,278 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2024-09-25 10:19:32,527 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 12 check-sat command(s) [2024-09-25 10:19:32,528 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:19:32,530 INFO L262 TraceCheckSpWp]: Trace formula consists of 340 conjuncts, 33 conjuncts are in the unsatisfiable core [2024-09-25 10:19:32,532 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:19:32,562 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 10:19:32,594 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,594 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2024-09-25 10:19:32,643 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,643 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,644 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,646 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:19:32,646 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 30 treesize of output 32 [2024-09-25 10:19:32,712 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,713 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,713 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,715 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,716 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,716 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,718 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:19:32,718 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 6 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 39 treesize of output 44 [2024-09-25 10:19:32,794 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,796 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,796 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,797 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,798 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,799 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,799 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,800 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,801 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,801 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:19:32,803 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:19:32,803 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 10 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 48 treesize of output 56 [2024-09-25 10:19:35,524 INFO L134 CoverageAnalysis]: Checked inductivity of 293 backedges. 6 proven. 43 refuted. 0 times theorem prover too weak. 244 trivial. 0 not checked. [2024-09-25 10:19:35,524 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:19:36,171 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 21 [2024-09-25 10:19:36,174 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 38 treesize of output 34 [2024-09-25 10:19:36,214 INFO L134 CoverageAnalysis]: Checked inductivity of 293 backedges. 12 proven. 31 refuted. 0 times theorem prover too weak. 250 trivial. 0 not checked. [2024-09-25 10:19:36,214 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1650329586] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:19:36,214 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:19:36,215 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30, 17, 13] total 54 [2024-09-25 10:19:36,215 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1285088121] [2024-09-25 10:19:36,215 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:19:36,215 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2024-09-25 10:19:36,215 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:19:36,216 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2024-09-25 10:19:36,216 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=193, Invalid=2669, Unknown=0, NotChecked=0, Total=2862 [2024-09-25 10:19:36,216 INFO L87 Difference]: Start difference. First operand 2241 states and 3088 transitions. Second operand has 54 states, 52 states have (on average 2.269230769230769) internal successors, (118), 51 states have internal predecessors, (118), 15 states have call successors, (19), 7 states have call predecessors, (19), 4 states have return successors, (14), 13 states have call predecessors, (14), 13 states have call successors, (14) [2024-09-25 10:20:02,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:20:02,300 INFO L93 Difference]: Finished difference Result 3433 states and 4683 transitions. [2024-09-25 10:20:02,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 146 states. [2024-09-25 10:20:02,301 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 52 states have (on average 2.269230769230769) internal successors, (118), 51 states have internal predecessors, (118), 15 states have call successors, (19), 7 states have call predecessors, (19), 4 states have return successors, (14), 13 states have call predecessors, (14), 13 states have call successors, (14) Word has length 95 [2024-09-25 10:20:02,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:20:02,314 INFO L225 Difference]: With dead ends: 3433 [2024-09-25 10:20:02,314 INFO L226 Difference]: Without dead ends: 3040 [2024-09-25 10:20:02,317 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 375 GetRequests, 166 SyntacticMatches, 14 SemanticMatches, 195 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12789 ImplicationChecksByTransitivity, 21.4s TimeCoverageRelationStatistics Valid=4200, Invalid=34412, Unknown=0, NotChecked=0, Total=38612 [2024-09-25 10:20:02,318 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 244 mSDsluCounter, 33 mSDsCounter, 0 mSdLazyCounter, 4831 mSolverCounterSat, 116 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 244 SdHoareTripleChecker+Valid, 36 SdHoareTripleChecker+Invalid, 4947 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 116 IncrementalHoareTripleChecker+Valid, 4831 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2024-09-25 10:20:02,319 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [244 Valid, 36 Invalid, 4947 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [116 Valid, 4831 Invalid, 0 Unknown, 0 Unchecked, 3.1s Time] [2024-09-25 10:20:02,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3040 states. [2024-09-25 10:20:05,188 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3040 to 2557. [2024-09-25 10:20:05,190 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2557 states, 2539 states have (on average 1.3796770382040173) internal successors, (3503), 2540 states have internal predecessors, (3503), 9 states have call successors, (9), 9 states have call predecessors, (9), 8 states have return successors, (8), 7 states have call predecessors, (8), 8 states have call successors, (8) [2024-09-25 10:20:05,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2557 states to 2557 states and 3520 transitions. [2024-09-25 10:20:05,197 INFO L78 Accepts]: Start accepts. Automaton has 2557 states and 3520 transitions. Word has length 95 [2024-09-25 10:20:05,198 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:20:05,198 INFO L474 AbstractCegarLoop]: Abstraction has 2557 states and 3520 transitions. [2024-09-25 10:20:05,198 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 52 states have (on average 2.269230769230769) internal successors, (118), 51 states have internal predecessors, (118), 15 states have call successors, (19), 7 states have call predecessors, (19), 4 states have return successors, (14), 13 states have call