./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/recursified_nla-digbench/recursified_ps6-ll.c --full-output --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --traceabstraction.encode.modifies.clause.in.ensures.clause.of.contracts true --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version fb1cb0b9 Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/recursified_nla-digbench/recursified_ps6-ll.c -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2b375ae29a973823eea93f22f40d893acb563fa864c4860e04525925a120d938 --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --traceabstraction.encode.modifies.clause.in.ensures.clause.of.contracts true --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --- Real Ultimate output --- This is Ultimate 0.2.4-tmp.dk.referee-eval-fb1cb0b-m [2024-09-25 11:40:22,393 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-25 11:40:22,470 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-25 11:40:22,475 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-25 11:40:22,475 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-25 11:40:22,496 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-25 11:40:22,497 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-25 11:40:22,497 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-25 11:40:22,498 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-25 11:40:22,498 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-25 11:40:22,498 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-25 11:40:22,499 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-25 11:40:22,499 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-25 11:40:22,500 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-25 11:40:22,500 INFO L153 SettingsManager]: * Use SBE=true [2024-09-25 11:40:22,500 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-25 11:40:22,501 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-25 11:40:22,501 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-25 11:40:22,502 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-25 11:40:22,502 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-25 11:40:22,502 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-25 11:40:22,503 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-25 11:40:22,503 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-25 11:40:22,503 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-25 11:40:22,504 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-25 11:40:22,504 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-25 11:40:22,504 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-25 11:40:22,505 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-25 11:40:22,505 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-25 11:40:22,505 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-25 11:40:22,506 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-25 11:40:22,506 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-25 11:40:22,506 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-25 11:40:22,506 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-25 11:40:22,507 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-25 11:40:22,507 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-25 11:40:22,507 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-25 11:40:22,508 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-25 11:40:22,508 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-25 11:40:22,508 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-25 11:40:22,508 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-25 11:40:22,509 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-25 11:40:22,509 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2b375ae29a973823eea93f22f40d893acb563fa864c4860e04525925a120d938 Applying setting for plugin de.uni_freiburg.informatik.ultimate.boogie.procedureinliner: Inline calls to implemented procedures -> NEVER Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Encode 'modifies' clause in 'ensures' clause of contracts -> true Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Generate GraphML witnesses -> false [2024-09-25 11:40:22,831 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-25 11:40:22,853 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-25 11:40:22,857 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-25 11:40:22,858 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-25 11:40:22,858 INFO L274 PluginConnector]: CDTParser initialized [2024-09-25 11:40:22,859 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/recursified_nla-digbench/recursified_ps6-ll.c [2024-09-25 11:40:24,202 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-25 11:40:24,444 INFO L384 CDTParser]: Found 1 translation units. [2024-09-25 11:40:24,445 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_ps6-ll.c [2024-09-25 11:40:24,451 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/455e4e43f/d8e50aec3a87484782f261fd7d540956/FLAG237a6102e [2024-09-25 11:40:24,463 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/455e4e43f/d8e50aec3a87484782f261fd7d540956 [2024-09-25 11:40:24,466 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-25 11:40:24,467 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-09-25 11:40:24,468 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-25 11:40:24,468 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-25 11:40:24,472 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-25 11:40:24,472 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.09 11:40:24" (1/1) ... [2024-09-25 11:40:24,473 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@b356893 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24, skipping insertion in model container [2024-09-25 11:40:24,473 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.09 11:40:24" (1/1) ... [2024-09-25 11:40:24,494 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-25 11:40:24,650 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_ps6-ll.c[987,1000] [2024-09-25 11:40:24,672 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-25 11:40:24,692 INFO L200 MainTranslator]: Completed pre-run [2024-09-25 11:40:24,703 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_ps6-ll.c[987,1000] [2024-09-25 11:40:24,722 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-25 11:40:24,740 INFO L204 MainTranslator]: Completed translation [2024-09-25 11:40:24,741 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24 WrapperNode [2024-09-25 11:40:24,741 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-25 11:40:24,742 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-25 11:40:24,742 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-25 11:40:24,742 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-25 11:40:24,749 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24" (1/1) ... [2024-09-25 11:40:24,762 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24" (1/1) ... [2024-09-25 11:40:24,772 INFO L138 Inliner]: procedures = 16, calls = 83, calls flagged for inlining = 0, calls inlined = 0, statements flattened = 0 [2024-09-25 11:40:24,773 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-25 11:40:24,774 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-25 11:40:24,774 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-25 11:40:24,774 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-25 11:40:24,783 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24" (1/1) ... [2024-09-25 11:40:24,784 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24" (1/1) ... [2024-09-25 11:40:24,786 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24" (1/1) ... [2024-09-25 11:40:24,806 INFO L175 MemorySlicer]: Split 60 memory accesses to 5 slices as follows [2, 4, 45, 5, 4]. 