./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/recursified_nla-digbench/recursified_ps4-ll.c --full-output --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --traceabstraction.encode.modifies.clause.in.ensures.clause.of.contracts true --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version fb1cb0b9 Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/recursified_nla-digbench/recursified_ps4-ll.c -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 35431d6758accd7fd2ee5ddf2b1a76a0fd5efeada0a27759fb5cb6b7d4ed3c08 --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --traceabstraction.encode.modifies.clause.in.ensures.clause.of.contracts true --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --- Real Ultimate output --- This is Ultimate 0.2.4-tmp.dk.referee-eval-fb1cb0b-m [2024-09-25 11:39:58,355 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-25 11:39:58,424 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-25 11:39:58,427 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-25 11:39:58,428 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-25 11:39:58,450 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-25 11:39:58,453 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-25 11:39:58,453 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-25 11:39:58,454 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-25 11:39:58,455 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-25 11:39:58,455 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-25 11:39:58,457 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-25 11:39:58,458 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-25 11:39:58,458 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-25 11:39:58,458 INFO L153 SettingsManager]: * Use SBE=true [2024-09-25 11:39:58,459 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-25 11:39:58,459 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-25 11:39:58,459 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-25 11:39:58,459 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-25 11:39:58,459 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-25 11:39:58,460 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-25 11:39:58,460 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-25 11:39:58,463 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-25 11:39:58,463 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-25 11:39:58,463 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-25 11:39:58,463 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-25 11:39:58,464 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-25 11:39:58,464 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-25 11:39:58,464 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-25 11:39:58,464 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-25 11:39:58,464 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-25 11:39:58,464 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-25 11:39:58,464 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-25 11:39:58,465 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-25 11:39:58,465 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-25 11:39:58,465 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-25 11:39:58,465 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-25 11:39:58,465 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-25 11:39:58,465 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-25 11:39:58,465 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-25 11:39:58,465 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-25 11:39:58,466 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-25 11:39:58,466 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 35431d6758accd7fd2ee5ddf2b1a76a0fd5efeada0a27759fb5cb6b7d4ed3c08 Applying setting for plugin de.uni_freiburg.informatik.ultimate.boogie.procedureinliner: Inline calls to implemented procedures -> NEVER Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Encode 'modifies' clause in 'ensures' clause of contracts -> true Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Generate GraphML witnesses -> false [2024-09-25 11:39:58,743 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-25 11:39:58,764 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-25 11:39:58,766 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-25 11:39:58,767 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-25 11:39:58,768 INFO L274 PluginConnector]: CDTParser initialized [2024-09-25 11:39:58,769 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/recursified_nla-digbench/recursified_ps4-ll.c [2024-09-25 11:40:00,047 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-25 11:40:00,195 INFO L384 CDTParser]: Found 1 translation units. [2024-09-25 11:40:00,195 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_ps4-ll.c [2024-09-25 11:40:00,202 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/9d3fe236d/244a42610405449193f1885dc7507110/FLAG7126768c7 [2024-09-25 11:40:00,216 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/9d3fe236d/244a42610405449193f1885dc7507110 [2024-09-25 11:40:00,219 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-25 11:40:00,220 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-09-25 11:40:00,221 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-25 11:40:00,222 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-25 11:40:00,226 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-25 11:40:00,227 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.09 11:40:00" (1/1) ... [2024-09-25 11:40:00,228 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@56052467 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00, skipping insertion in model container [2024-09-25 11:40:00,229 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.09 11:40:00" (1/1) ... [2024-09-25 11:40:00,247 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-25 11:40:00,378 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_ps4-ll.c[987,1000] [2024-09-25 11:40:00,398 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-25 11:40:00,415 INFO L200 MainTranslator]: Completed pre-run [2024-09-25 11:40:00,426 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_ps4-ll.c[987,1000] [2024-09-25 11:40:00,440 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-25 11:40:00,455 INFO L204 MainTranslator]: Completed translation [2024-09-25 11:40:00,456 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00 WrapperNode [2024-09-25 11:40:00,456 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-25 11:40:00,457 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-25 11:40:00,458 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-25 11:40:00,458 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-25 11:40:00,464 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00" (1/1) ... [2024-09-25 11:40:00,471 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00" (1/1) ... [2024-09-25 11:40:00,478 INFO L138 Inliner]: procedures = 16, calls = 63, calls flagged for inlining = 0, calls inlined = 0, statements flattened = 0 [2024-09-25 11:40:00,478 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-25 11:40:00,479 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-25 11:40:00,479 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-25 11:40:00,479 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-25 11:40:00,487 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00" (1/1) ... [2024-09-25 11:40:00,487 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00" (1/1) ... [2024-09-25 11:40:00,494 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00" (1/1) ... [2024-09-25 11:40:00,512 INFO L175 MemorySlicer]: Split 41 memory accesses to 5 slices as follows [2, 3, 27, 5, 4]. 66 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2, 0, 0, 0, 0]. The 7 writes are split as follows [0, 1, 2, 2, 2]. [2024-09-25 11:40:00,512 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00" (1/1) ... [2024-09-25 11:40:00,512 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00" (1/1) ... [2024-09-25 11:40:00,518 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00" (1/1) ... [2024-09-25 11:40:00,524 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00" (1/1) ... [2024-09-25 11:40:00,526 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00" (1/1) ... [2024-09-25 11:40:00,528 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00" (1/1) ... [2024-09-25 11:40:00,530 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-25 11:40:00,531 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-25 11:40:00,531 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-25 11:40:00,531 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-25 11:40:00,532 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00" (1/1) ... [2024-09-25 11:40:00,540 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-25 11:40:00,553 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:00,573 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-25 11:40:00,576 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-25 11:40:00,609 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-25 11:40:00,610 INFO L130 BoogieDeclarations]: Found specification of procedure main [2024-09-25 11:40:00,610 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2024-09-25 11:40:00,610 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-09-25 11:40:00,610 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-09-25 11:40:00,610 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-09-25 11:40:00,610 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-09-25 11:40:00,610 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-09-25 11:40:00,610 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-09-25 11:40:00,610 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-09-25 11:40:00,610 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-09-25 11:40:00,610 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2024-09-25 11:40:00,610 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2024-09-25 11:40:00,610 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2024-09-25 11:40:00,611 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2024-09-25 11:40:00,611 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2024-09-25 11:40:00,611 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-25 11:40:00,611 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-25 11:40:00,611 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-09-25 11:40:00,611 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-09-25 11:40:00,611 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2024-09-25 11:40:00,613 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2024-09-25 11:40:00,613 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2024-09-25 11:40:00,613 INFO L130 BoogieDeclarations]: Found specification of procedure func_to_recursive_line_26_to_34_0 [2024-09-25 11:40:00,613 INFO L138 BoogieDeclarations]: Found implementation of procedure func_to_recursive_line_26_to_34_0 [2024-09-25 11:40:00,613 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-25 11:40:00,613 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-25 11:40:00,613 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-09-25 11:40:00,700 INFO L241 CfgBuilder]: Building ICFG [2024-09-25 11:40:00,702 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-25 11:40:00,918 INFO L? ?]: Removed 6 outVars from TransFormulas that were not future-live. [2024-09-25 11:40:00,919 INFO L290 CfgBuilder]: Performing block encoding [2024-09-25 11:40:00,938 INFO L312 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-25 11:40:00,940 INFO L317 CfgBuilder]: Removed 1 assume(true) statements. [2024-09-25 11:40:00,940 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.09 11:40:00 BoogieIcfgContainer [2024-09-25 11:40:00,940 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-25 11:40:00,942 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-25 11:40:00,942 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-25 11:40:00,945 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-25 11:40:00,945 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.09 11:40:00" (1/3) ... [2024-09-25 11:40:00,946 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4cd0a9d2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.09 11:40:00, skipping insertion in model container [2024-09-25 11:40:00,946 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:00" (2/3) ... [2024-09-25 11:40:00,946 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4cd0a9d2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.09 11:40:00, skipping insertion in model container [2024-09-25 11:40:00,946 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.09 11:40:00" (3/3) ... [2024-09-25 11:40:00,948 INFO L112 eAbstractionObserver]: Analyzing ICFG recursified_ps4-ll.c [2024-09-25 11:40:00,962 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-25 11:40:00,962 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-09-25 11:40:01,018 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-25 11:40:01,025 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5937324e, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-25 11:40:01,026 INFO L337 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-09-25 11:40:01,029 INFO L276 IsEmpty]: Start isEmpty. Operand has 28 states, 15 states have (on average 1.2666666666666666) internal successors, (19), 17 states have internal predecessors, (19), 7 states have call successors, (7), 4 states have call predecessors, (7), 4 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-25 11:40:01,035 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2024-09-25 11:40:01,035 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:01,036 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:01,036 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:01,042 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:01,043 INFO L85 PathProgramCache]: Analyzing trace with hash -185093150, now seen corresponding path program 1 times [2024-09-25 11:40:01,050 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:01,051 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1666193222] [2024-09-25 11:40:01,051 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:01,051 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:01,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:01,182 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [274631237] [2024-09-25 11:40:01,182 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:01,182 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:01,183 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:01,184 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:01,185 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-25 11:40:01,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:01,303 INFO L262 TraceCheckSpWp]: Trace formula consists of 165 conjuncts, 37 conjuncts are in the unsatisfiable core [2024-09-25 11:40:01,310 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:01,359 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:01,368 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:01,491 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 11:40:01,491 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-25 11:40:01,491 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:01,491 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1666193222] [2024-09-25 11:40:01,491 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:01,492 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [274631237] [2024-09-25 11:40:01,492 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [274631237] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 11:40:01,492 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-25 11:40:01,492 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-09-25 11:40:01,494 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1359491343] [2024-09-25 11:40:01,495 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 11:40:01,498 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-09-25 11:40:01,499 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:01,530 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-09-25 11:40:01,531 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2024-09-25 11:40:01,533 INFO L87 Difference]: Start difference. First operand has 28 states, 15 states have (on average 1.2666666666666666) internal successors, (19), 17 states have internal predecessors, (19), 7 states have call successors, (7), 4 states have call predecessors, (7), 4 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) Second operand has 8 states, 6 states have (on average 1.1666666666666667) internal successors, (7), 6 states have internal predecessors, (7), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 11:40:01,714 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:01,714 INFO L93 Difference]: Finished difference Result 64 states and 84 transitions. [2024-09-25 11:40:01,719 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-25 11:40:01,720 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 1.1666666666666667) internal successors, (7), 6 states have internal predecessors, (7), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 12 [2024-09-25 11:40:01,720 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:01,725 INFO L225 Difference]: With dead ends: 64 [2024-09-25 11:40:01,725 INFO L226 Difference]: Without dead ends: 38 [2024-09-25 11:40:01,733 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2024-09-25 11:40:01,740 INFO L434 NwaCegarLoop]: 20 mSDtfsCounter, 13 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 91 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 95 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 91 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:01,740 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 124 Invalid, 95 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 91 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 11:40:01,772 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2024-09-25 11:40:01,807 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 35. [2024-09-25 11:40:01,808 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 21 states have (on average 1.1428571428571428) internal successors, (24), 23 states have internal predecessors, (24), 8 states have call successors, (8), 6 states have call predecessors, (8), 5 states have return successors, (7), 6 states have call predecessors, (7), 6 states have call successors, (7) [2024-09-25 11:40:01,812 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 39 transitions. [2024-09-25 11:40:01,814 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 39 transitions. Word has length 12 [2024-09-25 11:40:01,814 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:01,815 INFO L474 AbstractCegarLoop]: Abstraction has 35 states and 39 transitions. [2024-09-25 11:40:01,815 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 1.1666666666666667) internal successors, (7), 6 states have internal predecessors, (7), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 11:40:01,815 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:01,815 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 39 transitions. [2024-09-25 11:40:01,816 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2024-09-25 11:40:01,817 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:01,817 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:01,830 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-09-25 11:40:02,020 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable0 [2024-09-25 11:40:02,021 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:02,021 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:02,021 INFO L85 PathProgramCache]: Analyzing trace with hash -2020592497, now seen corresponding path program 1 times [2024-09-25 11:40:02,022 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:02,022 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1962135829] [2024-09-25 11:40:02,022 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:02,022 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:02,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:02,085 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1528509369] [2024-09-25 11:40:02,087 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:02,087 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:02,087 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:02,089 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:02,090 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-25 11:40:02,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:02,178 INFO L262 TraceCheckSpWp]: Trace formula consists of 249 conjuncts, 87 conjuncts are in the unsatisfiable core [2024-09-25 11:40:02,181 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:02,189 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:02,194 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:02,357 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:02,364 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:02,528 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 11:40:02,528 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:40:02,731 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-25 11:40:02,731 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:02,732 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1962135829] [2024-09-25 11:40:02,732 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:02,732 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1528509369] [2024-09-25 11:40:02,732 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1528509369] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 