predecessors, (14), 13 states have call successors, (14) [2024-09-25 10:20:05,199 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:05,199 INFO L276 IsEmpty]: Start isEmpty. Operand 2557 states and 3520 transitions. [2024-09-25 10:20:05,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2024-09-25 10:20:05,205 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:20:05,205 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 10, 6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:20:05,225 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2024-09-25 10:20:05,406 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2024-09-25 10:20:05,407 INFO L399 AbstractCegarLoop]: === Iteration 22 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:20:05,407 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:05,407 INFO L85 PathProgramCache]: Analyzing trace with hash -1785967466, now seen corresponding path program 1 times [2024-09-25 10:20:05,407 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:20:05,407 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [960745556] [2024-09-25 10:20:05,407 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:20:05,408 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:20:05,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:05,503 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:20:05,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:05,510 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 10:20:05,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:05,520 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-25 10:20:05,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:05,523 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2024-09-25 10:20:05,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:05,525 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2024-09-25 10:20:05,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:05,527 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2024-09-25 10:20:05,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:05,529 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2024-09-25 10:20:05,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:05,531 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 37 proven. 13 refuted. 0 times theorem prover too weak. 275 trivial. 0 not checked. [2024-09-25 10:20:05,531 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:20:05,532 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [960745556] [2024-09-25 10:20:05,532 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [960745556] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:20:05,532 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [433220255] [2024-09-25 10:20:05,532 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:20:05,532 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:20:05,532 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:20:05,534 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:20:05,535 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2024-09-25 10:20:05,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:05,657 INFO L262 TraceCheckSpWp]: Trace formula consists of 352 conjuncts, 7 conjuncts are in the unsatisfiable core [2024-09-25 10:20:05,659 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:20:05,679 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 275 trivial. 0 not checked. [2024-09-25 10:20:05,679 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-25 10:20:05,679 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [433220255] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 10:20:05,679 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-25 10:20:05,680 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [10] total 11 [2024-09-25 10:20:05,680 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1229285961] [2024-09-25 10:20:05,680 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 10:20:05,680 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-09-25 10:20:05,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:20:05,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-09-25 10:20:05,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2024-09-25 10:20:05,681 INFO L87 Difference]: Start difference. First operand 2557 states and 3520 transitions. Second operand has 8 states, 8 states have (on average 3.875) internal successors, (31), 8 states have internal predecessors, (31), 7 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 6 states have call predecessors, (7), 6 states have call successors, (7) [2024-09-25 10:20:08,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:20:08,436 INFO L93 Difference]: Finished difference Result 2559 states and 3522 transitions. [2024-09-25 10:20:08,437 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-25 10:20:08,437 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 3.875) internal successors, (31), 8 states have internal predecessors, (31), 7 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 6 states have call predecessors, (7), 6 states have call successors, (7) Word has length 102 [2024-09-25 10:20:08,437 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:20:08,442 INFO L225 Difference]: With dead ends: 2559 [2024-09-25 10:20:08,442 INFO L226 Difference]: Without dead ends: 0 [2024-09-25 10:20:08,446 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2024-09-25 10:20:08,446 INFO L434 NwaCegarLoop]: 30 mSDtfsCounter, 0 mSDsluCounter, 44 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-25 10:20:08,447 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 74 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-25 10:20:08,447 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-09-25 10:20:08,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-09-25 10:20:08,447 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-25 10:20:08,447 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-09-25 10:20:08,452 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 102 [2024-09-25 10:20:08,452 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:20:08,453 INFO L474 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-09-25 10:20:08,453 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 3.875) internal successors, (31), 8 states have internal predecessors, (31), 7 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 6 states have call predecessors, (7), 6 states have call successors, (7) [2024-09-25 10:20:08,453 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:08,453 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-09-25 10:20:08,453 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-09-25 10:20:08,456 INFO L785 garLoopResultBuilder]: Registering result SAFE for location __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-09-25 10:20:08,477 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2024-09-25 10:20:08,657 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2024-09-25 10:20:08,660 INFO L408 BasicCegarLoop]: Path program histogram: [11, 3, 2, 2, 1, 1, 1, 1] [2024-09-25 10:20:08,662 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-09-25 10:20:55,472 WARN L293 SmtUtils]: Spent 46.52s on a formula simplification. DAG size of input: 831 DAG size of output: 977 (called from [L 212] de.uni_freiburg.informatik.ultimate.lib.proofs.floydhoare.HoareAnnotationComposer.or)