75 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2, 0, 0, 0, 0]. The 7 writes are split as follows [0, 1, 2, 2, 2]. [2024-09-25 11:40:24,807 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24" (1/1) ... [2024-09-25 11:40:24,807 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24" (1/1) ... [2024-09-25 11:40:24,818 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24" (1/1) ... [2024-09-25 11:40:24,824 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24" (1/1) ... [2024-09-25 11:40:24,836 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24" (1/1) ... [2024-09-25 11:40:24,837 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24" (1/1) ... [2024-09-25 11:40:24,843 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-25 11:40:24,848 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-25 11:40:24,848 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-25 11:40:24,852 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-25 11:40:24,853 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24" (1/1) ... [2024-09-25 11:40:24,865 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-25 11:40:24,892 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:24,931 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-25 11:40:24,935 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-25 11:40:24,983 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-25 11:40:24,983 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2024-09-25 11:40:24,983 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2024-09-25 11:40:24,984 INFO L130 BoogieDeclarations]: Found specification of procedure main [2024-09-25 11:40:24,984 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2024-09-25 11:40:24,984 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-09-25 11:40:24,984 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-09-25 11:40:24,985 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-09-25 11:40:24,986 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-09-25 11:40:24,986 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-09-25 11:40:24,986 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-09-25 11:40:24,986 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-09-25 11:40:24,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-09-25 11:40:24,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2024-09-25 11:40:24,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2024-09-25 11:40:24,988 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2024-09-25 11:40:24,988 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2024-09-25 11:40:24,988 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2024-09-25 11:40:24,988 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-25 11:40:24,989 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-25 11:40:24,989 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-09-25 11:40:24,989 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-09-25 11:40:24,989 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2024-09-25 11:40:24,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2024-09-25 11:40:24,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2024-09-25 11:40:24,991 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-25 11:40:24,991 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-25 11:40:24,991 INFO L130 BoogieDeclarations]: Found specification of procedure func_to_recursive_line_27_to_35_0 [2024-09-25 11:40:24,991 INFO L138 BoogieDeclarations]: Found implementation of procedure func_to_recursive_line_27_to_35_0 [2024-09-25 11:40:24,991 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-09-25 11:40:25,121 INFO L241 CfgBuilder]: Building ICFG [2024-09-25 11:40:25,124 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-25 11:40:25,339 INFO L? ?]: Removed 7 outVars from TransFormulas that were not future-live. [2024-09-25 11:40:25,339 INFO L290 CfgBuilder]: Performing block encoding [2024-09-25 11:40:25,363 INFO L312 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-25 11:40:25,365 INFO L317 CfgBuilder]: Removed 1 assume(true) statements. [2024-09-25 11:40:25,366 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.09 11:40:25 BoogieIcfgContainer [2024-09-25 11:40:25,366 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-25 11:40:25,368 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-25 11:40:25,372 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-25 11:40:25,375 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-25 11:40:25,375 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.09 11:40:24" (1/3) ... [2024-09-25 11:40:25,378 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@76fb75bc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.09 11:40:25, skipping insertion in model container [2024-09-25 11:40:25,378 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:40:24" (2/3) ... [2024-09-25 11:40:25,378 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@76fb75bc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.09 11:40:25, skipping insertion in model container [2024-09-25 11:40:25,379 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.09 11:40:25" (3/3) ... [2024-09-25 11:40:25,381 INFO L112 eAbstractionObserver]: Analyzing ICFG recursified_ps6-ll.c [2024-09-25 11:40:25,398 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-25 11:40:25,399 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-09-25 11:40:25,458 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-25 11:40:25,468 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6b2f8c61, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-25 11:40:25,469 INFO L337 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-09-25 11:40:25,473 INFO L276 IsEmpty]: Start isEmpty. Operand has 34 states, 19 states have (on average 1.263157894736842) internal successors, (24), 21 states have internal predecessors, (24), 8 states have call successors, (8), 5 states have call predecessors, (8), 5 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2024-09-25 11:40:25,484 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2024-09-25 11:40:25,486 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:25,487 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:25,487 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:25,493 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:25,494 INFO L85 PathProgramCache]: Analyzing trace with hash 460517386, now seen corresponding path program 1 times [2024-09-25 11:40:25,503 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:25,503 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1102165776] [2024-09-25 11:40:25,503 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:25,504 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:25,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:25,718 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 11:40:25,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:25,734 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-25 11:40:25,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:25,747 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 11:40:25,748 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:25,748 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1102165776] [2024-09-25 11:40:25,749 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1102165776] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 11:40:25,749 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-25 11:40:25,749 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-09-25 11:40:25,751 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1888052661] [2024-09-25 11:40:25,752 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 11:40:25,756 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-09-25 11:40:25,756 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:25,777 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-09-25 11:40:25,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-25 11:40:25,780 INFO L87 Difference]: Start difference. First operand has 34 states, 19 states have (on average 1.263157894736842) internal successors, (24), 21 states have internal predecessors, (24), 8 states have call successors, (8), 5 states have call predecessors, (8), 5 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Second operand has 2 states, 2 states have (on average 5.5) internal successors, (11), 2 states have internal predecessors, (11), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-25 11:40:25,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:25,812 INFO L93 Difference]: Finished difference Result 60 states and 76 transitions. [2024-09-25 11:40:25,814 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-09-25 11:40:25,815 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.5) internal successors, (11), 2 states have internal predecessors, (11), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 18 [2024-09-25 11:40:25,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:25,822 INFO L225 Difference]: With dead ends: 60 [2024-09-25 11:40:25,822 INFO L226 Difference]: Without dead ends: 30 [2024-09-25 11:40:25,825 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-25 11:40:25,830 INFO L434 NwaCegarLoop]: 35 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 35 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 2 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:25,832 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 35 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 2 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-25 11:40:25,847 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30 states. [2024-09-25 11:40:25,865 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30 to 30. [2024-09-25 