11:40:02,732 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-25 11:40:02,732 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 8] total 15 [2024-09-25 11:40:02,732 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1918275966] [2024-09-25 11:40:02,733 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-25 11:40:02,733 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2024-09-25 11:40:02,733 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:02,735 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2024-09-25 11:40:02,736 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2024-09-25 11:40:02,736 INFO L87 Difference]: Start difference. First operand 35 states and 39 transitions. Second operand has 15 states, 11 states have (on average 2.090909090909091) internal successors, (23), 11 states have internal predecessors, (23), 8 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-25 11:40:03,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:03,210 INFO L93 Difference]: Finished difference Result 65 states and 72 transitions. [2024-09-25 11:40:03,211 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2024-09-25 11:40:03,211 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 11 states have (on average 2.090909090909091) internal successors, (23), 11 states have internal predecessors, (23), 8 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 22 [2024-09-25 11:40:03,211 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:03,213 INFO L225 Difference]: With dead ends: 65 [2024-09-25 11:40:03,213 INFO L226 Difference]: Without dead ends: 63 [2024-09-25 11:40:03,213 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 27 SyntacticMatches, 3 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 53 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=98, Invalid=454, Unknown=0, NotChecked=0, Total=552 [2024-09-25 11:40:03,217 INFO L434 NwaCegarLoop]: 20 mSDtfsCounter, 46 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 169 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 185 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 169 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:03,218 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 129 Invalid, 185 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 169 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-25 11:40:03,219 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2024-09-25 11:40:03,234 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 51. [2024-09-25 11:40:03,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 31 states have (on average 1.1290322580645162) internal successors, (35), 34 states have internal predecessors, (35), 10 states have call successors, (10), 8 states have call predecessors, (10), 9 states have return successors, (13), 9 states have call predecessors, (13), 8 states have call successors, (13) [2024-09-25 11:40:03,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 58 transitions. [2024-09-25 11:40:03,236 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 58 transitions. Word has length 22 [2024-09-25 11:40:03,236 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:03,237 INFO L474 AbstractCegarLoop]: Abstraction has 51 states and 58 transitions. [2024-09-25 11:40:03,237 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 11 states have (on average 2.090909090909091) internal successors, (23), 11 states have internal predecessors, (23), 8 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-25 11:40:03,237 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:03,239 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 58 transitions. [2024-09-25 11:40:03,239 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2024-09-25 11:40:03,239 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:03,240 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:03,255 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2024-09-25 11:40:03,440 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:03,440 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:03,441 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:03,441 INFO L85 PathProgramCache]: Analyzing trace with hash 1466132055, now seen corresponding path program 1 times [2024-09-25 11:40:03,441 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:03,441 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1871930452] [2024-09-25 11:40:03,441 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:03,441 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:03,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:03,478 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [981817333] [2024-09-25 11:40:03,478 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:03,478 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:03,478 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:03,482 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:03,483 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-25 11:40:03,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:03,549 INFO L262 TraceCheckSpWp]: Trace formula consists of 189 conjuncts, 11 conjuncts are in the unsatisfiable core [2024-09-25 11:40:03,551 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:03,554 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:03,603 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 11:40:03,604 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-25 11:40:03,604 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:03,604 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1871930452] [2024-09-25 11:40:03,604 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:03,604 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [981817333] [2024-09-25 11:40:03,604 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [981817333] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 11:40:03,604 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-25 11:40:03,604 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-09-25 11:40:03,605 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [514276293] [2024-09-25 11:40:03,605 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 11:40:03,605 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-09-25 11:40:03,605 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:03,605 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-09-25 11:40:03,605 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-09-25 11:40:03,606 INFO L87 Difference]: Start difference. First operand 51 states and 58 transitions. Second operand has 7 states, 6 states have (on average 2.3333333333333335) internal successors, (14), 6 states have internal predecessors, (14), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-25 11:40:03,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:03,734 INFO L93 Difference]: Finished difference Result 62 states and 69 transitions. [2024-09-25 11:40:03,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-09-25 11:40:03,735 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 2.3333333333333335) internal successors, (14), 6 states have internal predecessors, (14), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 22 [2024-09-25 11:40:03,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:03,736 INFO L225 Difference]: With dead ends: 62 [2024-09-25 11:40:03,736 INFO L226 Difference]: Without dead ends: 60 [2024-09-25 11:40:03,737 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2024-09-25 11:40:03,737 INFO L434 NwaCegarLoop]: 13 mSDtfsCounter, 10 mSDsluCounter, 42 mSDsCounter, 0 mSdLazyCounter, 99 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 55 SdHoareTripleChecker+Invalid, 108 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 99 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:03,738 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 55 Invalid, 108 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 99 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 11:40:03,738 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2024-09-25 11:40:03,758 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 59. [2024-09-25 11:40:03,758 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 36 states have (on average 1.1111111111111112) internal successors, (40), 39 states have internal predecessors, (40), 11 states have call successors, (11), 9 states have call predecessors, (11), 11 states have return successors, (15), 10 states have call predecessors, (15), 9 states have call successors, (15) [2024-09-25 11:40:03,759 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 66 transitions. [2024-09-25 11:40:03,759 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 66 transitions. Word has length 22 [2024-09-25 11:40:03,759 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:03,759 INFO L474 AbstractCegarLoop]: Abstraction has 59 states and 66 transitions. [2024-09-25 11:40:03,759 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 2.3333333333333335) internal successors, (14), 6 states have internal predecessors, (14), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-25 11:40:03,760 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:03,760 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 66 transitions. [2024-09-25 11:40:03,760 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2024-09-25 11:40:03,760 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:03,760 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:03,777 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-09-25 11:40:03,964 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable2 [2024-09-25 11:40:03,965 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:03,965 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:03,965 INFO L85 PathProgramCache]: Analyzing trace with hash 249164484, now seen corresponding path program 1 times [2024-09-25 11:40:03,965 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:03,965 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1712011555] [2024-09-25 11:40:03,965 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:03,966 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:04,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:04,004 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [380353780] [2024-09-25 11:40:04,005 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:04,005 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:04,005 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:04,009 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:04,011 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-25 11:40:04,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:04,078 INFO L262 TraceCheckSpWp]: Trace formula consists of 218 conjuncts, 21 conjuncts are in the unsatisfiable core [2024-09-25 11:40:04,081 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:04,084 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:04,087 