11:40:25,867 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 17 states have (on average 1.1176470588235294) internal successors, (19), 19 states have internal predecessors, (19), 8 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-09-25 11:40:25,870 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 33 transitions. [2024-09-25 11:40:25,871 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 33 transitions. Word has length 18 [2024-09-25 11:40:25,873 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:25,873 INFO L474 AbstractCegarLoop]: Abstraction has 30 states and 33 transitions. [2024-09-25 11:40:25,873 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.5) internal successors, (11), 2 states have internal predecessors, (11), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-25 11:40:25,874 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:25,875 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 33 transitions. [2024-09-25 11:40:25,875 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2024-09-25 11:40:25,876 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:25,876 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:25,877 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-25 11:40:25,877 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:25,878 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:25,878 INFO L85 PathProgramCache]: Analyzing trace with hash 1161581964, now seen corresponding path program 1 times [2024-09-25 11:40:25,878 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:25,880 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326404236] [2024-09-25 11:40:25,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:25,880 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:25,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:25,963 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1868755703] [2024-09-25 11:40:25,963 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:25,964 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:25,964 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:25,966 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:25,968 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-25 11:40:26,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:26,118 INFO L262 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 41 conjuncts are in the unsatisfiable core [2024-09-25 11:40:26,127 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:26,180 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:26,193 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:26,371 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 11:40:26,371 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-25 11:40:26,371 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:26,371 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1326404236] [2024-09-25 11:40:26,372 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:26,372 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1868755703] [2024-09-25 11:40:26,372 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1868755703] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 11:40:26,372 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-25 11:40:26,373 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-09-25 11:40:26,375 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [326494174] [2024-09-25 11:40:26,375 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 11:40:26,376 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-09-25 11:40:26,376 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:26,376 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-09-25 11:40:26,377 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2024-09-25 11:40:26,377 INFO L87 Difference]: Start difference. First operand 30 states and 33 transitions. Second operand has 8 states, 6 states have (on average 1.8333333333333333) internal successors, (11), 6 states have internal predecessors, (11), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-25 11:40:26,565 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:26,566 INFO L93 Difference]: Finished difference Result 44 states and 48 transitions. [2024-09-25 11:40:26,566 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-25 11:40:26,566 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 1.8333333333333333) internal successors, (11), 6 states have internal predecessors, (11), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 18 [2024-09-25 11:40:26,567 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:26,567 INFO L225 Difference]: With dead ends: 44 [2024-09-25 11:40:26,568 INFO L226 Difference]: Without dead ends: 42 [2024-09-25 11:40:26,568 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2024-09-25 11:40:26,569 INFO L434 NwaCegarLoop]: 24 mSDtfsCounter, 12 mSDsluCounter, 129 mSDsCounter, 0 mSdLazyCounter, 76 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 76 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:26,569 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 153 Invalid, 80 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 76 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 11:40:26,570 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42 states. [2024-09-25 11:40:26,579 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42 to 41. [2024-09-25 11:40:26,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 25 states have (on average 1.12) internal successors, (28), 27 states have internal predecessors, (28), 9 states have call successors, (9), 7 states have call predecessors, (9), 6 states have return successors, (8), 7 states have call predecessors, (8), 7 states have call successors, (8) [2024-09-25 11:40:26,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 45 transitions. [2024-09-25 11:40:26,580 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 45 transitions. Word has length 18 [2024-09-25 11:40:26,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:26,581 INFO L474 AbstractCegarLoop]: Abstraction has 41 states and 45 transitions. [2024-09-25 11:40:26,583 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 1.8333333333333333) internal successors, (11), 6 states have internal predecessors, (11), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-25 11:40:26,583 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:26,583 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 45 transitions. [2024-09-25 11:40:26,584 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2024-09-25 11:40:26,584 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:26,584 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:26,603 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-09-25 11:40:26,784 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:26,785 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:26,786 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:26,786 INFO L85 PathProgramCache]: Analyzing trace with hash -915195064, now seen corresponding path program 1 times [2024-09-25 11:40:26,786 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:26,787 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [625516089] [2024-09-25 11:40:26,787 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:26,787 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:26,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:26,878 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1250974251] [2024-09-25 11:40:26,881 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:26,881 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:26,882 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:26,883 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:26,888 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-25 11:40:27,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:27,040 INFO L262 TraceCheckSpWp]: Trace formula consists of 292 conjuncts, 96 conjuncts are in the unsatisfiable core [2024-09-25 11:40:27,047 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:27,077 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:27,082 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:27,239 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 47 treesize of output 36 [2024-09-25 11:40:27,253 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:27,545 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 11:40:27,546 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:40:27,862 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-25 11:40:27,863 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:27,863 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [625516089] [2024-09-25 11:40:27,863 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:27,863 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1250974251] [2024-09-25 11:40:27,863 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1250974251] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 11:40:27,863 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-25 11:40:27,864 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8] total 17 [2024-09-25 11:40:27,864 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [627481095] [2024-09-25 11:40:27,864 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-25 11:40:27,865 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2024-09-25 11:40:27,865 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:27,866 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2024-09-25 11:40:27,867 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=232, Unknown=0, NotChecked=0, Total=272 [2024-09-25 11:40:27,868 INFO L87 Difference]: Start difference. First operand 41 states and 45 transitions. Second operand has 17 states, 13 states have (on average 2.3076923076923075) internal successors, (30), 13 states have internal predecessors, (30), 8 states have call successors, (11), 6 states have call predecessors, (11), 3 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-25 11:40:28,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:28,576 INFO L93 Difference]: Finished difference Result 71 states and 78 transitions. [2024-09-25 11:40:28,576 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2024-09-25 11:40:28,576 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 13 states have (on average 2.3076923076923075) internal successors, (30), 13 states have internal predecessors, (30), 8 states have call successors, (11), 6 states have call predecessors, (11), 3 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 28 [2024-09-25 11:40:28,577 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:28,579 INFO L225 Difference]: With dead ends: 71 [2024-09-25 11:40:28,579 INFO L226 Difference]: Without dead ends: 69 [2024-09-25 11:40:28,580 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 37 SyntacticMatches, 3 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 53 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=102, Invalid=548, Unknown=0, NotChecked=0, Total=650 [2024-09-25 11:40:28,581 INFO L434 NwaCegarLoop]: 25 mSDtfsCounter, 38 mSDsluCounter, 220 mSDsCounter, 0 mSdLazyCounter, 274 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 245 SdHoareTripleChecker+Invalid, 286 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 274 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:28,581 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 245 Invalid, 286 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 274 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-09-25 11:40:28,582 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2024-09-25 11:40:28,602 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 57. [2024-09-25 11:40:28,602 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 35 states have (on average 1.1142857142857143) internal successors, (39), 38 states have internal predecessors, (39), 11 states have call successors, (11), 9 states have call predecessors, (11), 10 states have return successors, (14), 10 states have call predecessors, (14), 9 states have call successors, (14) [2024-09-25 11:40:28,604 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 64 transitions. [2024-09-25 11:40:28,604 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 64 transitions. Word has length 28 [2024-09-25 11:40:28,604 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:28,605 INFO L474 AbstractCegarLoop]: Abstraction has 57 states and 64 transitions. [2024-09-25 11:40:28,605 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 13 states have (on average 2.3076923076923075) internal successors, (30), 13 states have internal predecessors, (30), 8 states have call successors, (11), 6 states have call predecessors, (11), 3 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-25 11:40:28,605 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:28,605 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 64 transitions. [2024-09-25 11:40:28,606 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2024-09-25 11:40:28,606 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:28,606 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:28,627 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2024-09-25 11:40:28,810 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:28,811 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:28,811 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:28,811 INFO L85 PathProgramCache]: Analyzing trace with hash 1701306935, now seen corresponding path program 1 times [2024-09-25 11:40:28,811 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:28,812 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2063981611] [2024-09-25 11:40:28,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:28,812 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:28,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:28,860 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [2092354216] [2024-09-25 11:40:28,863 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:28,864 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:28,864 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:28,865 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:28,867 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-25 11:40:28,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:28,972 INFO L262 TraceCheckSpWp]: Trace formula consists of 244 conjuncts, 23 conjuncts are in the unsatisfiable core [2024-09-25 11:40:28,975 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:28,985 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:28,991 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:29,100 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 11:40:29,101 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-25 11:40:29,101 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:29,102 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2063981611] [2024-09-25 11:40:29,102 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:29,102 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2092354216] [2024-09-25 11:40:29,102 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2092354216] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 11:40:29,102 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-25 11:40:29,102 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-09-25 11:40:29,103 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1784187334] [2024-09-25 11:40:29,103 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 11:40:29,103 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-09-25 11:40:29,104 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:29,104 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-09-25 11:40:29,105 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-09-25 11:40:29,105 INFO L87 Difference]: Start difference. First operand 57 states and 64 transitions. Second operand has 7 states, 6 states have (on average 3.0) internal successors, (18), 6 states have internal predecessors, (18), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-09-25 11:40:29,254 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:29,254 INFO L93 Difference]: Finished difference Result 68 states and 75 transitions. [2024-09-25 11:40:29,254 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-09-25 11:40:29,255 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 3.0) internal successors, (18), 6 states have internal predecessors, (18), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 28 [2024-09-25 11:40:29,255 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:29,256 INFO L225 Difference]: With dead ends: 68 [2024-09-25 11:40:29,256 INFO L226 Difference]: Without dead ends: 66 [2024-09-25 11:40:29,257 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2024-09-25 11:40:29,259 INFO L434 NwaCegarLoop]: 16 mSDtfsCounter, 13 mSDsluCounter, 51 mSDsCounter, 0 mSdLazyCounter, 117 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 67 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 117 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:29,259 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 67 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 117 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 11:40:29,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2024-09-25 11:40:29,284 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 65. [2024-09-25 11:40:29,285 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 40 states have (on average 1.1) internal successors, (44), 43 states have internal predecessors, (44), 