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:04,194 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 11:40:04,194 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:40:05,961 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:05,961 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1712011555] [2024-09-25 11:40:05,961 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:05,961 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [380353780] [2024-09-25 11:40:05,961 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [380353780] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:40:05,962 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:40:05,962 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8] total 8 [2024-09-25 11:40:05,962 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [436163543] [2024-09-25 11:40:05,962 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:40:05,964 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-09-25 11:40:05,964 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:05,965 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-09-25 11:40:05,965 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2024-09-25 11:40:05,966 INFO L87 Difference]: Start difference. First operand 59 states and 66 transitions. Second operand has 8 states, 7 states have (on average 2.5714285714285716) internal successors, (18), 7 states have internal predecessors, (18), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-09-25 11:40:06,194 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:06,195 INFO L93 Difference]: Finished difference Result 67 states and 73 transitions. [2024-09-25 11:40:06,195 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-25 11:40:06,195 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 2.5714285714285716) internal successors, (18), 7 states have internal predecessors, (18), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 28 [2024-09-25 11:40:06,196 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:06,196 INFO L225 Difference]: With dead ends: 67 [2024-09-25 11:40:06,196 INFO L226 Difference]: Without dead ends: 51 [2024-09-25 11:40:06,197 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 35 SyntacticMatches, 4 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=42, Invalid=114, Unknown=0, NotChecked=0, Total=156 [2024-09-25 11:40:06,198 INFO L434 NwaCegarLoop]: 13 mSDtfsCounter, 18 mSDsluCounter, 51 mSDsCounter, 0 mSdLazyCounter, 114 mSolverCounterSat, 13 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 64 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 114 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:06,200 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 64 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 114 Invalid, 1 Unknown, 0 Unchecked, 0.2s Time] [2024-09-25 11:40:06,201 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2024-09-25 11:40:06,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2024-09-25 11:40:06,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 31 states have (on average 1.096774193548387) internal successors, (34), 33 states have internal predecessors, (34), 10 states have call successors, (10), 8 states have call predecessors, (10), 9 states have return successors, (13), 9 states have call predecessors, (13), 8 states have call successors, (13) [2024-09-25 11:40:06,217 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 57 transitions. [2024-09-25 11:40:06,220 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 57 transitions. Word has length 28 [2024-09-25 11:40:06,220 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:06,220 INFO L474 AbstractCegarLoop]: Abstraction has 51 states and 57 transitions. [2024-09-25 11:40:06,221 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 2.5714285714285716) internal successors, (18), 7 states have internal predecessors, (18), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-09-25 11:40:06,221 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:06,221 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 57 transitions. [2024-09-25 11:40:06,222 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2024-09-25 11:40:06,223 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:06,223 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:06,237 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2024-09-25 11:40:06,423 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:06,424 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:06,424 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:06,424 INFO L85 PathProgramCache]: Analyzing trace with hash 846345899, now seen corresponding path program 1 times [2024-09-25 11:40:06,424 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:06,424 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1108931707] [2024-09-25 11:40:06,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:06,425 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:06,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:06,470 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [596278532] [2024-09-25 11:40:06,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:06,470 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:06,471 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:06,472 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:06,474 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-25 11:40:06,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:06,576 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 87 conjuncts are in the unsatisfiable core [2024-09-25 11:40:06,580 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:06,588 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:06,592 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:40:06,596 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:06,803 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-25 11:40:06,967 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:07,034 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-09-25 11:40:07,035 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:40:07,777 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 53 treesize of output 49 [2024-09-25 11:40:07,783 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 49 treesize of output 33 [2024-09-25 11:40:16,129 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:16,130 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1108931707] [2024-09-25 11:40:16,130 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:16,130 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [596278532] [2024-09-25 11:40:16,130 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [596278532] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:40:16,130 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:40:16,130 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15] total 15 [2024-09-25 11:40:16,130 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [177013759] [2024-09-25 11:40:16,131 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:40:16,131 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2024-09-25 11:40:16,131 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:16,131 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2024-09-25 11:40:16,132 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=437, Unknown=1, NotChecked=0, Total=506 [2024-09-25 11:40:16,132 INFO L87 Difference]: Start difference. First operand 51 states and 57 transitions. Second operand has 15 states, 12 states have (on average 1.5) internal successors, (18), 12 states have internal predecessors, (18), 6 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-25 11:40:16,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:16,536 INFO L93 Difference]: Finished difference Result 60 states and 66 transitions. [2024-09-25 11:40:16,536 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-09-25 11:40:16,536 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 12 states have (on average 1.5) internal successors, (18), 12 states have internal predecessors, (18), 6 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 34 [2024-09-25 11:40:16,536 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:16,537 INFO L225 Difference]: With dead ends: 60 [2024-09-25 11:40:16,537 INFO L226 Difference]: Without dead ends: 58 [2024-09-25 11:40:16,538 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 25 SyntacticMatches, 2 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 140 ImplicationChecksByTransitivity, 8.7s TimeCoverageRelationStatistics Valid=102, Invalid=653, Unknown=1, NotChecked=0, Total=756 [2024-09-25 11:40:16,538 INFO L434 NwaCegarLoop]: 12 mSDtfsCounter, 12 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 295 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 302 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 295 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:16,538 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [13 Valid, 59 Invalid, 302 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 295 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-25 11:40:16,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2024-09-25 11:40:16,553 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 57. [2024-09-25 11:40:16,554 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 35 states have (on average 1.0857142857142856) internal successors, (38), 37 states have internal predecessors, (38), 11 states have call successors, (11), 9 states have call predecessors, (11), 10 states have return successors, (14), 10 states have call predecessors, (14), 9 states have call successors, (14) [2024-09-25 11:40:16,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 63 transitions. [2024-09-25 11:40:16,555 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 63 transitions. Word has length 34 [2024-09-25 11:40:16,556 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:16,556 INFO L474 AbstractCegarLoop]: Abstraction has 57 states and 63 transitions. [2024-09-25 11:40:16,557 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 12 states have (on average 1.5) internal successors, (18), 12 states have internal predecessors, (18), 6 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-25 11:40:16,557 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:16,557 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 63 transitions. [2024-09-25 11:40:16,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-09-25 11:40:16,558 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:16,558 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:16,571 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2024-09-25 11:40:16,762 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:16,763 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:16,763 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:16,763 INFO L85 PathProgramCache]: Analyzing trace with hash 1394095128, now seen corresponding path program 1 times [2024-09-25 11:40:16,763 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:16,763 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1374167067] [2024-09-25 11:40:16,763 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:16,764 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:16,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:16,810 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [171668591] [2024-09-25 11:40:16,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:16,810 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:16,811 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:16,812 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:16,813 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-25 11:40:16,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:16,925 INFO L262 TraceCheckSpWp]: Trace formula consists of 304 conjuncts, 61 conjuncts are in the unsatisfiable core [2024-09-25 11:40:16,929 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:16,936 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:16,939 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:17,091 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:17,095 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:17,221 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 12 proven. 