12 states have call successors, (12), 10 states have call predecessors, (12), 12 states have return successors, (16), 11 states have call predecessors, (16), 10 states have call successors, (16) [2024-09-25 11:40:29,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 72 transitions. [2024-09-25 11:40:29,289 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 72 transitions. Word has length 28 [2024-09-25 11:40:29,290 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:29,290 INFO L474 AbstractCegarLoop]: Abstraction has 65 states and 72 transitions. [2024-09-25 11:40:29,290 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 3.0) internal successors, (18), 6 states have internal predecessors, (18), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-09-25 11:40:29,291 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:29,291 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 72 transitions. [2024-09-25 11:40:29,292 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2024-09-25 11:40:29,295 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:29,295 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:29,312 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-09-25 11:40:29,498 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:29,498 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:29,499 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:29,499 INFO L85 PathProgramCache]: Analyzing trace with hash -2032764367, now seen corresponding path program 1 times [2024-09-25 11:40:29,499 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:29,499 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1376798624] [2024-09-25 11:40:29,499 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:29,499 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:29,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:29,542 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1337082366] [2024-09-25 11:40:29,542 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:29,542 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:29,543 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:29,547 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:29,549 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-25 11:40:29,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:29,671 INFO L262 TraceCheckSpWp]: Trace formula consists of 261 conjuncts, 40 conjuncts are in the unsatisfiable core [2024-09-25 11:40:29,674 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:29,682 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:40:29,686 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:29,690 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:29,899 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-25 11:40:29,942 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 11:40:29,942 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:40:30,504 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:30,505 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1376798624] [2024-09-25 11:40:30,505 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:30,505 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1337082366] [2024-09-25 11:40:30,505 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1337082366] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:40:30,505 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:40:30,505 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12] total 12 [2024-09-25 11:40:30,506 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1721405694] [2024-09-25 11:40:30,506 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:40:30,506 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2024-09-25 11:40:30,506 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:30,507 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2024-09-25 11:40:30,507 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=256, Unknown=0, NotChecked=0, Total=306 [2024-09-25 11:40:30,508 INFO L87 Difference]: Start difference. First operand 65 states and 72 transitions. Second operand has 12 states, 10 states have (on average 2.2) internal successors, (22), 10 states have internal predecessors, (22), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2024-09-25 11:40:31,029 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:31,030 INFO L93 Difference]: Finished difference Result 73 states and 79 transitions. [2024-09-25 11:40:31,030 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-09-25 11:40:31,030 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 10 states have (on average 2.2) internal successors, (22), 10 states have internal predecessors, (22), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 34 [2024-09-25 11:40:31,031 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:31,031 INFO L225 Difference]: With dead ends: 73 [2024-09-25 11:40:31,031 INFO L226 Difference]: Without dead ends: 57 [2024-09-25 11:40:31,032 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 59 GetRequests, 33 SyntacticMatches, 3 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=95, Invalid=505, Unknown=0, NotChecked=0, Total=600 [2024-09-25 11:40:31,033 INFO L434 NwaCegarLoop]: 12 mSDtfsCounter, 18 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 283 mSolverCounterSat, 12 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 60 SdHoareTripleChecker+Invalid, 296 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 283 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:31,033 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 60 Invalid, 296 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 283 Invalid, 1 Unknown, 0 Unchecked, 0.3s Time] [2024-09-25 11:40:31,033 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2024-09-25 11:40:31,058 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 57. [2024-09-25 11:40:31,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 35 states have (on average 1.0857142857142856) internal successors, (38), 37 states have internal predecessors, (38), 11 states have call successors, (11), 9 states have call predecessors, (11), 10 states have return successors, (14), 10 states have call predecessors, (14), 9 states have call successors, (14) [2024-09-25 11:40:31,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 63 transitions. [2024-09-25 11:40:31,061 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 63 transitions. Word has length 34 [2024-09-25 11:40:31,062 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:31,063 INFO L474 AbstractCegarLoop]: Abstraction has 57 states and 63 transitions. [2024-09-25 11:40:31,063 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 10 states have (on average 2.2) internal successors, (22), 10 states have internal predecessors, (22), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2024-09-25 11:40:31,063 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:31,063 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 63 transitions. [2024-09-25 11:40:31,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-09-25 11:40:31,065 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:31,065 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:31,083 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2024-09-25 11:40:31,269 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:31,270 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:31,270 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:31,271 INFO L85 PathProgramCache]: Analyzing trace with hash 937633571, now seen corresponding path program 1 times [2024-09-25 11:40:31,271 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:31,271 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1747086938] [2024-09-25 11:40:31,271 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:31,271 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:31,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:31,309 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1778215533] [2024-09-25 11:40:31,309 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:31,309 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:31,309 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:31,311 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:31,312 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-25 11:40:31,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:31,429 INFO L262 TraceCheckSpWp]: Trace formula consists of 346 conjuncts, 91 conjuncts are in the unsatisfiable core [2024-09-25 11:40:31,434 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:31,439 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:31,443 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:31,647 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:31,651 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:31,808 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 4 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-25 11:40:31,808 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:40:35,685 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 106 treesize of output 102 [2024-09-25 11:40:35,695 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 102 treesize of output 34 [2024-09-25 11:40:36,034 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:36,034 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1747086938] [2024-09-25 11:40:36,034 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:36,035 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1778215533] [2024-09-25 11:40:36,035 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1778215533] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:40:36,035 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:40:36,035 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11] total 11 [2024-09-25 11:40:36,035 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [280643366] [2024-09-25 11:40:36,035 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:40:36,036 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2024-09-25 11:40:36,036 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:36,036 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2024-09-25 11:40:36,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=39, Invalid=171, Unknown=0, NotChecked=0, Total=210 [2024-09-25 11:40:36,037 INFO L87 Difference]: Start difference. First operand 57 states and 63 transitions. Second operand has 11 states, 8 states have (on average 2.875) internal successors, (23), 9 states have internal predecessors, (23), 6 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (6), 5 states have call predecessors, (6), 5 states have call successors, (6) [2024-09-25 11:40:36,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:36,295 INFO L93 Difference]: Finished difference Result 66 states and 72 transitions. [2024-09-25 11:40:36,296 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-09-25 11:40:36,296 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 8 states have (on average 2.875) internal successors, (23), 9 states have internal predecessors, (23), 6 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (6), 5 states have call predecessors, (6), 5 states have call successors, (6) Word has length 40 [2024-09-25 11:40:36,296 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:36,297 INFO L225 Difference]: With dead ends: 66 [2024-09-25 11:40:36,297 INFO L226 Difference]: Without dead ends: 64 [2024-09-25 11:40:36,298 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 56 GetRequests, 39 SyntacticMatches, 2 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=53, Invalid=219, Unknown=0, NotChecked=0, Total=272 [2024-09-25 11:40:36,298 INFO L434 NwaCegarLoop]: 16 mSDtfsCounter, 16 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 212 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 78 SdHoareTripleChecker+Invalid, 220 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 212 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:36,299 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 78 Invalid, 220 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 212 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-25 11:40:36,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2024-09-25 11:40:36,318 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 63. [2024-09-25 11:40:36,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 39 states have (on average 1.0769230769230769) internal successors, (42), 41 states have internal predecessors, (42), 12 states have call successors, (12), 10 states have call predecessors, (12), 11 states have return successors, (15), 11 states have call predecessors, (15), 10 states have call successors, (15) [2024-09-25 11:40:36,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 69 transitions. [2024-09-25 11:40:36,319 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 69 transitions. Word has length 40 [2024-09-25 11:40:36,320 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:36,320 INFO L474 AbstractCegarLoop]: Abstraction has 63 states and 69 transitions. [2024-09-25 11:40:36,320 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 8 states have (on average 2.875) internal successors, (23), 9 states have internal predecessors, (23), 6 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (6), 5 states have call predecessors, (6), 5 states have call successors, (6) [2024-09-25 11:40:36,321 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:36,321 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 69 transitions. [2024-09-25 11:40:36,322 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2024-09-25 11:40:36,322 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:36,322 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:36,340 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2024-09-25 11:40:36,522 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2024-09-25 11:40:36,523 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:36,523 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:36,524 INFO L85 PathProgramCache]: Analyzing trace with hash 1024286237, now seen corresponding path program 1 times [2024-09-25 11:40:36,524 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:36,524 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1604495025] [2024-09-25 11:40:36,524 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:36,524 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:36,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:36,568 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [673541808] [2024-09-25 11:40:36,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:36,568 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:36,568 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:36,570 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:36,572 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-25 11:40:36,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:40:36,727 INFO L262 TraceCheckSpWp]: Trace formula consists of 363 conjuncts, 122 conjuncts are in the unsatisfiable core [2024-09-25 11:40:36,732 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:36,744 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:40:36,751 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:36,755 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:36,762 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:37,080 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-25 11:40:37,360 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:37,552 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 12 proven. 8 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-25 11:40:37,553 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:40:38,790 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 53 treesize of output 49 [2024-09-25 11:40:38,797 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 49 treesize of output 33 [2024-09-25 11:40:51,148 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:40:51,148 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1604495025] [2024-09-25 11:40:51,148 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:40:51,148 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [673541808] [2024-09-25 11:40:51,149 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [673541808] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:40:51,149 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:40:51,149 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19] total 19 [2024-09-25 11:40:51,149 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [192389810] [2024-09-25 11:40:51,149 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:40:51,149 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2024-09-25 11:40:51,149 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:40:51,150 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2024-09-25 11:40:51,151 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=84, Invalid=615, Unknown=3, NotChecked=0, Total=702 [2024-09-25 11:40:51,152 INFO L87 Difference]: Start difference. First operand 63 states and 69 transitions. Second operand has 19 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 7 states have call successors, (9), 4 states have call predecessors, (9), 4 states have return successors, (7), 5 states have call predecessors, (7), 6 states have call successors, (7) [2024-09-25 11:40:52,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:40:52,122 INFO L93 Difference]: Finished difference Result 71 states and 76 transitions. [2024-09-25 