8 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-25 11:40:17,221 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:40:17,528 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 60 treesize of output 56 [2024-09-25 11:40:17,534 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 56 treesize of output 20 [2024-09-25 11:40:17,643 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:17,643 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1374167067] [2024-09-25 11:40:17,643 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:17,643 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [171668591] [2024-09-25 11:40:17,644 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [171668591] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:40:17,645 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:40:17,645 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12] total 12 [2024-09-25 11:40:17,645 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1566002475] [2024-09-25 11:40:17,645 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:40:17,645 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2024-09-25 11:40:17,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:17,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2024-09-25 11:40:17,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=198, Unknown=0, NotChecked=0, Total=240 [2024-09-25 11:40:17,647 INFO L87 Difference]: Start difference. First operand 57 states and 63 transitions. Second operand has 12 states, 9 states have (on average 2.5555555555555554) internal successors, (23), 11 states have internal predecessors, (23), 7 states have call successors, (8), 4 states have call predecessors, (8), 4 states have return successors, (6), 5 states have call predecessors, (6), 6 states have call successors, (6) [2024-09-25 11:40:17,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:17,990 INFO L93 Difference]: Finished difference Result 65 states and 70 transitions. [2024-09-25 11:40:17,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-09-25 11:40:17,991 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 9 states have (on average 2.5555555555555554) internal successors, (23), 11 states have internal predecessors, (23), 7 states have call successors, (8), 4 states have call predecessors, (8), 4 states have return successors, (6), 5 states have call predecessors, (6), 6 states have call successors, (6) Word has length 40 [2024-09-25 11:40:17,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:17,992 INFO L225 Difference]: With dead ends: 65 [2024-09-25 11:40:17,992 INFO L226 Difference]: Without dead ends: 47 [2024-09-25 11:40:17,992 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 44 SyntacticMatches, 3 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=71, Invalid=309, Unknown=0, NotChecked=0, Total=380 [2024-09-25 11:40:17,992 INFO L434 NwaCegarLoop]: 13 mSDtfsCounter, 13 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 232 mSolverCounterSat, 9 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 72 SdHoareTripleChecker+Invalid, 242 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 232 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:17,993 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [13 Valid, 72 Invalid, 242 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 232 Invalid, 1 Unknown, 0 Unchecked, 0.2s Time] [2024-09-25 11:40:17,993 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2024-09-25 11:40:18,009 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 47. [2024-09-25 11:40:18,010 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47 states, 29 states have (on average 1.0689655172413792) internal successors, (31), 30 states have internal predecessors, (31), 10 states have call successors, (10), 8 states have call predecessors, (10), 7 states have return successors, (11), 8 states have call predecessors, (11), 8 states have call successors, (11) [2024-09-25 11:40:18,011 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 52 transitions. [2024-09-25 11:40:18,012 INFO L78 Accepts]: Start accepts. Automaton has 47 states and 52 transitions. Word has length 40 [2024-09-25 11:40:18,013 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:18,013 INFO L474 AbstractCegarLoop]: Abstraction has 47 states and 52 transitions. [2024-09-25 11:40:18,013 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 9 states have (on average 2.5555555555555554) internal successors, (23), 11 states have internal predecessors, (23), 7 states have call successors, (8), 4 states have call predecessors, (8), 4 states have return successors, (6), 5 states have call predecessors, (6), 6 states have call successors, (6) [2024-09-25 11:40:18,013 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:18,013 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 52 transitions. [2024-09-25 11:40:18,014 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2024-09-25 11:40:18,014 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:18,014 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:18,028 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2024-09-25 11:40:18,214 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:18,215 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:18,215 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:18,215 INFO L85 PathProgramCache]: Analyzing trace with hash 711386751, now seen corresponding path program 2 times [2024-09-25 11:40:18,215 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:18,215 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1820142881] [2024-09-25 11:40:18,216 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:18,216 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:18,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:18,272 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1720374871] [2024-09-25 11:40:18,272 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-25 11:40:18,272 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:18,272 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:18,275 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:18,276 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-25 11:40:18,387 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-25 11:40:18,387 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 11:40:18,390 INFO L262 TraceCheckSpWp]: Trace formula consists of 361 conjuncts, 122 conjuncts are in the unsatisfiable core [2024-09-25 11:40:18,394 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:18,403 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:18,411 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:18,415 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:40:18,589 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-25 11:40:18,709 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-25 11:40:18,895 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:18,960 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 6 proven. 14 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-09-25 11:40:18,960 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:40:20,365 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 55 treesize of output 39 [2024-09-25 11:40:20,371 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 39 treesize of output 35 [2024-09-25 11:40:21,286 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:21,286 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1820142881] [2024-09-25 11:40:21,286 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:21,286 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1720374871] [2024-09-25 11:40:21,286 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1720374871] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:40:21,286 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:40:21,286 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16] total 16 [2024-09-25 11:40:21,286 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1273556619] [2024-09-25 11:40:21,286 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:40:21,287 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2024-09-25 11:40:21,287 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:21,287 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2024-09-25 11:40:21,287 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=61, Invalid=445, Unknown=0, NotChecked=0, Total=506 [2024-09-25 11:40:21,287 INFO L87 Difference]: Start difference. First operand 47 states and 52 transitions. Second operand has 16 states, 13 states have (on average 1.5384615384615385) internal successors, (20), 13 states have internal predecessors, (20), 6 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 6 states have call predecessors, (6), 5 states have call successors, (6) [2024-09-25 11:40:21,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:21,712 INFO L93 Difference]: Finished difference Result 58 states and 65 transitions. [2024-09-25 11:40:21,712 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2024-09-25 11:40:21,713 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 13 states have (on average 1.5384615384615385) internal successors, (20), 13 states have internal predecessors, (20), 6 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 6 states have call predecessors, (6), 5 states have call successors, (6) Word has length 46 [2024-09-25 11:40:21,713 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:21,713 INFO L225 Difference]: With dead ends: 58 [2024-09-25 11:40:21,713 INFO L226 Difference]: Without dead ends: 56 [2024-09-25 11:40:21,715 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 35 SyntacticMatches, 2 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 133 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=92, Invalid=664, Unknown=0, NotChecked=0, Total=756 [2024-09-25 11:40:21,715 INFO L434 NwaCegarLoop]: 13 mSDtfsCounter, 12 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 332 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 68 SdHoareTripleChecker+Invalid, 339 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 332 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:21,715 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [13 Valid, 68 Invalid, 339 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 332 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-09-25 11:40:21,716 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2024-09-25 11:40:21,728 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 55. [2024-09-25 11:40:21,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 34 states have (on average 1.0588235294117647) internal successors, (36), 35 states have internal predecessors, (36), 11 states have call successors, (11), 9 states have call predecessors, (11), 9 states have return successors, (15), 10 states have call predecessors, (15), 9 states have call successors, (15) [2024-09-25 11:40:21,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 62 transitions. [2024-09-25 11:40:21,731 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 62 transitions. Word has length 46 [2024-09-25 11:40:21,732 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:21,732 INFO L474 AbstractCegarLoop]: Abstraction has 55 states and 62 transitions. [2024-09-25 11:40:21,732 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 13 states have (on average 1.5384615384615385) internal successors, (20), 13 states have internal predecessors, (20), 6 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 6 states have call predecessors, (6), 5 states have call successors, (6) [2024-09-25 11:40:21,732 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:21,732 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 62 transitions. [2024-09-25 11:40:21,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2024-09-25 11:40:21,733 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:21,733 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:21,746 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2024-09-25 11:40:21,933 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:21,933 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:21,934 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:21,934 INFO L85 PathProgramCache]: Analyzing trace with hash -1963665965, now seen corresponding path program 3 times [2024-09-25 11:40:21,934 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:21,934 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2065954595] [2024-09-25 11:40:21,934 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:21,934 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:21,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:21,979 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1196291229] [2024-09-25 11:40:21,979 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-25 11:40:21,979 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:21,980 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:21,981 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:21,984 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-25 11:40:22,408 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-09-25 11:40:22,408 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 11:40:22,412 INFO L262 TraceCheckSpWp]: Trace formula consists of 445 conjuncts, 204 conjuncts are in the unsatisfiable core [2024-09-25 11:40:22,418 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:22,424 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:22,431 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:22,434 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:40:22,440 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:22,951 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-25 11:40:23,229 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:23,326 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 16 proven. 39 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2024-09-25 11:40:23,326 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:40:26,053 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 55 treesize of output 39 [2024-09-25 11:40:26,061 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 39 treesize of output 35 [2024-09-25 11:40:26,963 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:26,963 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2065954595] [2024-09-25 11:40:26,963 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:26,963 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1196291229] [2024-09-25 11:40:26,963 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1196291229] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:40:26,963 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:40:26,963 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2024-09-25 11:40:26,963 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [684259320] [2024-09-25 11:40:26,963 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:40:26,964 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-09-25 11:40:26,964 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:26,964 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-09-25 11:40:26,964 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=82, Invalid=788, Unknown=0, NotChecked=0, Total=870 [2024-09-25 11:40:26,965 INFO L87 Difference]: Start difference. First operand 55 states and 62 transitions. Second operand has 22 states, 18 states have (on average 1.5555555555555556) internal successors, (28), 18 states have internal predecessors, (28), 8 states have call successors, (10), 4 states have call predecessors, (10), 6 states have return successors, (8), 8 states have call predecessors, (8), 7 states have call successors, (8) [2024-09-25 11:40:27,865 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:27,865 INFO L93 Difference]: Finished difference Result 66 states and 75 transitions. [2024-09-25 11:40:27,865 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2024-09-25 11:40:27,865 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 18 states have (on average 1.5555555555555556) internal successors, (28), 18 states have internal predecessors, (28), 8 states have call successors, (10), 4 states have call predecessors, (10), 6 states have return successors, (8), 8 states have call predecessors, (8), 7 states have call successors, (8) Word has length 58 [2024-09-25 11:40:27,866 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:27,866 INFO L225 Difference]: With dead ends: 66 [2024-09-25 11:40:27,866 INFO L226 Difference]: Without dead ends: 64 [2024-09-25 11:40:27,867 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 256 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=144, Invalid=1262, Unknown=0, NotChecked=0, Total=1406 [2024-09-25 11:40:27,867 INFO L434 NwaCegarLoop]: 17 mSDtfsCounter, 17 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 530 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 537 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 530 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:27,867 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 129 Invalid, 537 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 530 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-25 11:40:27,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2024-09-25 11:40:27,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 57. [2024-09-25 11:40:27,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 35 states have (on average 1.0571428571428572) internal successors, (37), 36 states have internal predecessors, (37), 11 states have call successors, (11), 9 states have call predecessors, (11), 10 states have return successors, (18), 11 states have call predecessors, (18), 9 states have call successors, (18) [2024-09-25 11:40:27,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 66 transitions. [2024-09-25 11:40:27,886 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 66 transitions. Word has length 58 [2024-09-25 11:40:27,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:27,886 INFO L474 AbstractCegarLoop]: Abstraction has 57 states and 66 transitions. [2024-09-25 11:40:27,886 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 18 states have (on average 1.5555555555555556) internal successors, (28), 18 states have internal predecessors, (28), 8 states have call successors, (10), 4 states have call predecessors, (10), 6 states have return successors, (8), 8 states have call predecessors, (8), 7 states have call successors, (8) [2024-09-25 11:40:27,886 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:27,886 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 66 transitions. [2024-09-25 11:40:27,887 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2024-09-25 11:40:27,887 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:27,887 INFO L216 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:27,901 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2024-09-25 11:40:28,088 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:28,088 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:28,089 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:28,089 INFO L85 PathProgramCache]: Analyzing trace with hash 647455911, now seen corresponding path program 4 times [2024-09-25 11:40:28,089 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:28,089 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1517876826] [2024-09-25 11:40:28,089 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:28,089 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:28,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:28,149 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [226548561] [2024-09-25 11:40:28,149 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-25 11:40:28,150 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:28,150 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:28,151 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:28,152 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-09-25 11:40:28,935 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-25 11:40:28,936 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 11:40:28,941 INFO L262 TraceCheckSpWp]: Trace formula consists of 533 conjuncts, 223 conjuncts are in the unsatisfiable core [2024-09-25 11:40:28,946 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:28,952 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:28,955 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:40:28,957 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:28,963 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:29,541 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-25 11:40:29,808 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:29,900 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 10 proven. 65 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-25 11:40:29,900 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:40:32,646 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 55 treesize of output 51 [2024-09-25 11:40:32,653 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 51 treesize of output 35 [2024-09-25 11:40:33,803 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:33,803 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1517876826] [2024-09-25 11:40:33,803 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:33,803 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [226548561] [2024-09-25 11:40:33,803 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [226548561] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:40:33,803 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:40:33,803 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23] total 23 [2024-09-25 11:40:33,803 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [804020755] [2024-09-25 11:40:33,804 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:40:33,804 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2024-09-25 11:40:33,804 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:33,804 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2024-09-25 11:40:33,804 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=87, Invalid=783, Unknown=0, NotChecked=0, Total=870 [2024-09-25 11:40:33,805 INFO L87 Difference]: Start difference. First operand 57 states and 66 transitions. Second operand has 23 states, 18 states have (on average 1.6666666666666667) internal successors, (30), 19 states have internal predecessors, (30), 10 states have call successors, (11), 4 states have call predecessors, (11), 6 states have return successors, (10), 10 states have call predecessors, (10), 9 states have call successors, (10) [2024-09-25 11:40:34,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:34,717 INFO L93 Difference]: Finished difference Result 68 states and 79 transitions. [2024-09-25 11:40:34,717 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2024-09-25 11:40:34,718 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 18 states have (on average 1.6666666666666667) internal successors, (30), 19 states have internal predecessors, (30), 10 states have call successors, (11), 4 states have call predecessors, (11), 6 states have return successors, (10), 10 states have call predecessors, (10), 9 states have call successors, (10) Word has length 70 [2024-09-25 11:40:34,718 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:34,719 INFO L225 Difference]: With dead ends: 68 [2024-09-25 11:40:34,719 INFO L226 Difference]: Without dead ends: 66 [2024-09-25 11:40:34,719 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 52 SyntacticMatches, 2 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 295 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=136, Invalid=1124, Unknown=0, NotChecked=0, Total=1260 [2024-09-25 11:40:34,720 INFO L434 NwaCegarLoop]: 19 mSDtfsCounter, 19 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 584 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 597 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 584 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:34,720 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 124 Invalid, 597 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 584 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-25 11:40:34,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2024-09-25 11:40:34,731 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 59. [2024-09-25 11:40:34,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 36 states have (on average 1.0555555555555556) internal successors, (38), 37 states have internal predecessors, (38), 11 states have call successors, (11), 9 states have call predecessors, (11), 11 states have return successors, (21), 12 states have call predecessors, (21), 9 states have call successors, (21) [2024-09-25 11:40:34,731 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 70 transitions. [2024-09-25 11:40:34,732 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 70 transitions. Word has length 70 [2024-09-25 11:40:34,732 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:34,732 INFO L474 AbstractCegarLoop]: Abstraction has 59 states and 70 transitions. [2024-09-25 11:40:34,732 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 18 states have (on average 1.6666666666666667) internal successors, (30), 19 states have internal predecessors, (30), 10 states have call successors, (11), 4 states have call predecessors, (11), 6 states have return successors, (10), 10 states have call predecessors, (10), 9 states have call successors, (10) [2024-09-25 11:40:34,732 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:34,732 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 70 transitions. [2024-09-25 11:40:34,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2024-09-25 11:40:34,733 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:34,733 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:34,743 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2024-09-25 11:40:34,934 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2024-09-25 11:40:34,934 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:34,934 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:34,934 INFO L85 PathProgramCache]: Analyzing trace with hash -1254705940, now seen corresponding path program 2 times [2024-09-25 11:40:34,935 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:34,935 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1975908116] [2024-09-25 11:40:34,935 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:34,935 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:34,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:34,982 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1629280245] [2024-09-25 11:40:34,982 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-25 11:40:34,982 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:34,982 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:34,984 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:34,986 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-09-25 11:40:35,133 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-25 11:40:35,134 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 11:40:35,137 INFO L262 TraceCheckSpWp]: Trace formula consists of 390 conjuncts, 107 conjuncts are in the unsatisfiable core [2024-09-25 11:40:35,139 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:35,143 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:35,146 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:35,150 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:35,447 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:35,450 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:35,574 INFO L134 CoverageAnalysis]: Checked inductivity of 54 backedges. 18 proven. 23 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2024-09-25 11:40:35,574 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:40:36,850 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 60 treesize of output 24 [2024-09-25 11:40:36,856 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 20 [2024-09-25 11:40:41,198 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:41,198 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1975908116] [2024-09-25 11:40:41,198 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:41,198 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1629280245] [2024-09-25 11:40:41,198 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1629280245] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:40:41,198 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:40:41,198 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15] total 15 [2024-09-25 11:40:41,198 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [670289521] [2024-09-25 11:40:41,198 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:40:41,199 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2024-09-25 11:40:41,199 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:41,199 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2024-09-25 11:40:41,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=60, Invalid=320, Unknown=0, NotChecked=0, Total=380 [2024-09-25 11:40:41,199 INFO L87 Difference]: Start difference. First operand 59 states and 70 transitions. Second operand has 15 states, 12 states have (on average 2.3333333333333335) internal successors, (28), 13 states have internal predecessors, (28), 9 states have call successors, (10), 5 states have call predecessors, (10), 5 states have return successors, (8), 7 states have call predecessors, (8), 8 states have call successors, (8) [2024-09-25 11:40:41,705 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:41,705 INFO L93 Difference]: Finished difference Result 73 states and 83 transitions. [2024-09-25 11:40:41,705 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-09-25 11:40:41,705 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 12 states have (on average 2.3333333333333335) internal successors, (28), 13 states have internal predecessors, (28), 9 states have call successors, (10), 5 states have call predecessors, (10), 5 states have return successors, (8), 7 states have call predecessors, (8), 8 states have call successors, (8) Word has length 52 [2024-09-25 11:40:41,706 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:41,706 INFO L225 Difference]: With dead ends: 73 [2024-09-25 11:40:41,706 INFO L226 Difference]: Without dead ends: 59 [2024-09-25 11:40:41,707 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 49 SyntacticMatches, 4 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 105 ImplicationChecksByTransitivity, 5.3s TimeCoverageRelationStatistics Valid=89, Invalid=463, Unknown=0, NotChecked=0, Total=552 [2024-09-25 11:40:41,707 INFO L434 NwaCegarLoop]: 13 mSDtfsCounter, 23 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 313 mSolverCounterSat, 17 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 23 SdHoareTripleChecker+Valid, 80 SdHoareTripleChecker+Invalid, 331 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 313 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:41,707 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [23 Valid, 80 Invalid, 331 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 313 Invalid, 1 Unknown, 0 Unchecked, 0.4s Time] [2024-09-25 11:40:41,707 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2024-09-25 11:40:41,718 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2024-09-25 11:40:41,719 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 36 states have (on average 1.0555555555555556) internal successors, (38), 37 states have internal predecessors, (38), 11 states have call successors, (11), 9 states have call predecessors, (11), 11 states have return successors, (19), 12 states have call predecessors, (19), 9 states have call successors, (19) [2024-09-25 11:40:41,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 68 transitions. [2024-09-25 11:40:41,719 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 68 transitions. Word has length 52 [2024-09-25 11:40:41,720 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:41,720 INFO L474 AbstractCegarLoop]: Abstraction has 59 states and 68 transitions. [2024-09-25 11:40:41,720 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 12 states have (on average 2.3333333333333335) internal successors, (28), 13 states have internal predecessors, (28), 9 states have call successors, (10), 5 states have call predecessors, (10), 5 states have return successors, (8), 7 states have call predecessors, (8), 8 states have call successors, (8) [2024-09-25 11:40:41,720 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:41,720 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 68 transitions. [2024-09-25 11:40:41,721 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2024-09-25 11:40:41,721 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:41,721 INFO L216 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:41,735 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2024-09-25 11:40:41,922 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2024-09-25 11:40:41,922 INFO L399 AbstractCegarLoop]: === Iteration 11 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:41,922 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:41,922 INFO L85 PathProgramCache]: Analyzing trace with hash -1802374405, now seen corresponding path program 5 times [2024-09-25 11:40:41,922 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:41,922 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1706114340] [2024-09-25 11:40:41,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:41,923 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:41,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:41,980 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1668130966] [2024-09-25 11:40:41,980 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-25 11:40:41,980 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:41,980 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:41,981 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:41,983 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-09-25 11:40:42,371 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 7 check-sat command(s) [2024-09-25 11:40:42,371 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 11:40:42,376 INFO L262 TraceCheckSpWp]: Trace formula consists of 619 conjuncts, 214 conjuncts are in the unsatisfiable core [2024-09-25 11:40:42,381 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:42,385 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:42,389 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:42,395 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:40:42,805 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-25 11:40:42,926 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-25 11:40:43,234 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:43,307 INFO L134 CoverageAnalysis]: Checked inductivity of 187 backedges. 21 proven. 54 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-09-25 11:40:43,307 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:40:46,618 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 55 treesize of output 51 [2024-09-25 11:40:46,624 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 51 treesize of output 35 [2024-09-25 11:40:47,915 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:47,915 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1706114340] [2024-09-25 11:40:47,915 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:47,916 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1668130966] [2024-09-25 11:40:47,916 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1668130966] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:40:47,916 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:40:47,916 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2024-09-25 11:40:47,916 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [902283941] [2024-09-25 11:40:47,916 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:40:47,916 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-09-25 11:40:47,916 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:47,917 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-09-25 11:40:47,917 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=73, Invalid=683, Unknown=0, NotChecked=0, Total=756 [2024-09-25 11:40:47,917 INFO L87 Difference]: Start difference. First operand 59 states and 68 transitions. Second operand has 21 states, 16 states have (on average 1.625) internal successors, (26), 18 states have internal predecessors, (26), 8 states have call successors, (9), 3 states have call predecessors, (9), 7 states have return successors, (9), 9 states have call predecessors, (9), 7 states have call successors, (9) [2024-09-25 11:40:48,565 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:48,565 INFO L93 Difference]: Finished difference Result 70 states and 81 transitions. [2024-09-25 11:40:48,565 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2024-09-25 11:40:48,565 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 16 states have (on average 1.625) internal successors, (26), 18 states have internal predecessors, (26), 8 states have call successors, (9), 3 states have call predecessors, (9), 7 states have return successors, (9), 9 states have call predecessors, (9), 7 states have call successors, (9) Word has length 82 [2024-09-25 11:40:48,566 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:48,566 INFO L225 Difference]: With dead ends: 70 [2024-09-25 11:40:48,566 INFO L226 Difference]: Without dead ends: 68 [2024-09-25 11:40:48,567 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 66 SyntacticMatches, 2 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 202 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=106, Invalid=950, Unknown=0, NotChecked=0, Total=1056 [2024-09-25 11:40:48,567 INFO L434 NwaCegarLoop]: 20 mSDtfsCounter, 14 mSDsluCounter, 115 mSDsCounter, 0 mSdLazyCounter, 566 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 135 SdHoareTripleChecker+Invalid, 574 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 566 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:48,567 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 135 Invalid, 574 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 566 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-25 11:40:48,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2024-09-25 11:40:48,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 61. [2024-09-25 11:40:48,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 37 states have (on average 1.054054054054054) internal successors, (39), 38 states have internal predecessors, (39), 11 states have call successors, (11), 9 states have call predecessors, (11), 12 states have return successors, (22), 13 states have call predecessors, (22), 9 states have call successors, (22) [2024-09-25 11:40:48,583 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 72 transitions. [2024-09-25 11:40:48,583 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 72 transitions. Word has length 82 [2024-09-25 11:40:48,584 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:48,584 INFO L474 AbstractCegarLoop]: Abstraction has 61 states and 72 transitions. [2024-09-25 11:40:48,584 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 16 states have (on average 1.625) internal successors, (26), 18 states have internal predecessors, (26), 8 states have call successors, (9), 3 states have call predecessors, (9), 7 states have return successors, (9), 9 states have call predecessors, (9), 7 states have call successors, (9) [2024-09-25 11:40:48,584 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:48,584 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 72 transitions. [2024-09-25 11:40:48,585 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2024-09-25 11:40:48,585 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:48,585 INFO L216 NwaCegarLoop]: trace histogram [6, 5, 5, 4, 4, 4, 4, 4, 4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:48,601 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2024-09-25 11:40:48,785 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,12 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:48,785 INFO L399 AbstractCegarLoop]: === Iteration 12 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:48,786 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:48,786 INFO L85 PathProgramCache]: Analyzing trace with hash 81843520, now seen corresponding path program 3 times [2024-09-25 11:40:48,786 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:48,786 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1992175919] [2024-09-25 11:40:48,786 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:48,786 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:48,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:48,822 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [58790391] [2024-09-25 11:40:48,822 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-25 11:40:48,822 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:48,822 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:48,824 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:48,825 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2024-09-25 11:40:49,426 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-09-25 11:40:49,426 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 11:40:49,430 INFO L262 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 131 conjuncts are in the unsatisfiable core [2024-09-25 11:40:49,433 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:49,437 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:49,439 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:49,787 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 37 treesize of output 28 [2024-09-25 11:40:49,795 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:49,945 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 23 proven. 46 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-25 11:40:49,946 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:40:51,598 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 60 treesize of output 24 [2024-09-25 11:40:51,605 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 20