11:40:52,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2024-09-25 11:40:52,122 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 7 states have call successors, (9), 4 states have call predecessors, (9), 4 states have return successors, (7), 5 states have call predecessors, (7), 6 states have call successors, (7) Word has length 46 [2024-09-25 11:40:52,122 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:40:52,123 INFO L225 Difference]: With dead ends: 71 [2024-09-25 11:40:52,123 INFO L226 Difference]: Without dead ends: 53 [2024-09-25 11:40:52,124 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 38 SyntacticMatches, 3 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 280 ImplicationChecksByTransitivity, 13.1s TimeCoverageRelationStatistics Valid=151, Invalid=1106, Unknown=3, NotChecked=0, Total=1260 [2024-09-25 11:40:52,125 INFO L434 NwaCegarLoop]: 13 mSDtfsCounter, 18 mSDsluCounter, 65 mSDsCounter, 0 mSdLazyCounter, 520 mSolverCounterSat, 10 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 78 SdHoareTripleChecker+Invalid, 531 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 520 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-25 11:40:52,125 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 78 Invalid, 531 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 520 Invalid, 1 Unknown, 0 Unchecked, 0.6s Time] [2024-09-25 11:40:52,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2024-09-25 11:40:52,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2024-09-25 11:40:52,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 33 states have (on average 1.0606060606060606) internal successors, (35), 34 states have internal predecessors, (35), 11 states have call successors, (11), 9 states have call predecessors, (11), 8 states have return successors, (12), 9 states have call predecessors, (12), 9 states have call successors, (12) [2024-09-25 11:40:52,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 58 transitions. [2024-09-25 11:40:52,142 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 58 transitions. Word has length 46 [2024-09-25 11:40:52,142 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:40:52,142 INFO L474 AbstractCegarLoop]: Abstraction has 53 states and 58 transitions. [2024-09-25 11:40:52,142 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 7 states have call successors, (9), 4 states have call predecessors, (9), 4 states have return successors, (7), 5 states have call predecessors, (7), 6 states have call successors, (7) [2024-09-25 11:40:52,143 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:52,143 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 58 transitions. [2024-09-25 11:40:52,144 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2024-09-25 11:40:52,144 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:40:52,144 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:40:52,163 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2024-09-25 11:40:52,344 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:52,345 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:40:52,345 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:40:52,345 INFO L85 PathProgramCache]: Analyzing trace with hash 586229519, now seen corresponding path program 2 times [2024-09-25 11:40:52,345 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:40:52,345 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1614683215] [2024-09-25 11:40:52,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:40:52,346 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:40:52,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:40:52,388 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [308361620] [2024-09-25 11:40:52,388 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-25 11:40:52,388 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:40:52,388 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:40:52,390 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:40:52,391 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-25 11:40:52,623 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-25 11:40:52,623 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 11:40:52,627 INFO L262 TraceCheckSpWp]: Trace formula consists of 448 conjuncts, 181 conjuncts are in the unsatisfiable core [2024-09-25 11:40:52,632 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:40:52,635 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:40:52,651 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:52,656 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:52,662 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:53,280 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 42 treesize of output 19 [2024-09-25 11:40:53,283 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:40:53,709 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:53,715 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:40:53,894 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 7 proven. 15 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-25 11:40:53,894 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:41:05,412 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 120 treesize of output 116 [2024-09-25 11:41:05,420 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 116 treesize of output 112 [2024-09-25 11:41:05,429 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 112 treesize of output 44 [2024-09-25 11:41:09,130 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:41:09,130 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1614683215] [2024-09-25 11:41:09,130 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:41:09,131 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [308361620] [2024-09-25 11:41:09,131 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [308361620] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:41:09,131 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:41:09,131 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19] total 19 [2024-09-25 11:41:09,131 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1289772701] [2024-09-25 11:41:09,131 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:41:09,131 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2024-09-25 11:41:09,131 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:41:09,132 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2024-09-25 11:41:09,132 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=580, Unknown=2, NotChecked=0, Total=650 [2024-09-25 11:41:09,132 INFO L87 Difference]: Start difference. First operand 53 states and 58 transitions. Second operand has 19 states, 15 states have (on average 1.7333333333333334) internal successors, (26), 16 states have internal predecessors, (26), 7 states have call successors, (9), 3 states have call predecessors, (9), 5 states have return successors, (7), 6 states have call predecessors, (7), 6 states have call successors, (7) [2024-09-25 11:41:14,122 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.12s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [] [2024-09-25 11:41:14,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:41:14,445 INFO L93 Difference]: Finished difference Result 64 states and 71 transitions. [2024-09-25 11:41:14,445 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2024-09-25 11:41:14,446 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 15 states have (on average 1.7333333333333334) internal successors, (26), 16 states have internal predecessors, (26), 7 states have call successors, (9), 3 states have call predecessors, (9), 5 states have return successors, (7), 6 states have call predecessors, (7), 6 states have call successors, (7) Word has length 52 [2024-09-25 11:41:14,446 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:41:14,447 INFO L225 Difference]: With dead ends: 64 [2024-09-25 11:41:14,447 INFO L226 Difference]: Without dead ends: 62 [2024-09-25 11:41:14,447 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 72 GetRequests, 38 SyntacticMatches, 2 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 155 ImplicationChecksByTransitivity, 13.6s TimeCoverageRelationStatistics Valid=115, Invalid=1005, Unknown=2, NotChecked=0, Total=1122 [2024-09-25 11:41:14,448 INFO L434 NwaCegarLoop]: 15 mSDtfsCounter, 19 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 501 mSolverCounterSat, 9 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 511 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 501 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.8s IncrementalHoareTripleChecker+Time [2024-09-25 11:41:14,448 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 110 Invalid, 511 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 501 Invalid, 1 Unknown, 0 Unchecked, 4.8s Time] [2024-09-25 11:41:14,448 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2024-09-25 11:41:14,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 61. [2024-09-25 11:41:14,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 38 states have (on average 1.0526315789473684) internal successors, (40), 39 states have internal predecessors, (40), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (16), 11 states have call predecessors, (16), 10 states have call successors, (16) [2024-09-25 11:41:14,467 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 68 transitions. [2024-09-25 11:41:14,467 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 68 transitions. Word has length 52 [2024-09-25 11:41:14,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:41:14,468 INFO L474 AbstractCegarLoop]: Abstraction has 61 states and 68 transitions. [2024-09-25 11:41:14,468 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 15 states have (on average 1.7333333333333334) internal successors, (26), 16 states have internal predecessors, (26), 7 states have call successors, (9), 3 states have call predecessors, (9), 5 states have return successors, (7), 6 states have call predecessors, (7), 6 states have call successors, (7) [2024-09-25 11:41:14,468 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:41:14,469 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 68 transitions. [2024-09-25 11:41:14,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2024-09-25 11:41:14,470 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:41:14,470 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:41:14,489 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2024-09-25 11:41:14,670 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:41:14,671 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:41:14,671 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:41:14,671 INFO L85 PathProgramCache]: Analyzing trace with hash 680927739, now seen corresponding path program 3 times [2024-09-25 11:41:14,671 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:41:14,671 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1349181096] [2024-09-25 11:41:14,671 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:41:14,671 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:41:14,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:41:14,751 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1066222283] [2024-09-25 11:41:14,751 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-25 11:41:14,751 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:41:14,751 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:41:14,754 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:41:14,755 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-25 11:41:15,390 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-09-25 11:41:15,390 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 11:41:15,394 INFO L262 TraceCheckSpWp]: Trace formula consists of 548 conjuncts, 206 conjuncts are in the unsatisfiable core [2024-09-25 11:41:15,399 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:41:15,427 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:41:15,433 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:41:59,962 WARN L293 SmtUtils]: Spent 6.02s on a formula simplification that was a NOOP. DAG size: 17 (called from [L 731] de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher.simplify) [2024-09-25 11:42:33,686 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 13 [2024-09-25 11:42:37,734 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:42:41,928 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 16 proven. 33 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2024-09-25 11:42:41,928 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:42:53,964 WARN L854 $PredicateComparison]: unable to prove that (let ((.cse1 (select (select |c_#memory_int#2| |c_main_~#y~0.base|) |c_main_~#y~0.offset|))) (let ((.cse3 (* .cse1 .cse1)) (.cse4 (select (select |c_#memory_int#3| |c_main_~#x~0.base|) |c_main_~#x~0.offset|)) (.cse2 (* .cse1 .cse1 .cse1 .cse1)) (.cse0 (* .cse1 .cse1 .cse1 .cse1 .cse1))) (or (= (+ (* 6 .cse0) (* 2 (* .cse1 .cse1 .cse1 .cse1 .cse1 .cse1)) (* 5 .cse2)) (+ .cse3 (* .cse4 12))) (not (= (mod (+ (* .cse1 .cse1 .cse1 .cse1 .cse1 .cse1 10) (* .cse1 .cse1 .cse1 .cse1 .cse1 6) .cse3 (* .cse1 .cse1 .cse1 .cse1 7)) 12) 0)) (< 0 (+ (div (+ (* .cse1 .cse1 .cse1 .cse1 (- 365)) (* .cse1 .cse1 .cse1 .cse1 .cse1 (- 42)) (* .cse1 .cse1 (- 4319)) (* .cse1 .cse1 .cse1 .cse1 .cse1 .cse1 (- 2))) 12) (* .cse3 360) .cse4 (* 30 .cse2) (* 3 .cse0)))))) is different from false [2024-09-25 11:43:02,012 WARN L293 SmtUtils]: Spent 8.02s on a formula simplification that was a NOOP. DAG size: 17 (called from [L 731] de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher.simplify) [2024-09-25 11:43:08,465 WARN L293 SmtUtils]: Spent 6.44s on a formula simplification that was a NOOP. DAG size: 25 (called from [L 731] de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher.simplify) [2024-09-25 11:43:19,830 WARN L293 SmtUtils]: Spent 6.26s on a formula simplification that was a NOOP. DAG size: 72 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-25 11:43:40,349 WARN L293 SmtUtils]: Spent 9.79s on a formula simplification that was a NOOP. DAG size: 49 (called from [L 731] de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher.simplify) [2024-09-25 11:43:49,089 WARN L293 SmtUtils]: Spent 8.01s on a formula simplification that was a NOOP. DAG size: 19 (called from [L 731] de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher.simplify) [2024-09-25 11:43:53,105 WARN L876 $PredicateComparison]: unable to prove that (let ((.cse12 (select |c_#memory_int#2| c_func_to_recursive_line_27_to_35_0_~y.base))) (let ((.cse7 (select |c_#memory_int#3| c_func_to_recursive_line_27_to_35_0_~x.base)) (.cse0 (select .cse12 c_func_to_recursive_line_27_to_35_0_~y.offset))) (let ((.cse1 (* 2 .cse0 .cse0 .cse0 .cse0 .cse0 .cse0)) (.cse8 (select .cse7 c_func_to_recursive_line_27_to_35_0_~x.offset))) (or (not (= (mod (+ (* .cse0 .cse0 11) (* 5 .cse0 .cse0 .cse0 .cse0) .cse1 (* 6 .cse0 .cse0 .cse0 .cse0 .cse0)) 12) 0)) (let ((.cse5 (select (select |c_old(#memory_int#2)| |c_func_to_recursive_line_27_to_35_0_#in~y.base|) |c_func_to_recursive_line_27_to_35_0_#in~y.offset|))) (let ((.cse4 (select (select |c_old(#memory_int#3)| |c_func_to_recursive_line_27_to_35_0_#in~x.base|) |c_func_to_recursive_line_27_to_35_0_#in~x.offset|)) (.cse2 (* .cse5 .cse5 .cse5 .cse5 .cse5)) (.cse3 (* .cse5 .cse5 .cse5 .cse5)) (.cse6 (* .cse5 .cse5))) (and (<= (+ (* 3 .cse2) (* .cse3 30) .cse4 (div (+ (* .cse5 .cse5 (- 4319)) (* .cse5 .cse5 .cse5 .cse5 .cse5 (- 42)) (* (- 2) .cse5 .cse5 .cse5 .cse5 .cse5 .cse5) (* .cse5 .cse5 .cse5 .cse5 (- 365))) 12) (* .cse6 360)) 0) (not (= (+ .cse6 (* .cse4 12)) (+ (* (* .cse5 .cse5 .cse5 .cse5 .cse5 .cse5) 2) (* 6 .cse2) (* .cse3 5)))) (= (mod (+ .cse6 (* 7 .cse5 .cse5 .cse5 .cse5) (* .cse5 .cse5 .cse5 .cse5 .cse5 .cse5 10) (* .cse5 .cse5 .cse5 .cse5 .cse5 6)) 12) 0)))) (let ((.cse9 (+ 2 .cse0))) (let ((.cse11 (select (select (store |c_#memory_int#2| c_func_to_recursive_line_27_to_35_0_~y.base (store .cse12 c_func_to_recursive_line_27_to_35_0_~y.offset .cse9)) |c_func_to_recursive_line_27_to_35_0_#in~y.base|) |c_func_to_recursive_line_27_to_35_0_#in~y.offset|))) (= (+ (* (select (select (store |c_#memory_int#3| c_func_to_recursive_line_27_to_35_0_~x.base (store .cse7 c_func_to_recursive_line_27_to_35_0_~x.offset (+ .cse8 (* .cse9 (* (* .cse9 (* .cse9 .cse9)) .cse9)) (let ((.cse10 (+ .cse0 1))) (* .cse10 (* (* (* .cse10 .cse10) .cse10) .cse10)))))) |c_func_to_recursive_line_27_to_35_0_#in~x.base|) |c_func_to_recursive_line_27_to_35_0_#in~x.offset|) 12) (* .cse11 .cse11)) (+ (* (* .cse11 .cse11 .cse11 .cse11 .cse11) 6) (* (* .cse11 .cse11 .cse11 .cse11) 5) (* 2 (* .cse11 .cse11 .cse11 .cse11 .cse11 .cse11)))))) (< (div (+ (* 30 .cse0 .cse0 .cse0 .cse0 .cse0) .cse1 (* 1079 .cse0 .cse0) (* .cse0 .cse0 .cse0 .cse0 185)) 12) (+ (* 2 (* .cse0 .cse0 .cse0 .cse0 .cse0)) .cse8 (* (* .cse0 .cse0 .cse0 .cse0) 15) (* (* .cse0 .cse0) 90))))))) is different from true [2024-09-25 11:43:53,147 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 372 treesize of output 124 [2024-09-25 11:43:53,526 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 124 treesize of output 116 [2024-09-25 11:44:01,555 WARN L293 SmtUtils]: Spent 8.01s on a formula simplification that was a NOOP. DAG size: 25 (called from [L 731] de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher.simplify) [2024-09-25 11:45:01,764 WARN L293 SmtUtils]: Spent 12.03s on a formula simplification that was a NOOP. DAG size: 101 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate)