./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/loops/vogal-1.i --full-output --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --traceabstraction.encode.modifies.clause.in.ensures.clause.of.contracts true --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version fb1cb0b9 Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/loops/vogal-1.i -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0004a4c1c8347096eaba7e87038be30bb20b14d3b5abd082e79b4b4e835a243e --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --traceabstraction.encode.modifies.clause.in.ensures.clause.of.contracts true --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --- Real Ultimate output --- This is Ultimate 0.2.4-tmp.dk.referee-eval-fb1cb0b-m [2024-09-25 10:17:52,769 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-25 10:17:52,822 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-25 10:17:52,825 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-25 10:17:52,825 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-25 10:17:52,846 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-25 10:17:52,847 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-25 10:17:52,847 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-25 10:17:52,848 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-25 10:17:52,848 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-25 10:17:52,848 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-25 10:17:52,848 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-25 10:17:52,849 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-25 10:17:52,849 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-25 10:17:52,849 INFO L153 SettingsManager]: * Use SBE=true [2024-09-25 10:17:52,849 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-25 10:17:52,849 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-25 10:17:52,850 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-25 10:17:52,850 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-25 10:17:52,850 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-25 10:17:52,850 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-25 10:17:52,851 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-25 10:17:52,851 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-25 10:17:52,851 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-25 10:17:52,852 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-25 10:17:52,852 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-25 10:17:52,852 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-25 10:17:52,852 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-25 10:17:52,852 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-25 10:17:52,853 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-25 10:17:52,853 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-25 10:17:52,853 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-25 10:17:52,853 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-25 10:17:52,853 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-25 10:17:52,854 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-25 10:17:52,854 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-25 10:17:52,854 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-25 10:17:52,854 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-25 10:17:52,854 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-25 10:17:52,854 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-25 10:17:52,854 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-25 10:17:52,855 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-25 10:17:52,855 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0004a4c1c8347096eaba7e87038be30bb20b14d3b5abd082e79b4b4e835a243e Applying setting for plugin de.uni_freiburg.informatik.ultimate.boogie.procedureinliner: Inline calls to implemented procedures -> NEVER Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Encode 'modifies' clause in 'ensures' clause of contracts -> true Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Generate GraphML witnesses -> false [2024-09-25 10:17:53,107 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-25 10:17:53,121 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-25 10:17:53,123 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-25 10:17:53,124 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-25 10:17:53,124 INFO L274 PluginConnector]: CDTParser initialized [2024-09-25 10:17:53,125 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/loops/vogal-1.i [2024-09-25 10:17:54,343 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-25 10:17:54,492 INFO L384 CDTParser]: Found 1 translation units. [2024-09-25 10:17:54,494 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/vogal-1.i [2024-09-25 10:17:54,503 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/c62c5daa3/5e26dd008a014093b39a9d1ee609e1d0/FLAGed3eae74a [2024-09-25 10:17:54,900 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/c62c5daa3/5e26dd008a014093b39a9d1ee609e1d0 [2024-09-25 10:17:54,904 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-25 10:17:54,905 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-09-25 10:17:54,908 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-25 10:17:54,908 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-25 10:17:54,912 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-25 10:17:54,912 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.09 10:17:54" (1/1) ... [2024-09-25 10:17:54,913 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@b8dd70d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:54, skipping insertion in model container [2024-09-25 10:17:54,913 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.09 10:17:54" (1/1) ... [2024-09-25 10:17:54,928 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-25 10:17:55,058 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/vogal-1.i[895,908] [2024-09-25 10:17:55,083 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-25 10:17:55,091 INFO L200 MainTranslator]: Completed pre-run [2024-09-25 10:17:55,101 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/vogal-1.i[895,908] [2024-09-25 10:17:55,115 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-25 10:17:55,135 INFO L204 MainTranslator]: Completed translation [2024-09-25 10:17:55,136 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:55 WrapperNode [2024-09-25 10:17:55,136 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-25 10:17:55,137 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-25 10:17:55,137 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-25 10:17:55,138 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-25 10:17:55,143 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:55" (1/1) ... [2024-09-25 10:17:55,149 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:55" (1/1) ... [2024-09-25 10:17:55,155 INFO L138 Inliner]: procedures = 17, calls = 34, calls flagged for inlining = 0, calls inlined = 0, statements flattened = 0 [2024-09-25 10:17:55,155 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-25 10:17:55,156 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-25 10:17:55,157 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-25 10:17:55,157 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-25 10:17:55,164 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:55" (1/1) ... [2024-09-25 10:17:55,165 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:55" (1/1) ... [2024-09-25 10:17:55,167 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:55" (1/1) ... [2024-09-25 10:17:55,186 INFO L175 MemorySlicer]: Split 21 memory accesses to 3 slices as follows [2, 13, 6]. 62 percent of accesses are in the largest equivalence class. The 13 initializations are split as follows [2, 11, 0]. The 1 writes are split as follows [0, 0, 1]. [2024-09-25 10:17:55,186 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:55" (1/1) ... [2024-09-25 10:17:55,186 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:55" (1/1) ... [2024-09-25 10:17:55,195 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:55" (1/1) ... [2024-09-25 10:17:55,201 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:55" (1/1) ... [2024-09-25 10:17:55,204 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:55" (1/1) ... [2024-09-25 10:17:55,205 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:55" (1/1) ... [2024-09-25 10:17:55,207 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-25 10:17:55,211 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-25 10:17:55,211 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-25 10:17:55,211 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-25 10:17:55,211 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:55" (1/1) ... [2024-09-25 10:17:55,217 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-25 10:17:55,226 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:55,238 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-25 10:17:55,240 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-25 10:17:55,276 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-25 10:17:55,276 INFO L130 BoogieDeclarations]: Found specification of procedure main [2024-09-25 10:17:55,276 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2024-09-25 10:17:55,276 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-09-25 10:17:55,276 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-09-25 10:17:55,276 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-09-25 10:17:55,276 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-09-25 10:17:55,278 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-09-25 10:17:55,278 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-09-25 10:17:55,278 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2024-09-25 10:17:55,278 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2024-09-25 10:17:55,278 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2024-09-25 10:17:55,278 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-25 10:17:55,279 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-25 10:17:55,279 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-09-25 10:17:55,279 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-09-25 10:17:55,279 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2024-09-25 10:17:55,279 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-25 10:17:55,279 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-25 10:17:55,280 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-09-25 10:17:55,345 INFO L241 CfgBuilder]: Building ICFG [2024-09-25 10:17:55,347 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-25 10:17:55,520 INFO L? ?]: Removed 12 outVars from TransFormulas that were not future-live. [2024-09-25 10:17:55,521 INFO L290 CfgBuilder]: Performing block encoding [2024-09-25 10:17:55,536 INFO L312 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-25 10:17:55,537 INFO L317 CfgBuilder]: Removed 6 assume(true) statements. [2024-09-25 10:17:55,537 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.09 10:17:55 BoogieIcfgContainer [2024-09-25 10:17:55,537 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-25 10:17:55,538 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-25 10:17:55,538 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-25 10:17:55,541 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-25 10:17:55,541 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.09 10:17:54" (1/3) ... [2024-09-25 10:17:55,541 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@a0ca4af and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.09 10:17:55, skipping insertion in model container [2024-09-25 10:17:55,541 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 10:17:55" (2/3) ... [2024-09-25 10:17:55,542 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@a0ca4af and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.09 10:17:55, skipping insertion in model container [2024-09-25 10:17:55,542 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.09 10:17:55" (3/3) ... [2024-09-25 10:17:55,543 INFO L112 eAbstractionObserver]: Analyzing ICFG vogal-1.i [2024-09-25 10:17:55,554 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-25 10:17:55,554 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-09-25 10:17:55,596 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-25 10:17:55,602 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@41ed1e61, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-25 10:17:55,603 INFO L337 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-09-25 10:17:55,607 INFO L276 IsEmpty]: Start isEmpty. Operand has 35 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 28 states have internal predecessors, (44), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-25 10:17:55,612 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2024-09-25 10:17:55,612 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:55,613 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:55,613 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:55,619 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:55,621 INFO L85 PathProgramCache]: Analyzing trace with hash -1308321975, now seen corresponding path program 1 times [2024-09-25 10:17:55,628 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:55,628 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [243248260] [2024-09-25 10:17:55,628 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:55,629 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:55,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:55,772 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:55,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:55,783 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 10:17:55,784 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:55,784 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [243248260] [2024-09-25 10:17:55,784 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [243248260] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 10:17:55,784 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-25 10:17:55,785 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-09-25 10:17:55,786 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1374268395] [2024-09-25 10:17:55,786 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 10:17:55,789 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-09-25 10:17:55,790 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:55,806 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-09-25 10:17:55,806 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-25 10:17:55,808 INFO L87 Difference]: Start difference. First operand has 35 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 28 states have internal predecessors, (44), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:55,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:55,835 INFO L93 Difference]: Finished difference Result 64 states and 93 transitions. [2024-09-25 10:17:55,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-09-25 10:17:55,837 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2024-09-25 10:17:55,837 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:55,841 INFO L225 Difference]: With dead ends: 64 [2024-09-25 10:17:55,841 INFO L226 Difference]: Without dead ends: 28 [2024-09-25 10:17:55,843 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-25 10:17:55,845 INFO L434 NwaCegarLoop]: 41 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 2 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:55,845 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 41 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 2 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-25 10:17:55,857 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28 states. [2024-09-25 10:17:55,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28 to 28. [2024-09-25 10:17:55,867 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 23 states have (on average 1.3478260869565217) internal successors, (31), 23 states have internal predecessors, (31), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:55,868 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 35 transitions. [2024-09-25 10:17:55,869 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 35 transitions. Word has length 17 [2024-09-25 10:17:55,869 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:55,869 INFO L474 AbstractCegarLoop]: Abstraction has 28 states and 35 transitions. [2024-09-25 10:17:55,869 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:55,870 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:55,870 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 35 transitions. [2024-09-25 10:17:55,870 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2024-09-25 10:17:55,871 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:55,871 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:55,871 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-25 10:17:55,871 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:55,871 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:55,872 INFO L85 PathProgramCache]: Analyzing trace with hash 516425503, now seen corresponding path program 1 times [2024-09-25 10:17:55,872 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:55,872 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [840331314] [2024-09-25 10:17:55,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:55,872 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:55,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:56,020 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:56,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:56,029 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 10:17:56,031 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:56,031 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [840331314] [2024-09-25 10:17:56,031 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [840331314] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 10:17:56,032 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-25 10:17:56,032 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-09-25 10:17:56,032 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1089171292] [2024-09-25 10:17:56,032 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 10:17:56,033 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-09-25 10:17:56,033 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:56,034 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-09-25 10:17:56,035 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-25 10:17:56,035 INFO L87 Difference]: Start difference. First operand 28 states and 35 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:56,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:56,072 INFO L93 Difference]: Finished difference Result 63 states and 83 transitions. [2024-09-25 10:17:56,073 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-09-25 10:17:56,073 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 19 [2024-09-25 10:17:56,074 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:56,075 INFO L225 Difference]: With dead ends: 63 [2024-09-25 10:17:56,075 INFO L226 Difference]: Without dead ends: 41 [2024-09-25 10:17:56,076 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-25 10:17:56,077 INFO L434 NwaCegarLoop]: 26 mSDtfsCounter, 14 mSDsluCounter, 22 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 21 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:56,077 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 48 Invalid, 21 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-25 10:17:56,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41 states. [2024-09-25 10:17:56,082 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41 to 29. [2024-09-25 10:17:56,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 24 states have (on average 1.3333333333333333) internal successors, (32), 24 states have internal predecessors, (32), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:56,083 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 36 transitions. [2024-09-25 10:17:56,083 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 36 transitions. Word has length 19 [2024-09-25 10:17:56,083 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:56,084 INFO L474 AbstractCegarLoop]: Abstraction has 29 states and 36 transitions. [2024-09-25 10:17:56,084 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:56,084 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:56,084 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 36 transitions. [2024-09-25 10:17:56,085 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2024-09-25 10:17:56,085 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:56,085 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:56,085 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-09-25 10:17:56,085 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:56,085 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:56,086 INFO L85 PathProgramCache]: Analyzing trace with hash 22246406, now seen corresponding path program 1 times [2024-09-25 10:17:56,086 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:56,086 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [795354918] [2024-09-25 10:17:56,086 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:56,086 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:56,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:56,212 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:56,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:56,219 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 10:17:56,219 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:56,219 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [795354918] [2024-09-25 10:17:56,220 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [795354918] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:56,220 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1211307756] [2024-09-25 10:17:56,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:56,220 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:56,220 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:56,223 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:56,224 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-25 10:17:56,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:56,292 INFO L262 TraceCheckSpWp]: Trace formula consists of 118 conjuncts, 12 conjuncts are in the unsatisfiable core [2024-09-25 10:17:56,296 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:56,356 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-25 10:17:56,356 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-25 10:17:56,356 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1211307756] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 10:17:56,357 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-25 10:17:56,358 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [4] total 8 [2024-09-25 10:17:56,358 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [409607664] [2024-09-25 10:17:56,358 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 10:17:56,359 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-09-25 10:17:56,359 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:56,359 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-09-25 10:17:56,359 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2024-09-25 10:17:56,360 INFO L87 Difference]: Start difference. First operand 29 states and 36 transitions. Second operand has 6 states, 6 states have (on average 2.6666666666666665) internal successors, (16), 5 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:56,404 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:56,404 INFO L93 Difference]: Finished difference Result 53 states and 68 transitions. [2024-09-25 10:17:56,405 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-09-25 10:17:56,405 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 2.6666666666666665) internal successors, (16), 5 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2024-09-25 10:17:56,406 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:56,407 INFO L225 Difference]: With dead ends: 53 [2024-09-25 10:17:56,407 INFO L226 Difference]: Without dead ends: 48 [2024-09-25 10:17:56,407 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2024-09-25 10:17:56,409 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 28 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:56,410 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 138 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-25 10:17:56,410 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2024-09-25 10:17:56,415 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 41. [2024-09-25 10:17:56,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 36 states have (on average 1.3611111111111112) internal successors, (49), 36 states have internal predecessors, (49), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:56,418 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 53 transitions. [2024-09-25 10:17:56,418 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 53 transitions. Word has length 20 [2024-09-25 10:17:56,418 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:56,419 INFO L474 AbstractCegarLoop]: Abstraction has 41 states and 53 transitions. [2024-09-25 10:17:56,419 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 2.6666666666666665) internal successors, (16), 5 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:56,419 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:56,419 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 53 transitions. [2024-09-25 10:17:56,420 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2024-09-25 10:17:56,420 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:56,420 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:56,432 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-09-25 10:17:56,620 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:56,621 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:56,621 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:56,621 INFO L85 PathProgramCache]: Analyzing trace with hash 260967679, now seen corresponding path program 1 times [2024-09-25 10:17:56,621 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:56,621 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [576764422] [2024-09-25 10:17:56,621 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:56,621 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:56,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:56,741 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:56,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:56,743 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-25 10:17:56,743 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:56,743 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [576764422] [2024-09-25 10:17:56,743 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [576764422] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:56,744 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [527944211] [2024-09-25 10:17:56,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:56,744 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:56,744 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:56,746 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:56,747 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-25 10:17:56,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:56,803 INFO L262 TraceCheckSpWp]: Trace formula consists of 137 conjuncts, 7 conjuncts are in the unsatisfiable core [2024-09-25 10:17:56,804 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:56,821 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-25 10:17:56,822 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-25 10:17:56,822 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [527944211] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 10:17:56,822 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-25 10:17:56,822 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 6 [2024-09-25 10:17:56,822 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1305975371] [2024-09-25 10:17:56,823 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 10:17:56,823 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-09-25 10:17:56,823 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:56,823 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-09-25 10:17:56,825 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2024-09-25 10:17:56,825 INFO L87 Difference]: Start difference. First operand 41 states and 53 transitions. Second operand has 4 states, 4 states have (on average 5.5) internal successors, (22), 4 states have internal predecessors, (22), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:56,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:56,862 INFO L93 Difference]: Finished difference Result 74 states and 98 transitions. [2024-09-25 10:17:56,864 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-09-25 10:17:56,865 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.5) internal successors, (22), 4 states have internal predecessors, (22), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2024-09-25 10:17:56,865 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:56,865 INFO L225 Difference]: With dead ends: 74 [2024-09-25 10:17:56,865 INFO L226 Difference]: Without dead ends: 45 [2024-09-25 10:17:56,866 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2024-09-25 10:17:56,866 INFO L434 NwaCegarLoop]: 30 mSDtfsCounter, 0 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 76 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:56,867 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 76 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-25 10:17:56,867 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2024-09-25 10:17:56,873 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2024-09-25 10:17:56,874 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 40 states have (on average 1.35) internal successors, (54), 40 states have internal predecessors, (54), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:56,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 58 transitions. [2024-09-25 10:17:56,878 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 58 transitions. Word has length 26 [2024-09-25 10:17:56,878 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:56,878 INFO L474 AbstractCegarLoop]: Abstraction has 45 states and 58 transitions. [2024-09-25 10:17:56,878 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.5) internal successors, (22), 4 states have internal predecessors, (22), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:56,879 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:56,879 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 58 transitions. [2024-09-25 10:17:56,879 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2024-09-25 10:17:56,879 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:56,880 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:56,894 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2024-09-25 10:17:57,080 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:57,081 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:57,081 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:57,081 INFO L85 PathProgramCache]: Analyzing trace with hash 1671267723, now seen corresponding path program 1 times [2024-09-25 10:17:57,081 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:57,081 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1185467796] [2024-09-25 10:17:57,083 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:57,083 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:57,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:57,199 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:57,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:57,203 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-09-25 10:17:57,203 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:57,203 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1185467796] [2024-09-25 10:17:57,204 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1185467796] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:57,204 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1671768266] [2024-09-25 10:17:57,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:57,204 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:57,204 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:57,205 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:57,209 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-25 10:17:57,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:57,265 INFO L262 TraceCheckSpWp]: Trace formula consists of 139 conjuncts, 18 conjuncts are in the unsatisfiable core [2024-09-25 10:17:57,267 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:57,376 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-25 10:17:57,376 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:17:57,496 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-25 10:17:57,497 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 46 treesize of output 30 [2024-09-25 10:17:57,530 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-25 10:17:57,530 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1671768266] provided 1 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:57,530 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-09-25 10:17:57,531 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [4, 9] total 15 [2024-09-25 10:17:57,531 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1426515477] [2024-09-25 10:17:57,531 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 10:17:57,531 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-09-25 10:17:57,531 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:57,532 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-09-25 10:17:57,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2024-09-25 10:17:57,532 INFO L87 Difference]: Start difference. First operand 45 states and 58 transitions. Second operand has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:57,651 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:57,652 INFO L93 Difference]: Finished difference Result 65 states and 82 transitions. [2024-09-25 10:17:57,652 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-09-25 10:17:57,652 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 27 [2024-09-25 10:17:57,652 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:57,653 INFO L225 Difference]: With dead ends: 65 [2024-09-25 10:17:57,653 INFO L226 Difference]: Without dead ends: 43 [2024-09-25 10:17:57,653 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=79, Invalid=301, Unknown=0, NotChecked=0, Total=380 [2024-09-25 10:17:57,654 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 8 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:57,654 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 123 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-25 10:17:57,655 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2024-09-25 10:17:57,657 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2024-09-25 10:17:57,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 38 states have (on average 1.3421052631578947) internal successors, (51), 38 states have internal predecessors, (51), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:57,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 55 transitions. [2024-09-25 10:17:57,661 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 55 transitions. Word has length 27 [2024-09-25 10:17:57,661 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:57,662 INFO L474 AbstractCegarLoop]: Abstraction has 43 states and 55 transitions. [2024-09-25 10:17:57,662 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:57,662 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:57,662 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 55 transitions. [2024-09-25 10:17:57,662 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2024-09-25 10:17:57,662 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:57,663 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:57,675 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-09-25 10:17:57,866 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:57,867 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:57,868 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:57,868 INFO L85 PathProgramCache]: Analyzing trace with hash -400223430, now seen corresponding path program 1 times [2024-09-25 10:17:57,868 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:57,868 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1731267515] [2024-09-25 10:17:57,868 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:57,868 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:57,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:57,933 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:57,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:57,935 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-25 10:17:57,936 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:57,936 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1731267515] [2024-09-25 10:17:57,936 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1731267515] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:57,936 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [173323213] [2024-09-25 10:17:57,936 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:57,936 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:57,937 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:57,939 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:57,939 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-25 10:17:57,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:57,997 INFO L262 TraceCheckSpWp]: Trace formula consists of 144 conjuncts, 20 conjuncts are in the unsatisfiable core [2024-09-25 10:17:57,998 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:58,119 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-25 10:17:58,129 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-25 10:17:58,130 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:17:58,221 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-25 10:17:58,221 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 47 treesize of output 31 [2024-09-25 10:17:58,249 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-09-25 10:17:58,251 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [173323213] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:17:58,251 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:17:58,251 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 9, 7] total 15 [2024-09-25 10:17:58,251 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1111346682] [2024-09-25 10:17:58,252 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:17:58,252 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2024-09-25 10:17:58,252 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:58,252 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2024-09-25 10:17:58,253 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2024-09-25 10:17:58,253 INFO L87 Difference]: Start difference. First operand 43 states and 55 transitions. Second operand has 15 states, 15 states have (on average 4.133333333333334) internal successors, (62), 15 states have internal predecessors, (62), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:58,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:58,410 INFO L93 Difference]: Finished difference Result 124 states and 169 transitions. [2024-09-25 10:17:58,410 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-09-25 10:17:58,411 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 4.133333333333334) internal successors, (62), 15 states have internal predecessors, (62), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2024-09-25 10:17:58,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:58,411 INFO L225 Difference]: With dead ends: 124 [2024-09-25 10:17:58,411 INFO L226 Difference]: Without dead ends: 88 [2024-09-25 10:17:58,412 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 69 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=83, Invalid=259, Unknown=0, NotChecked=0, Total=342 [2024-09-25 10:17:58,412 INFO L434 NwaCegarLoop]: 23 mSDtfsCounter, 95 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:58,412 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [95 Valid, 205 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 10:17:58,413 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2024-09-25 10:17:58,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 46. [2024-09-25 10:17:58,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 41 states have (on average 1.3170731707317074) internal successors, (54), 41 states have internal predecessors, (54), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:58,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 58 transitions. [2024-09-25 10:17:58,427 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 58 transitions. Word has length 28 [2024-09-25 10:17:58,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:58,427 INFO L474 AbstractCegarLoop]: Abstraction has 46 states and 58 transitions. [2024-09-25 10:17:58,427 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 4.133333333333334) internal successors, (62), 15 states have internal predecessors, (62), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:58,427 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:58,427 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 58 transitions. [2024-09-25 10:17:58,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2024-09-25 10:17:58,429 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:58,429 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:58,443 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2024-09-25 10:17:58,633 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:58,634 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:58,634 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:58,634 INFO L85 PathProgramCache]: Analyzing trace with hash -461832489, now seen corresponding path program 1 times [2024-09-25 10:17:58,634 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:58,635 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [503885648] [2024-09-25 10:17:58,635 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:58,635 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:58,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:58,746 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:58,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:58,748 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-25 10:17:58,748 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:58,748 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [503885648] [2024-09-25 10:17:58,748 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [503885648] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:58,748 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [254818454] [2024-09-25 10:17:58,749 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:58,749 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:58,749 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:58,752 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:58,753 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-25 10:17:58,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:58,810 INFO L262 TraceCheckSpWp]: Trace formula consists of 155 conjuncts, 22 conjuncts are in the unsatisfiable core [2024-09-25 10:17:58,812 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:58,864 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:17:58,864 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 42 treesize of output 34 [2024-09-25 10:17:58,913 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-25 10:17:58,913 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:17:59,005 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-25 10:17:59,006 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 47 treesize of output 31 [2024-09-25 10:17:59,029 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 1 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-25 10:17:59,029 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [254818454] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:17:59,029 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:17:59,029 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 10, 9] total 18 [2024-09-25 10:17:59,030 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [772351643] [2024-09-25 10:17:59,030 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:17:59,030 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2024-09-25 10:17:59,031 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:59,031 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2024-09-25 10:17:59,031 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=252, Unknown=0, NotChecked=0, Total=306 [2024-09-25 10:17:59,032 INFO L87 Difference]: Start difference. First operand 46 states and 58 transitions. Second operand has 18 states, 18 states have (on average 2.6666666666666665) internal successors, (48), 18 states have internal predecessors, (48), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:59,332 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:59,332 INFO L93 Difference]: Finished difference Result 152 states and 208 transitions. [2024-09-25 10:17:59,333 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2024-09-25 10:17:59,333 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 2.6666666666666665) internal successors, (48), 18 states have internal predecessors, (48), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2024-09-25 10:17:59,333 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:59,334 INFO L225 Difference]: With dead ends: 152 [2024-09-25 10:17:59,334 INFO L226 Difference]: Without dead ends: 114 [2024-09-25 10:17:59,334 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 49 SyntacticMatches, 1 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 205 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=217, Invalid=775, Unknown=0, NotChecked=0, Total=992 [2024-09-25 10:17:59,335 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 323 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 182 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 323 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 182 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:59,335 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [323 Valid, 210 Invalid, 196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 182 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 10:17:59,335 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2024-09-25 10:17:59,346 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 48. [2024-09-25 10:17:59,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 43 states have (on average 1.302325581395349) internal successors, (56), 43 states have internal predecessors, (56), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:59,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 60 transitions. [2024-09-25 10:17:59,347 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 60 transitions. Word has length 30 [2024-09-25 10:17:59,347 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:59,347 INFO L474 AbstractCegarLoop]: Abstraction has 48 states and 60 transitions. [2024-09-25 10:17:59,347 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 2.6666666666666665) internal successors, (48), 18 states have internal predecessors, (48), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:59,347 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:59,347 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 60 transitions. [2024-09-25 10:17:59,348 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2024-09-25 10:17:59,348 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:59,348 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:59,360 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2024-09-25 10:17:59,551 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2024-09-25 10:17:59,552 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:59,552 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:59,552 INFO L85 PathProgramCache]: Analyzing trace with hash 450517516, now seen corresponding path program 1 times [2024-09-25 10:17:59,552 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:59,552 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1028545612] [2024-09-25 10:17:59,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:59,552 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:17:59,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:59,656 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:17:59,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:59,658 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-09-25 10:17:59,658 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:17:59,658 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1028545612] [2024-09-25 10:17:59,658 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1028545612] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:59,658 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1101709359] [2024-09-25 10:17:59,658 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:59,658 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:59,659 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:17:59,660 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:17:59,661 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-25 10:17:59,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:17:59,714 INFO L262 TraceCheckSpWp]: Trace formula consists of 170 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-09-25 10:17:59,715 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:17:59,723 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-09-25 10:17:59,723 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:17:59,734 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-25 10:17:59,734 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1101709359] provided 1 perfect and 1 imperfect interpolant sequences [2024-09-25 10:17:59,734 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-09-25 10:17:59,734 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6, 3] total 8 [2024-09-25 10:17:59,735 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1428524386] [2024-09-25 10:17:59,735 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 10:17:59,735 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-09-25 10:17:59,735 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:17:59,735 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-09-25 10:17:59,735 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2024-09-25 10:17:59,736 INFO L87 Difference]: Start difference. First operand 48 states and 60 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:59,760 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:17:59,760 INFO L93 Difference]: Finished difference Result 83 states and 109 transitions. [2024-09-25 10:17:59,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-09-25 10:17:59,760 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2024-09-25 10:17:59,761 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:17:59,761 INFO L225 Difference]: With dead ends: 83 [2024-09-25 10:17:59,761 INFO L226 Difference]: Without dead ends: 52 [2024-09-25 10:17:59,761 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 69 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2024-09-25 10:17:59,762 INFO L434 NwaCegarLoop]: 29 mSDtfsCounter, 6 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-25 10:17:59,763 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 49 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-25 10:17:59,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52 states. [2024-09-25 10:17:59,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 52. [2024-09-25 10:17:59,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 47 states have (on average 1.2765957446808511) internal successors, (60), 47 states have internal predecessors, (60), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:59,777 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 64 transitions. [2024-09-25 10:17:59,778 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 64 transitions. Word has length 34 [2024-09-25 10:17:59,778 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:17:59,778 INFO L474 AbstractCegarLoop]: Abstraction has 52 states and 64 transitions. [2024-09-25 10:17:59,778 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:17:59,778 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:59,778 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 64 transitions. [2024-09-25 10:17:59,779 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2024-09-25 10:17:59,780 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:17:59,780 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:17:59,794 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2024-09-25 10:17:59,984 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:17:59,985 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:17:59,985 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:17:59,985 INFO L85 PathProgramCache]: Analyzing trace with hash 1134559415, now seen corresponding path program 1 times [2024-09-25 10:17:59,985 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:17:59,985 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1132408584] [2024-09-25 10:17:59,986 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:17:59,986 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:00,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:00,108 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:00,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:00,110 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2024-09-25 10:18:00,110 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:00,110 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1132408584] [2024-09-25 10:18:00,110 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1132408584] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:00,110 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1576632359] [2024-09-25 10:18:00,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:00,110 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:00,110 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:00,112 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:00,112 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-25 10:18:00,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:00,168 INFO L262 TraceCheckSpWp]: Trace formula consists of 183 conjuncts, 10 conjuncts are in the unsatisfiable core [2024-09-25 10:18:00,169 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:00,184 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 1 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-09-25 10:18:00,185 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:00,208 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2024-09-25 10:18:00,208 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1576632359] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:00,208 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:00,208 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 4] total 10 [2024-09-25 10:18:00,209 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1257099322] [2024-09-25 10:18:00,209 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:00,210 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2024-09-25 10:18:00,210 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:00,210 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2024-09-25 10:18:00,210 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=67, Unknown=0, NotChecked=0, Total=90 [2024-09-25 10:18:00,210 INFO L87 Difference]: Start difference. First operand 52 states and 64 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 10 states have internal predecessors, (51), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:00,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:00,537 INFO L93 Difference]: Finished difference Result 297 states and 421 transitions. [2024-09-25 10:18:00,537 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2024-09-25 10:18:00,537 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 10 states have internal predecessors, (51), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 37 [2024-09-25 10:18:00,537 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:00,539 INFO L225 Difference]: With dead ends: 297 [2024-09-25 10:18:00,539 INFO L226 Difference]: Without dead ends: 254 [2024-09-25 10:18:00,539 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 93 GetRequests, 73 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 71 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=115, Invalid=347, Unknown=0, NotChecked=0, Total=462 [2024-09-25 10:18:00,540 INFO L434 NwaCegarLoop]: 52 mSDtfsCounter, 288 mSDsluCounter, 181 mSDsCounter, 0 mSdLazyCounter, 234 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 288 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 284 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 234 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:00,540 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [288 Valid, 233 Invalid, 284 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 234 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-25 10:18:00,541 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2024-09-25 10:18:00,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 65. [2024-09-25 10:18:00,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 60 states have (on average 1.2833333333333334) internal successors, (77), 60 states have internal predecessors, (77), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:00,559 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 81 transitions. [2024-09-25 10:18:00,559 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 81 transitions. Word has length 37 [2024-09-25 10:18:00,559 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:00,559 INFO L474 AbstractCegarLoop]: Abstraction has 65 states and 81 transitions. [2024-09-25 10:18:00,559 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 10 states have internal predecessors, (51), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:00,560 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:00,560 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 81 transitions. [2024-09-25 10:18:00,560 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2024-09-25 10:18:00,560 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:00,560 INFO L216 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:00,576 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2024-09-25 10:18:00,761 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:00,762 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:00,762 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:00,762 INFO L85 PathProgramCache]: Analyzing trace with hash 1612339571, now seen corresponding path program 2 times [2024-09-25 10:18:00,762 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:00,762 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1261594915] [2024-09-25 10:18:00,762 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:00,762 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:00,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:00,898 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:00,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:00,900 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-25 10:18:00,900 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:00,900 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1261594915] [2024-09-25 10:18:00,901 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1261594915] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:00,901 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2055302032] [2024-09-25 10:18:00,901 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-25 10:18:00,901 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:00,901 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:00,902 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:00,903 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-25 10:18:00,976 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-25 10:18:00,976 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:18:00,979 INFO L262 TraceCheckSpWp]: Trace formula consists of 218 conjuncts, 11 conjuncts are in the unsatisfiable core [2024-09-25 10:18:00,980 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:00,996 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-25 10:18:00,996 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:01,049 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-25 10:18:01,049 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2055302032] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:01,049 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:01,049 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 13 [2024-09-25 10:18:01,049 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [448601558] [2024-09-25 10:18:01,049 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:01,049 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2024-09-25 10:18:01,050 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:01,050 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2024-09-25 10:18:01,050 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=112, Unknown=0, NotChecked=0, Total=156 [2024-09-25 10:18:01,050 INFO L87 Difference]: Start difference. First operand 65 states and 81 transitions. Second operand has 13 states, 13 states have (on average 3.076923076923077) internal successors, (40), 13 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:01,297 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:01,298 INFO L93 Difference]: Finished difference Result 309 states and 412 transitions. [2024-09-25 10:18:01,298 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-09-25 10:18:01,298 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.076923076923077) internal successors, (40), 13 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 44 [2024-09-25 10:18:01,298 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:01,299 INFO L225 Difference]: With dead ends: 309 [2024-09-25 10:18:01,299 INFO L226 Difference]: Without dead ends: 254 [2024-09-25 10:18:01,300 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=112, Unknown=0, NotChecked=0, Total=156 [2024-09-25 10:18:01,300 INFO L434 NwaCegarLoop]: 68 mSDtfsCounter, 149 mSDsluCounter, 351 mSDsCounter, 0 mSdLazyCounter, 275 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 149 SdHoareTripleChecker+Valid, 419 SdHoareTripleChecker+Invalid, 297 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 275 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:01,301 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [149 Valid, 419 Invalid, 297 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 275 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 10:18:01,302 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2024-09-25 10:18:01,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 66. [2024-09-25 10:18:01,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 61 states have (on average 1.278688524590164) internal successors, (78), 61 states have internal predecessors, (78), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:01,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 82 transitions. [2024-09-25 10:18:01,325 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 82 transitions. Word has length 44 [2024-09-25 10:18:01,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:01,325 INFO L474 AbstractCegarLoop]: Abstraction has 66 states and 82 transitions. [2024-09-25 10:18:01,325 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 3.076923076923077) internal successors, (40), 13 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:01,325 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:01,326 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 82 transitions. [2024-09-25 10:18:01,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-25 10:18:01,326 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:01,326 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:01,342 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2024-09-25 10:18:01,530 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:01,531 INFO L399 AbstractCegarLoop]: === Iteration 11 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:01,531 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:01,531 INFO L85 PathProgramCache]: Analyzing trace with hash 974810732, now seen corresponding path program 3 times [2024-09-25 10:18:01,531 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:01,532 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1030275792] [2024-09-25 10:18:01,532 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:01,532 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:01,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:01,885 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:01,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:01,887 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-25 10:18:01,887 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:01,887 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1030275792] [2024-09-25 10:18:01,887 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1030275792] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:01,887 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1172341129] [2024-09-25 10:18:01,887 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-25 10:18:01,887 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:01,888 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:01,890 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:01,891 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-09-25 10:18:02,078 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-09-25 10:18:02,078 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:18:02,079 INFO L262 TraceCheckSpWp]: Trace formula consists of 227 conjuncts, 23 conjuncts are in the unsatisfiable core [2024-09-25 10:18:02,082 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:02,163 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-25 10:18:02,163 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:02,311 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-25 10:18:02,312 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1172341129] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:02,312 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:02,312 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 20 [2024-09-25 10:18:02,312 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1197286351] [2024-09-25 10:18:02,312 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:02,313 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2024-09-25 10:18:02,313 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:02,313 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2024-09-25 10:18:02,313 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=55, Invalid=325, Unknown=0, NotChecked=0, Total=380 [2024-09-25 10:18:02,313 INFO L87 Difference]: Start difference. First operand 66 states and 82 transitions. Second operand has 20 states, 20 states have (on average 3.55) internal successors, (71), 18 states have internal predecessors, (71), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:02,490 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:02,490 INFO L93 Difference]: Finished difference Result 182 states and 237 transitions. [2024-09-25 10:18:02,491 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-09-25 10:18:02,491 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 3.55) internal successors, (71), 18 states have internal predecessors, (71), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-25 10:18:02,492 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:02,493 INFO L225 Difference]: With dead ends: 182 [2024-09-25 10:18:02,493 INFO L226 Difference]: Without dead ends: 176 [2024-09-25 10:18:02,493 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 105 GetRequests, 81 SyntacticMatches, 2 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 93 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=79, Invalid=473, Unknown=0, NotChecked=0, Total=552 [2024-09-25 10:18:02,493 INFO L434 NwaCegarLoop]: 98 mSDtfsCounter, 149 mSDsluCounter, 813 mSDsCounter, 0 mSdLazyCounter, 151 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 149 SdHoareTripleChecker+Valid, 911 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 151 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:02,494 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [149 Valid, 911 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 151 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 10:18:02,494 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 176 states. [2024-09-25 10:18:02,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 176 to 110. [2024-09-25 10:18:02,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 105 states have (on average 1.3142857142857143) internal successors, (138), 105 states have internal predecessors, (138), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:02,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 142 transitions. [2024-09-25 10:18:02,530 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 142 transitions. Word has length 45 [2024-09-25 10:18:02,530 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:02,531 INFO L474 AbstractCegarLoop]: Abstraction has 110 states and 142 transitions. [2024-09-25 10:18:02,531 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 3.55) internal successors, (71), 18 states have internal predecessors, (71), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:02,531 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:02,531 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 142 transitions. [2024-09-25 10:18:02,531 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-25 10:18:02,531 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:02,532 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:02,547 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2024-09-25 10:18:02,732 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2024-09-25 10:18:02,733 INFO L399 AbstractCegarLoop]: === Iteration 12 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:02,733 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:02,733 INFO L85 PathProgramCache]: Analyzing trace with hash 581783722, now seen corresponding path program 1 times [2024-09-25 10:18:02,733 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:02,733 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [736325230] [2024-09-25 10:18:02,733 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:02,733 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:02,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:03,890 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:03,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:03,892 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-25 10:18:03,892 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:03,892 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [736325230] [2024-09-25 10:18:03,892 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [736325230] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:03,892 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [435535030] [2024-09-25 10:18:03,893 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:03,893 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:03,893 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:03,894 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:03,895 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-09-25 10:18:03,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:03,974 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 42 conjuncts are in the unsatisfiable core [2024-09-25 10:18:03,976 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:04,302 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 10:18:04,306 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-25 10:18:04,320 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 13 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-25 10:18:04,320 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:04,645 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:04,646 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 68 treesize of output 57 [2024-09-25 10:18:04,653 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:04,653 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 47 treesize of output 35 [2024-09-25 10:18:04,806 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 8 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-25 10:18:04,807 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [435535030] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:04,807 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:04,807 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 14, 13] total 36 [2024-09-25 10:18:04,807 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [604948576] [2024-09-25 10:18:04,807 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:04,808 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2024-09-25 10:18:04,808 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:04,809 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2024-09-25 10:18:04,809 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=211, Invalid=1049, Unknown=0, NotChecked=0, Total=1260 [2024-09-25 10:18:04,809 INFO L87 Difference]: Start difference. First operand 110 states and 142 transitions. Second operand has 36 states, 36 states have (on average 2.3333333333333335) internal successors, (84), 36 states have internal predecessors, (84), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:07,625 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:07,625 INFO L93 Difference]: Finished difference Result 571 states and 790 transitions. [2024-09-25 10:18:07,625 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2024-09-25 10:18:07,625 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 2.3333333333333335) internal successors, (84), 36 states have internal predecessors, (84), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-25 10:18:07,626 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:07,627 INFO L225 Difference]: With dead ends: 571 [2024-09-25 10:18:07,627 INFO L226 Difference]: Without dead ends: 480 [2024-09-25 10:18:07,629 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 80 SyntacticMatches, 0 SemanticMatches, 84 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2127 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=1453, Invalid=5857, Unknown=0, NotChecked=0, Total=7310 [2024-09-25 10:18:07,629 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 393 mSDsluCounter, 357 mSDsCounter, 0 mSdLazyCounter, 654 mSolverCounterSat, 93 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 393 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 747 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 93 IncrementalHoareTripleChecker+Valid, 654 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:07,630 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [393 Valid, 385 Invalid, 747 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [93 Valid, 654 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-25 10:18:07,630 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 480 states. [2024-09-25 10:18:07,737 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 480 to 303. [2024-09-25 10:18:07,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 298 states have (on average 1.3557046979865772) internal successors, (404), 298 states have internal predecessors, (404), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:07,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 408 transitions. [2024-09-25 10:18:07,739 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 408 transitions. Word has length 45 [2024-09-25 10:18:07,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:07,739 INFO L474 AbstractCegarLoop]: Abstraction has 303 states and 408 transitions. [2024-09-25 10:18:07,739 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 2.3333333333333335) internal successors, (84), 36 states have internal predecessors, (84), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:07,740 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:07,740 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 408 transitions. [2024-09-25 10:18:07,740 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-25 10:18:07,740 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:07,740 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:07,753 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2024-09-25 10:18:07,944 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2024-09-25 10:18:07,944 INFO L399 AbstractCegarLoop]: === Iteration 13 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:07,945 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:07,945 INFO L85 PathProgramCache]: Analyzing trace with hash 388004718, now seen corresponding path program 2 times [2024-09-25 10:18:07,945 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:07,945 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1149403807] [2024-09-25 10:18:07,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:07,945 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:08,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:08,808 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:08,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:08,810 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 7 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-25 10:18:08,811 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:08,811 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1149403807] [2024-09-25 10:18:08,811 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1149403807] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:08,811 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [314696204] [2024-09-25 10:18:08,811 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-25 10:18:08,811 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:08,811 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:08,813 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:08,814 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-09-25 10:18:08,887 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-25 10:18:08,888 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:18:08,889 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 41 conjuncts are in the unsatisfiable core [2024-09-25 10:18:08,890 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:09,634 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:09,635 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 152 treesize of output 146 [2024-09-25 10:18:09,644 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:09,644 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 80 treesize of output 52 [2024-09-25 10:18:09,744 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-25 10:18:09,744 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:10,509 INFO L349 Elim1Store]: treesize reduction 58, result has 1.7 percent of original size [2024-09-25 10:18:10,509 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 188 treesize of output 1 [2024-09-25 10:18:10,512 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 11 proven. 2 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-25 10:18:10,512 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [314696204] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:10,512 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:10,512 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 12] total 36 [2024-09-25 10:18:10,513 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1005248771] [2024-09-25 10:18:10,513 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:10,513 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2024-09-25 10:18:10,513 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:10,514 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2024-09-25 10:18:10,514 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=200, Invalid=1060, Unknown=0, NotChecked=0, Total=1260 [2024-09-25 10:18:10,515 INFO L87 Difference]: Start difference. First operand 303 states and 408 transitions. Second operand has 36 states, 36 states have (on average 2.5) internal successors, (90), 36 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:22,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:22,134 INFO L93 Difference]: Finished difference Result 1764 states and 2442 transitions. [2024-09-25 10:18:22,134 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 203 states. [2024-09-25 10:18:22,135 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 2.5) internal successors, (90), 36 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-25 10:18:22,135 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:22,144 INFO L225 Difference]: With dead ends: 1764 [2024-09-25 10:18:22,144 INFO L226 Difference]: Without dead ends: 1570 [2024-09-25 10:18:22,155 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 318 GetRequests, 89 SyntacticMatches, 0 SemanticMatches, 229 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21105 ImplicationChecksByTransitivity, 10.3s TimeCoverageRelationStatistics Valid=6078, Invalid=47052, Unknown=0, NotChecked=0, Total=53130 [2024-09-25 10:18:22,156 INFO L434 NwaCegarLoop]: 30 mSDtfsCounter, 1094 mSDsluCounter, 354 mSDsCounter, 0 mSdLazyCounter, 1305 mSolverCounterSat, 251 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1094 SdHoareTripleChecker+Valid, 384 SdHoareTripleChecker+Invalid, 1556 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 251 IncrementalHoareTripleChecker+Valid, 1305 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:22,156 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [1094 Valid, 384 Invalid, 1556 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [251 Valid, 1305 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2024-09-25 10:18:22,158 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1570 states. [2024-09-25 10:18:22,594 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1570 to 860. [2024-09-25 10:18:22,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 860 states, 855 states have (on average 1.3719298245614036) internal successors, (1173), 855 states have internal predecessors, (1173), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:22,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 860 states to 860 states and 1177 transitions. [2024-09-25 10:18:22,598 INFO L78 Accepts]: Start accepts. Automaton has 860 states and 1177 transitions. Word has length 45 [2024-09-25 10:18:22,599 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:22,599 INFO L474 AbstractCegarLoop]: Abstraction has 860 states and 1177 transitions. [2024-09-25 10:18:22,599 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 2.5) internal successors, (90), 36 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:22,599 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:22,599 INFO L276 IsEmpty]: Start isEmpty. Operand 860 states and 1177 transitions. [2024-09-25 10:18:22,600 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-25 10:18:22,600 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:22,600 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:22,612 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2024-09-25 10:18:22,802 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,12 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:22,802 INFO L399 AbstractCegarLoop]: === Iteration 14 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:22,802 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:22,803 INFO L85 PathProgramCache]: Analyzing trace with hash 1193665450, now seen corresponding path program 1 times [2024-09-25 10:18:22,803 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:22,803 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1376158380] [2024-09-25 10:18:22,803 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:22,803 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:22,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:23,445 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:23,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:23,448 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 7 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-25 10:18:23,448 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:23,448 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1376158380] [2024-09-25 10:18:23,448 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1376158380] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:23,448 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1202082902] [2024-09-25 10:18:23,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:23,449 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:23,449 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:23,450 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:23,451 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2024-09-25 10:18:23,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:23,526 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 48 conjuncts are in the unsatisfiable core [2024-09-25 10:18:23,528 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:23,920 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 19 [2024-09-25 10:18:23,923 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:23,924 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 11 [2024-09-25 10:18:23,936 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 13 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-25 10:18:23,936 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:24,393 INFO L349 Elim1Store]: treesize reduction 25, result has 32.4 percent of original size [2024-09-25 10:18:24,394 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 109 treesize of output 78 [2024-09-25 10:18:24,419 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:24,420 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 91 treesize of output 63 [2024-09-25 10:18:24,494 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-25 10:18:24,494 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1202082902] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:24,494 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:24,494 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 16, 15] total 38 [2024-09-25 10:18:24,494 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [845263169] [2024-09-25 10:18:24,494 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:24,495 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-25 10:18:24,495 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:24,495 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-25 10:18:24,495 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=289, Invalid=1117, Unknown=0, NotChecked=0, Total=1406 [2024-09-25 10:18:24,496 INFO L87 Difference]: Start difference. First operand 860 states and 1177 transitions. Second operand has 38 states, 38 states have (on average 2.3947368421052633) internal successors, (91), 38 states have internal predecessors, (91), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:26,852 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:26,852 INFO L93 Difference]: Finished difference Result 1736 states and 2337 transitions. [2024-09-25 10:18:26,853 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2024-09-25 10:18:26,853 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 2.3947368421052633) internal successors, (91), 38 states have internal predecessors, (91), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-25 10:18:26,853 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:26,858 INFO L225 Difference]: With dead ends: 1736 [2024-09-25 10:18:26,858 INFO L226 Difference]: Without dead ends: 1356 [2024-09-25 10:18:26,859 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 72 SyntacticMatches, 0 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1244 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=1257, Invalid=3855, Unknown=0, NotChecked=0, Total=5112 [2024-09-25 10:18:26,859 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 414 mSDsluCounter, 346 mSDsCounter, 0 mSdLazyCounter, 697 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 414 SdHoareTripleChecker+Valid, 374 SdHoareTripleChecker+Invalid, 757 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 697 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:26,859 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [414 Valid, 374 Invalid, 757 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 697 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-25 10:18:26,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1356 states. [2024-09-25 10:18:27,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1356 to 897. [2024-09-25 10:18:27,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 897 states, 892 states have (on average 1.3475336322869955) internal successors, (1202), 892 states have internal predecessors, (1202), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:27,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 897 states to 897 states and 1206 transitions. [2024-09-25 10:18:27,370 INFO L78 Accepts]: Start accepts. Automaton has 897 states and 1206 transitions. Word has length 45 [2024-09-25 10:18:27,370 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:27,370 INFO L474 AbstractCegarLoop]: Abstraction has 897 states and 1206 transitions. [2024-09-25 10:18:27,371 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 2.3947368421052633) internal successors, (91), 38 states have internal predecessors, (91), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:27,371 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:27,371 INFO L276 IsEmpty]: Start isEmpty. Operand 897 states and 1206 transitions. [2024-09-25 10:18:27,372 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-25 10:18:27,374 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:27,374 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:27,386 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2024-09-25 10:18:27,577 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2024-09-25 10:18:27,578 INFO L399 AbstractCegarLoop]: === Iteration 15 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:27,578 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:27,578 INFO L85 PathProgramCache]: Analyzing trace with hash 1115359342, now seen corresponding path program 2 times [2024-09-25 10:18:27,578 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:27,578 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2131015066] [2024-09-25 10:18:27,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:27,578 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:27,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:27,945 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:27,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:27,946 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 2 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-09-25 10:18:27,947 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:27,947 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2131015066] [2024-09-25 10:18:27,947 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2131015066] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:27,947 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1859175931] [2024-09-25 10:18:27,947 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-25 10:18:27,947 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:27,947 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:27,949 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:27,950 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2024-09-25 10:18:28,019 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-25 10:18:28,020 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:18:28,021 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 41 conjuncts are in the unsatisfiable core [2024-09-25 10:18:28,022 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:28,683 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:28,683 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 152 treesize of output 146 [2024-09-25 10:18:28,690 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:28,690 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 80 treesize of output 52 [2024-09-25 10:18:28,944 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-25 10:18:28,944 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:29,597 INFO L349 Elim1Store]: treesize reduction 58, result has 1.7 percent of original size [2024-09-25 10:18:29,597 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 147 treesize of output 1 [2024-09-25 10:18:29,600 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 11 proven. 2 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-25 10:18:29,600 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1859175931] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:29,600 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:29,600 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 15, 12] total 29 [2024-09-25 10:18:29,601 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [196064341] [2024-09-25 10:18:29,601 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:29,601 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2024-09-25 10:18:29,601 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:29,602 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2024-09-25 10:18:29,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=177, Invalid=635, Unknown=0, NotChecked=0, Total=812 [2024-09-25 10:18:29,602 INFO L87 Difference]: Start difference. First operand 897 states and 1206 transitions. Second operand has 29 states, 29 states have (on average 3.0) internal successors, (87), 29 states have internal predecessors, (87), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:33,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:33,111 INFO L93 Difference]: Finished difference Result 2244 states and 3053 transitions. [2024-09-25 10:18:33,111 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 60 states. [2024-09-25 10:18:33,111 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 3.0) internal successors, (87), 29 states have internal predecessors, (87), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-25 10:18:33,111 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:33,117 INFO L225 Difference]: With dead ends: 2244 [2024-09-25 10:18:33,117 INFO L226 Difference]: Without dead ends: 1805 [2024-09-25 10:18:33,118 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 75 SyntacticMatches, 0 SemanticMatches, 78 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1743 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=1242, Invalid=5078, Unknown=0, NotChecked=0, Total=6320 [2024-09-25 10:18:33,119 INFO L434 NwaCegarLoop]: 33 mSDtfsCounter, 285 mSDsluCounter, 280 mSDsCounter, 0 mSdLazyCounter, 736 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 285 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 785 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 736 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:33,119 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [285 Valid, 313 Invalid, 785 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 736 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-25 10:18:33,120 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1805 states. [2024-09-25 10:18:33,674 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1805 to 950. [2024-09-25 10:18:33,675 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 950 states, 945 states have (on average 1.3227513227513228) internal successors, (1250), 945 states have internal predecessors, (1250), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:33,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 950 states to 950 states and 1254 transitions. [2024-09-25 10:18:33,679 INFO L78 Accepts]: Start accepts. Automaton has 950 states and 1254 transitions. Word has length 45 [2024-09-25 10:18:33,679 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:33,680 INFO L474 AbstractCegarLoop]: Abstraction has 950 states and 1254 transitions. [2024-09-25 10:18:33,680 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 3.0) internal successors, (87), 29 states have internal predecessors, (87), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:33,680 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:33,680 INFO L276 IsEmpty]: Start isEmpty. Operand 950 states and 1254 transitions. [2024-09-25 10:18:33,682 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-25 10:18:33,682 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:33,682 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:33,697 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2024-09-25 10:18:33,886 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2024-09-25 10:18:33,887 INFO L399 AbstractCegarLoop]: === Iteration 16 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:33,887 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:33,887 INFO L85 PathProgramCache]: Analyzing trace with hash 941187050, now seen corresponding path program 1 times [2024-09-25 10:18:33,887 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:33,887 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1218673724] [2024-09-25 10:18:33,887 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:33,887 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:33,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:34,507 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:34,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:34,509 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 5 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-09-25 10:18:34,509 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:34,509 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1218673724] [2024-09-25 10:18:34,509 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1218673724] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:34,509 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [127436900] [2024-09-25 10:18:34,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:34,509 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:34,509 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:34,511 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:34,512 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2024-09-25 10:18:34,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:34,574 INFO L262 TraceCheckSpWp]: Trace formula consists of 212 conjuncts, 37 conjuncts are in the unsatisfiable core [2024-09-25 10:18:34,575 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:34,720 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 12 [2024-09-25 10:18:34,722 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-25 10:18:34,730 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 9 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-09-25 10:18:34,730 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:34,915 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:34,915 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 22 [2024-09-25 10:18:34,921 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:34,922 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 53 treesize of output 42 [2024-09-25 10:18:34,986 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 8 proven. 3 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2024-09-25 10:18:34,986 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [127436900] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:34,986 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:34,986 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 13] total 27 [2024-09-25 10:18:34,987 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2057149569] [2024-09-25 10:18:34,987 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:34,987 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2024-09-25 10:18:34,987 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:34,988 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2024-09-25 10:18:34,988 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=552, Unknown=0, NotChecked=0, Total=702 [2024-09-25 10:18:34,988 INFO L87 Difference]: Start difference. First operand 950 states and 1254 transitions. Second operand has 27 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 27 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:36,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:36,148 INFO L93 Difference]: Finished difference Result 1709 states and 2245 transitions. [2024-09-25 10:18:36,148 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-25 10:18:36,149 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 27 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-25 10:18:36,149 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:36,153 INFO L225 Difference]: With dead ends: 1709 [2024-09-25 10:18:36,153 INFO L226 Difference]: Without dead ends: 1240 [2024-09-25 10:18:36,154 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 381 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=330, Invalid=1076, Unknown=0, NotChecked=0, Total=1406 [2024-09-25 10:18:36,155 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 164 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 362 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 379 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 362 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:36,155 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [164 Valid, 208 Invalid, 379 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 362 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-25 10:18:36,157 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1240 states. [2024-09-25 10:18:36,707 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1240 to 895. [2024-09-25 10:18:36,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 895 states, 890 states have (on average 1.3022471910112359) internal successors, (1159), 890 states have internal predecessors, (1159), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:36,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 895 states to 895 states and 1163 transitions. [2024-09-25 10:18:36,711 INFO L78 Accepts]: Start accepts. Automaton has 895 states and 1163 transitions. Word has length 45 [2024-09-25 10:18:36,712 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:36,712 INFO L474 AbstractCegarLoop]: Abstraction has 895 states and 1163 transitions. [2024-09-25 10:18:36,712 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 27 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:36,712 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:36,712 INFO L276 IsEmpty]: Start isEmpty. Operand 895 states and 1163 transitions. [2024-09-25 10:18:36,713 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2024-09-25 10:18:36,713 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:36,713 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:36,726 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2024-09-25 10:18:36,914 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2024-09-25 10:18:36,914 INFO L399 AbstractCegarLoop]: === Iteration 17 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:36,914 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:36,914 INFO L85 PathProgramCache]: Analyzing trace with hash -128402447, now seen corresponding path program 1 times [2024-09-25 10:18:36,914 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:36,914 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1742950249] [2024-09-25 10:18:36,914 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:36,914 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:36,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:37,038 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:37,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:37,040 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 20 proven. 3 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2024-09-25 10:18:37,041 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:37,041 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1742950249] [2024-09-25 10:18:37,041 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1742950249] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:37,041 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [811741040] [2024-09-25 10:18:37,041 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:37,041 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:37,041 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:37,043 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:37,043 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2024-09-25 10:18:37,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:37,120 INFO L262 TraceCheckSpWp]: Trace formula consists of 244 conjuncts, 51 conjuncts are in the unsatisfiable core [2024-09-25 10:18:37,121 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:37,424 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 10:18:37,495 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:37,495 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 27 treesize of output 11 [2024-09-25 10:18:37,505 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 0 proven. 45 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-25 10:18:37,505 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:37,846 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:37,846 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 67 treesize of output 57 [2024-09-25 10:18:38,105 INFO L349 Elim1Store]: treesize reduction 10, result has 52.4 percent of original size [2024-09-25 10:18:38,105 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 57 treesize of output 40 [2024-09-25 10:18:38,145 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 5 proven. 26 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2024-09-25 10:18:38,146 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [811741040] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:38,146 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:38,146 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 21, 16] total 38 [2024-09-25 10:18:38,146 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [388967104] [2024-09-25 10:18:38,146 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:38,147 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-25 10:18:38,147 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:38,147 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-25 10:18:38,148 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=194, Invalid=1212, Unknown=0, NotChecked=0, Total=1406 [2024-09-25 10:18:38,148 INFO L87 Difference]: Start difference. First operand 895 states and 1163 transitions. Second operand has 38 states, 38 states have (on average 3.026315789473684) internal successors, (115), 38 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:40,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:40,815 INFO L93 Difference]: Finished difference Result 2463 states and 3266 transitions. [2024-09-25 10:18:40,815 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2024-09-25 10:18:40,815 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 3.026315789473684) internal successors, (115), 38 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 54 [2024-09-25 10:18:40,815 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:40,823 INFO L225 Difference]: With dead ends: 2463 [2024-09-25 10:18:40,823 INFO L226 Difference]: Without dead ends: 2181 [2024-09-25 10:18:40,825 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 141 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 831 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=559, Invalid=3101, Unknown=0, NotChecked=0, Total=3660 [2024-09-25 10:18:40,825 INFO L434 NwaCegarLoop]: 46 mSDtfsCounter, 312 mSDsluCounter, 622 mSDsCounter, 0 mSdLazyCounter, 1046 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 312 SdHoareTripleChecker+Valid, 668 SdHoareTripleChecker+Invalid, 1065 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 1046 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:40,825 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [312 Valid, 668 Invalid, 1065 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 1046 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-25 10:18:40,827 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2181 states. [2024-09-25 10:18:41,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2181 to 934. [2024-09-25 10:18:41,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 934 states, 929 states have (on average 1.3110871905274488) internal successors, (1218), 929 states have internal predecessors, (1218), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:41,463 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 934 states to 934 states and 1222 transitions. [2024-09-25 10:18:41,465 INFO L78 Accepts]: Start accepts. Automaton has 934 states and 1222 transitions. Word has length 54 [2024-09-25 10:18:41,465 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:41,466 INFO L474 AbstractCegarLoop]: Abstraction has 934 states and 1222 transitions. [2024-09-25 10:18:41,466 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 3.026315789473684) internal successors, (115), 38 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:41,466 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:41,466 INFO L276 IsEmpty]: Start isEmpty. Operand 934 states and 1222 transitions. [2024-09-25 10:18:41,467 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-09-25 10:18:41,467 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:41,467 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:41,480 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2024-09-25 10:18:41,668 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2024-09-25 10:18:41,668 INFO L399 AbstractCegarLoop]: === Iteration 18 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:41,668 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:41,668 INFO L85 PathProgramCache]: Analyzing trace with hash -1628474760, now seen corresponding path program 2 times [2024-09-25 10:18:41,669 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:41,669 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1988334906] [2024-09-25 10:18:41,669 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:41,669 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:41,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:42,118 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:42,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:42,120 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 23 proven. 4 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-25 10:18:42,120 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:42,120 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1988334906] [2024-09-25 10:18:42,121 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1988334906] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:42,121 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [66834858] [2024-09-25 10:18:42,121 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-25 10:18:42,121 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:42,121 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:42,122 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:42,123 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2024-09-25 10:18:42,204 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-25 10:18:42,204 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:18:42,206 INFO L262 TraceCheckSpWp]: Trace formula consists of 246 conjuncts, 72 conjuncts are in the unsatisfiable core [2024-09-25 10:18:42,208 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:43,142 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 10:18:43,187 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 20 proven. 29 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2024-09-25 10:18:43,187 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:43,931 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:43,932 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 65 treesize of output 50 [2024-09-25 10:18:44,214 INFO L349 Elim1Store]: treesize reduction 10, result has 52.4 percent of original size [2024-09-25 10:18:44,214 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 57 treesize of output 40 [2024-09-25 10:18:44,262 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 32 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-25 10:18:44,262 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [66834858] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:44,262 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:44,262 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 25, 26] total 59 [2024-09-25 10:18:44,262 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1844563262] [2024-09-25 10:18:44,262 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:44,262 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 59 states [2024-09-25 10:18:44,263 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:44,263 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 59 interpolants. [2024-09-25 10:18:44,263 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=519, Invalid=2903, Unknown=0, NotChecked=0, Total=3422 [2024-09-25 10:18:44,264 INFO L87 Difference]: Start difference. First operand 934 states and 1222 transitions. Second operand has 59 states, 59 states have (on average 1.9491525423728813) internal successors, (115), 59 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:47,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:47,686 INFO L93 Difference]: Finished difference Result 1706 states and 2261 transitions. [2024-09-25 10:18:47,687 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2024-09-25 10:18:47,687 INFO L78 Accepts]: Start accepts. Automaton has has 59 states, 59 states have (on average 1.9491525423728813) internal successors, (115), 59 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 55 [2024-09-25 10:18:47,687 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:47,692 INFO L225 Difference]: With dead ends: 1706 [2024-09-25 10:18:47,692 INFO L226 Difference]: Without dead ends: 1569 [2024-09-25 10:18:47,693 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 68 SyntacticMatches, 0 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3225 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=1851, Invalid=8249, Unknown=0, NotChecked=0, Total=10100 [2024-09-25 10:18:47,694 INFO L434 NwaCegarLoop]: 38 mSDtfsCounter, 845 mSDsluCounter, 607 mSDsCounter, 0 mSdLazyCounter, 1366 mSolverCounterSat, 103 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 845 SdHoareTripleChecker+Valid, 645 SdHoareTripleChecker+Invalid, 1469 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 103 IncrementalHoareTripleChecker+Valid, 1366 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:47,694 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [845 Valid, 645 Invalid, 1469 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [103 Valid, 1366 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2024-09-25 10:18:47,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1569 states. [2024-09-25 10:18:48,347 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1569 to 906. [2024-09-25 10:18:48,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 906 states, 901 states have (on average 1.3152053274139845) internal successors, (1185), 901 states have internal predecessors, (1185), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:48,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 906 states to 906 states and 1189 transitions. [2024-09-25 10:18:48,351 INFO L78 Accepts]: Start accepts. Automaton has 906 states and 1189 transitions. Word has length 55 [2024-09-25 10:18:48,352 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:48,352 INFO L474 AbstractCegarLoop]: Abstraction has 906 states and 1189 transitions. [2024-09-25 10:18:48,352 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 59 states, 59 states have (on average 1.9491525423728813) internal successors, (115), 59 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:48,352 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:48,352 INFO L276 IsEmpty]: Start isEmpty. Operand 906 states and 1189 transitions. [2024-09-25 10:18:48,353 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2024-09-25 10:18:48,353 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:48,354 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:48,367 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2024-09-25 10:18:48,557 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17,17 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:48,557 INFO L399 AbstractCegarLoop]: === Iteration 19 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:48,558 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:48,558 INFO L85 PathProgramCache]: Analyzing trace with hash -885254672, now seen corresponding path program 3 times [2024-09-25 10:18:48,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:48,558 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [380011537] [2024-09-25 10:18:48,558 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:48,558 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:48,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:48,912 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:48,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:48,914 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-25 10:18:48,914 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:48,914 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [380011537] [2024-09-25 10:18:48,914 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [380011537] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:48,914 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [162295685] [2024-09-25 10:18:48,914 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-25 10:18:48,914 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:48,914 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:48,916 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:48,917 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2024-09-25 10:18:48,996 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2024-09-25 10:18:48,997 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:18:48,998 INFO L262 TraceCheckSpWp]: Trace formula consists of 194 conjuncts, 24 conjuncts are in the unsatisfiable core [2024-09-25 10:18:49,001 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:49,139 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-25 10:18:49,140 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 0 proven. 17 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2024-09-25 10:18:49,141 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:49,281 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-25 10:18:49,281 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 49 treesize of output 31 [2024-09-25 10:18:49,304 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 1 proven. 7 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-25 10:18:49,304 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [162295685] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:49,304 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:49,304 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 12, 9] total 21 [2024-09-25 10:18:49,304 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1438056506] [2024-09-25 10:18:49,304 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:49,305 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-09-25 10:18:49,305 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:49,305 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-09-25 10:18:49,305 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=343, Unknown=0, NotChecked=0, Total=420 [2024-09-25 10:18:49,305 INFO L87 Difference]: Start difference. First operand 906 states and 1189 transitions. Second operand has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:50,398 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:50,398 INFO L93 Difference]: Finished difference Result 1290 states and 1726 transitions. [2024-09-25 10:18:50,399 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-09-25 10:18:50,399 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 56 [2024-09-25 10:18:50,399 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:50,403 INFO L225 Difference]: With dead ends: 1290 [2024-09-25 10:18:50,403 INFO L226 Difference]: Without dead ends: 1285 [2024-09-25 10:18:50,403 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 125 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 126 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=97, Invalid=409, Unknown=0, NotChecked=0, Total=506 [2024-09-25 10:18:50,404 INFO L434 NwaCegarLoop]: 33 mSDtfsCounter, 84 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 290 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 337 SdHoareTripleChecker+Invalid, 295 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 290 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:50,404 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 337 Invalid, 295 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 290 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 10:18:50,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1285 states. [2024-09-25 10:18:50,991 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1285 to 798. [2024-09-25 10:18:50,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 798 states, 793 states have (on average 1.305170239596469) internal successors, (1035), 793 states have internal predecessors, (1035), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:50,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 798 states to 798 states and 1039 transitions. [2024-09-25 10:18:50,995 INFO L78 Accepts]: Start accepts. Automaton has 798 states and 1039 transitions. Word has length 56 [2024-09-25 10:18:50,995 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:50,995 INFO L474 AbstractCegarLoop]: Abstraction has 798 states and 1039 transitions. [2024-09-25 10:18:50,995 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:50,995 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:50,995 INFO L276 IsEmpty]: Start isEmpty. Operand 798 states and 1039 transitions. [2024-09-25 10:18:50,997 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-25 10:18:50,997 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:50,997 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:51,009 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2024-09-25 10:18:51,201 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,18 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:51,202 INFO L399 AbstractCegarLoop]: === Iteration 20 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:51,202 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:51,202 INFO L85 PathProgramCache]: Analyzing trace with hash 1141037310, now seen corresponding path program 4 times [2024-09-25 10:18:51,202 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:51,202 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2029843120] [2024-09-25 10:18:51,202 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:51,202 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:51,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:51,660 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:18:51,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:18:51,662 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 14 proven. 11 refuted. 0 times theorem prover too weak. 61 trivial. 0 not checked. [2024-09-25 10:18:51,662 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:18:51,663 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2029843120] [2024-09-25 10:18:51,663 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2029843120] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:18:51,663 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [378496816] [2024-09-25 10:18:51,663 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-25 10:18:51,663 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:51,663 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:18:51,664 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:18:51,666 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2024-09-25 10:18:51,751 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-25 10:18:51,751 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:18:51,753 INFO L262 TraceCheckSpWp]: Trace formula consists of 285 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-25 10:18:51,754 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:18:52,317 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:52,318 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 152 treesize of output 146 [2024-09-25 10:18:52,325 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:18:52,326 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 80 treesize of output 52 [2024-09-25 10:18:52,624 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 19 proven. 17 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2024-09-25 10:18:52,625 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:18:53,210 INFO L349 Elim1Store]: treesize reduction 58, result has 1.7 percent of original size [2024-09-25 10:18:53,210 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 188 treesize of output 1 [2024-09-25 10:18:53,213 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 22 proven. 14 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2024-09-25 10:18:53,214 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [378496816] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:18:53,214 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:18:53,214 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 15, 13] total 31 [2024-09-25 10:18:53,214 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [239372639] [2024-09-25 10:18:53,214 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:18:53,214 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2024-09-25 10:18:53,214 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:18:53,215 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2024-09-25 10:18:53,215 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2024-09-25 10:18:53,215 INFO L87 Difference]: Start difference. First operand 798 states and 1039 transitions. Second operand has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:57,636 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 10:18:59,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:18:59,121 INFO L93 Difference]: Finished difference Result 1627 states and 2117 transitions. [2024-09-25 10:18:59,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2024-09-25 10:18:59,122 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-25 10:18:59,122 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:18:59,126 INFO L225 Difference]: With dead ends: 1627 [2024-09-25 10:18:59,126 INFO L226 Difference]: Without dead ends: 1001 [2024-09-25 10:18:59,127 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 172 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 761 ImplicationChecksByTransitivity, 1.5s TimeCoverageRelationStatistics Valid=700, Invalid=2606, Unknown=0, NotChecked=0, Total=3306 [2024-09-25 10:18:59,128 INFO L434 NwaCegarLoop]: 27 mSDtfsCounter, 350 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 349 mSolverCounterSat, 77 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 231 SdHoareTripleChecker+Invalid, 427 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 349 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.3s IncrementalHoareTripleChecker+Time [2024-09-25 10:18:59,128 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [350 Valid, 231 Invalid, 427 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 349 Invalid, 1 Unknown, 0 Unchecked, 4.3s Time] [2024-09-25 10:18:59,128 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1001 states. [2024-09-25 10:18:59,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1001 to 597. [2024-09-25 10:18:59,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 597 states, 592 states have (on average 1.2635135135135136) internal successors, (748), 592 states have internal predecessors, (748), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:59,584 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 597 states to 597 states and 752 transitions. [2024-09-25 10:18:59,585 INFO L78 Accepts]: Start accepts. Automaton has 597 states and 752 transitions. Word has length 66 [2024-09-25 10:18:59,585 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:18:59,586 INFO L474 AbstractCegarLoop]: Abstraction has 597 states and 752 transitions. [2024-09-25 10:18:59,586 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:18:59,586 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:59,586 INFO L276 IsEmpty]: Start isEmpty. Operand 597 states and 752 transitions. [2024-09-25 10:18:59,587 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-25 10:18:59,587 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:18:59,587 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:18:59,603 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Ended with exit code 0 [2024-09-25 10:18:59,787 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,19 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:18:59,787 INFO L399 AbstractCegarLoop]: === Iteration 21 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:18:59,788 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:18:59,788 INFO L85 PathProgramCache]: Analyzing trace with hash 828990910, now seen corresponding path program 5 times [2024-09-25 10:18:59,788 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:18:59,788 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [510182132] [2024-09-25 10:18:59,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:18:59,788 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:18:59,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:00,849 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:19:00,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:00,851 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 38 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2024-09-25 10:19:00,851 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:19:00,851 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [510182132] [2024-09-25 10:19:00,851 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [510182132] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:19:00,851 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [294767109] [2024-09-25 10:19:00,851 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-25 10:19:00,851 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:19:00,851 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:19:00,852 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:19:00,853 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2024-09-25 10:19:01,184 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 6 check-sat command(s) [2024-09-25 10:19:01,184 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:19:01,186 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 68 conjuncts are in the unsatisfiable core [2024-09-25 10:19:01,188 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:19:01,232 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 48 treesize of output 35 [2024-09-25 10:19:01,237 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 1 [2024-09-25 10:19:01,699 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:19:01,699 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 30 treesize of output 18 [2024-09-25 10:19:01,704 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-25 10:19:01,720 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 52 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-09-25 10:19:01,720 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:19:02,443 INFO L349 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2024-09-25 10:19:02,444 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 134 treesize of output 106 [2024-09-25 10:19:02,602 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 42 proven. 17 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2024-09-25 10:19:02,602 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [294767109] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:19:02,603 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:19:02,603 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 21, 19] total 51 [2024-09-25 10:19:02,603 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [584215073] [2024-09-25 10:19:02,603 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:19:02,603 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2024-09-25 10:19:02,603 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:19:02,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2024-09-25 10:19:02,604 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=438, Invalid=2112, Unknown=0, NotChecked=0, Total=2550 [2024-09-25 10:19:02,604 INFO L87 Difference]: Start difference. First operand 597 states and 752 transitions. Second operand has 51 states, 51 states have (on average 2.607843137254902) internal successors, (133), 51 states have internal predecessors, (133), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:19:11,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:19:11,261 INFO L93 Difference]: Finished difference Result 3262 states and 4292 transitions. [2024-09-25 10:19:11,262 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 129 states. [2024-09-25 10:19:11,262 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 51 states have (on average 2.607843137254902) internal successors, (133), 51 states have internal predecessors, (133), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-25 10:19:11,262 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:19:11,270 INFO L225 Difference]: With dead ends: 3262 [2024-09-25 10:19:11,270 INFO L226 Difference]: Without dead ends: 2834 [2024-09-25 10:19:11,272 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 155 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9362 ImplicationChecksByTransitivity, 6.2s TimeCoverageRelationStatistics Valid=4057, Invalid=20435, Unknown=0, NotChecked=0, Total=24492 [2024-09-25 10:19:11,272 INFO L434 NwaCegarLoop]: 43 mSDtfsCounter, 620 mSDsluCounter, 795 mSDsCounter, 0 mSdLazyCounter, 1615 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 620 SdHoareTripleChecker+Valid, 838 SdHoareTripleChecker+Invalid, 1680 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 1615 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-09-25 10:19:11,273 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [620 Valid, 838 Invalid, 1680 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 1615 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-09-25 10:19:11,274 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2834 states. [2024-09-25 10:19:12,523 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2834 to 1400. [2024-09-25 10:19:12,524 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1400 states, 1395 states have (on average 1.2967741935483872) internal successors, (1809), 1395 states have internal predecessors, (1809), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:19:12,526 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1400 states to 1400 states and 1813 transitions. [2024-09-25 10:19:12,528 INFO L78 Accepts]: Start accepts. Automaton has 1400 states and 1813 transitions. Word has length 66 [2024-09-25 10:19:12,528 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:19:12,529 INFO L474 AbstractCegarLoop]: Abstraction has 1400 states and 1813 transitions. [2024-09-25 10:19:12,529 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 51 states have (on average 2.607843137254902) internal successors, (133), 51 states have internal predecessors, (133), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:19:12,529 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:19:12,529 INFO L276 IsEmpty]: Start isEmpty. Operand 1400 states and 1813 transitions. [2024-09-25 10:19:12,531 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-25 10:19:12,531 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:19:12,531 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:19:12,544 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2024-09-25 10:19:12,731 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2024-09-25 10:19:12,732 INFO L399 AbstractCegarLoop]: === Iteration 22 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:19:12,732 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:19:12,732 INFO L85 PathProgramCache]: Analyzing trace with hash -289774206, now seen corresponding path program 6 times [2024-09-25 10:19:12,732 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:19:12,732 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1983176115] [2024-09-25 10:19:12,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:19:12,732 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:19:12,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:13,927 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:19:13,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:13,929 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 48 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2024-09-25 10:19:13,929 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:19:13,929 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1983176115] [2024-09-25 10:19:13,929 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1983176115] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:19:13,929 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [632443250] [2024-09-25 10:19:13,929 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-09-25 10:19:13,929 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:19:13,930 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:19:13,930 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:19:13,931 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2024-09-25 10:19:14,094 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 6 check-sat command(s) [2024-09-25 10:19:14,094 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:19:14,095 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-25 10:19:14,096 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:19:14,564 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 52 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-25 10:19:14,564 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:19:14,862 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:19:14,862 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 70 treesize of output 57 [2024-09-25 10:19:15,038 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 17 proven. 43 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-25 10:19:15,038 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [632443250] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:19:15,038 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:19:15,038 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 16, 15] total 48 [2024-09-25 10:19:15,039 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [371834833] [2024-09-25 10:19:15,039 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:19:15,039 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2024-09-25 10:19:15,039 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:19:15,039 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2024-09-25 10:19:15,040 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=293, Invalid=1963, Unknown=0, NotChecked=0, Total=2256 [2024-09-25 10:19:15,040 INFO L87 Difference]: Start difference. First operand 1400 states and 1813 transitions. Second operand has 48 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 48 states have internal predecessors, (143), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:19:18,526 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:19:18,527 INFO L93 Difference]: Finished difference Result 3221 states and 4159 transitions. [2024-09-25 10:19:18,528 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2024-09-25 10:19:18,528 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 48 states have internal predecessors, (143), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-25 10:19:18,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:19:18,534 INFO L225 Difference]: With dead ends: 3221 [2024-09-25 10:19:18,535 INFO L226 Difference]: Without dead ends: 1979 [2024-09-25 10:19:18,537 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 196 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1981 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=935, Invalid=6037, Unknown=0, NotChecked=0, Total=6972 [2024-09-25 10:19:18,540 INFO L434 NwaCegarLoop]: 41 mSDtfsCounter, 226 mSDsluCounter, 741 mSDsCounter, 0 mSdLazyCounter, 1615 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 782 SdHoareTripleChecker+Invalid, 1680 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 1615 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-25 10:19:18,540 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [226 Valid, 782 Invalid, 1680 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 1615 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-25 10:19:18,541 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1979 states. [2024-09-25 10:19:19,859 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1979 to 1482. [2024-09-25 10:19:19,861 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1482 states, 1477 states have (on average 1.2538930264048747) internal successors, (1852), 1477 states have internal predecessors, (1852), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:19:19,862 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1482 states to 1482 states and 1856 transitions. [2024-09-25 10:19:19,864 INFO L78 Accepts]: Start accepts. Automaton has 1482 states and 1856 transitions. Word has length 66 [2024-09-25 10:19:19,865 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:19:19,865 INFO L474 AbstractCegarLoop]: Abstraction has 1482 states and 1856 transitions. [2024-09-25 10:19:19,865 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 48 states have internal predecessors, (143), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:19:19,865 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:19:19,865 INFO L276 IsEmpty]: Start isEmpty. Operand 1482 states and 1856 transitions. [2024-09-25 10:19:19,867 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-25 10:19:19,867 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:19:19,867 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:19:19,880 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Ended with exit code 0 [2024-09-25 10:19:20,067 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2024-09-25 10:19:20,067 INFO L399 AbstractCegarLoop]: === Iteration 23 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:19:20,068 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:19:20,068 INFO L85 PathProgramCache]: Analyzing trace with hash 571791422, now seen corresponding path program 7 times [2024-09-25 10:19:20,068 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:19:20,068 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1364563216] [2024-09-25 10:19:20,068 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:19:20,068 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:19:20,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:20,995 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:19:20,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:20,997 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 38 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2024-09-25 10:19:20,997 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:19:20,997 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1364563216] [2024-09-25 10:19:20,997 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1364563216] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:19:20,997 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1610489953] [2024-09-25 10:19:20,997 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-09-25 10:19:20,997 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:19:20,997 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:19:20,998 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:19:20,999 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2024-09-25 10:19:21,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:21,091 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-25 10:19:21,093 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:19:21,326 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 12 [2024-09-25 10:19:21,327 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-25 10:19:21,334 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 45 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-25 10:19:21,334 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:19:21,529 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:19:21,529 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 24 [2024-09-25 10:19:21,534 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:19:21,534 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 55 treesize of output 42 [2024-09-25 10:19:21,652 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 26 proven. 30 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-25 10:19:21,652 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1610489953] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:19:21,653 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:19:21,653 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 15, 14] total 38 [2024-09-25 10:19:21,653 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1218417916] [2024-09-25 10:19:21,653 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:19:21,653 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-25 10:19:21,653 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:19:21,654 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-25 10:19:21,654 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1198, Unknown=0, NotChecked=0, Total=1406 [2024-09-25 10:19:21,654 INFO L87 Difference]: Start difference. First operand 1482 states and 1856 transitions. Second operand has 38 states, 38 states have (on average 3.210526315789474) internal successors, (122), 38 states have internal predecessors, (122), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:19:24,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:19:24,417 INFO L93 Difference]: Finished difference Result 3078 states and 3847 transitions. [2024-09-25 10:19:24,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2024-09-25 10:19:24,418 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 3.210526315789474) internal successors, (122), 38 states have internal predecessors, (122), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-25 10:19:24,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:19:24,424 INFO L225 Difference]: With dead ends: 3078 [2024-09-25 10:19:24,424 INFO L226 Difference]: Without dead ends: 1806 [2024-09-25 10:19:24,426 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 191 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1436 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=728, Invalid=4384, Unknown=0, NotChecked=0, Total=5112 [2024-09-25 10:19:24,427 INFO L434 NwaCegarLoop]: 38 mSDtfsCounter, 220 mSDsluCounter, 547 mSDsCounter, 0 mSdLazyCounter, 1179 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 220 SdHoareTripleChecker+Valid, 585 SdHoareTripleChecker+Invalid, 1218 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 1179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-25 10:19:24,427 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [220 Valid, 585 Invalid, 1218 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 1179 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-25 10:19:24,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1806 states. [2024-09-25 10:19:25,828 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1806 to 1573. [2024-09-25 10:19:25,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1573 states, 1568 states have (on average 1.219387755102041) internal successors, (1912), 1568 states have internal predecessors, (1912), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:19:25,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1573 states to 1573 states and 1916 transitions. [2024-09-25 10:19:25,834 INFO L78 Accepts]: Start accepts. Automaton has 1573 states and 1916 transitions. Word has length 66 [2024-09-25 10:19:25,834 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:19:25,834 INFO L474 AbstractCegarLoop]: Abstraction has 1573 states and 1916 transitions. [2024-09-25 10:19:25,834 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 3.210526315789474) internal successors, (122), 38 states have internal predecessors, (122), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:19:25,834 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:19:25,835 INFO L276 IsEmpty]: Start isEmpty. Operand 1573 states and 1916 transitions. [2024-09-25 10:19:25,836 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-25 10:19:25,836 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:19:25,836 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:19:25,849 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2024-09-25 10:19:26,037 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22,22 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:19:26,037 INFO L399 AbstractCegarLoop]: === Iteration 24 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:19:26,037 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:19:26,037 INFO L85 PathProgramCache]: Analyzing trace with hash 378012418, now seen corresponding path program 8 times [2024-09-25 10:19:26,037 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:19:26,037 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [709269448] [2024-09-25 10:19:26,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:19:26,038 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:19:26,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:27,106 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:19:27,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:27,108 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 48 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2024-09-25 10:19:27,108 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:19:27,108 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [709269448] [2024-09-25 10:19:27,108 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [709269448] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:19:27,108 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1409326320] [2024-09-25 10:19:27,108 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-25 10:19:27,108 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:19:27,108 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:19:27,109 INFO L229 MonitoredProcess]: Starting monitored process 23 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:19:27,110 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2024-09-25 10:19:27,187 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-25 10:19:27,187 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:19:27,188 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 61 conjuncts are in the unsatisfiable core [2024-09-25 10:19:27,189 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:19:27,628 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 12 [2024-09-25 10:19:27,630 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-25 10:19:27,642 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 62 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2024-09-25 10:19:27,642 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:19:28,049 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:19:28,050 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 24 [2024-09-25 10:19:28,381 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 21 proven. 44 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-25 10:19:28,381 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1409326320] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:19:28,381 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:19:28,381 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 17] total 47 [2024-09-25 10:19:28,381 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1587021842] [2024-09-25 10:19:28,381 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:19:28,382 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2024-09-25 10:19:28,382 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:19:28,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2024-09-25 10:19:28,382 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=289, Invalid=1873, Unknown=0, NotChecked=0, Total=2162 [2024-09-25 10:19:28,382 INFO L87 Difference]: Start difference. First operand 1573 states and 1916 transitions. Second operand has 47 states, 47 states have (on average 2.9361702127659575) internal successors, (138), 47 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:19:31,616 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:19:31,616 INFO L93 Difference]: Finished difference Result 1935 states and 2345 transitions. [2024-09-25 10:19:31,616 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2024-09-25 10:19:31,616 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 2.9361702127659575) internal successors, (138), 47 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-25 10:19:31,617 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:19:31,622 INFO L225 Difference]: With dead ends: 1935 [2024-09-25 10:19:31,622 INFO L226 Difference]: Without dead ends: 1664 [2024-09-25 10:19:31,623 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1711 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=817, Invalid=5035, Unknown=0, NotChecked=0, Total=5852 [2024-09-25 10:19:31,624 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 293 mSDsluCounter, 568 mSDsCounter, 0 mSdLazyCounter, 1144 mSolverCounterSat, 108 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 293 SdHoareTripleChecker+Valid, 600 SdHoareTripleChecker+Invalid, 1252 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 108 IncrementalHoareTripleChecker+Valid, 1144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-25 10:19:31,624 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [293 Valid, 600 Invalid, 1252 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [108 Valid, 1144 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-25 10:19:31,624 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1664 states. [2024-09-25 10:19:32,984 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1664 to 1528. [2024-09-25 10:19:32,986 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1528 states, 1523 states have (on average 1.2147078135259357) internal successors, (1850), 1523 states have internal predecessors, (1850), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:19:32,987 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1528 states to 1528 states and 1854 transitions. [2024-09-25 10:19:32,989 INFO L78 Accepts]: Start accepts. Automaton has 1528 states and 1854 transitions. Word has length 66 [2024-09-25 10:19:32,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:19:32,989 INFO L474 AbstractCegarLoop]: Abstraction has 1528 states and 1854 transitions. [2024-09-25 10:19:32,990 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 2.9361702127659575) internal successors, (138), 47 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:19:32,990 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:19:32,990 INFO L276 IsEmpty]: Start isEmpty. Operand 1528 states and 1854 transitions. [2024-09-25 10:19:32,991 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-25 10:19:32,991 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:19:32,991 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:19:33,006 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Ended with exit code 0 [2024-09-25 10:19:33,192 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2024-09-25 10:19:33,192 INFO L399 AbstractCegarLoop]: === Iteration 25 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:19:33,192 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:19:33,192 INFO L85 PathProgramCache]: Analyzing trace with hash -1621380802, now seen corresponding path program 9 times [2024-09-25 10:19:33,192 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:19:33,193 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1287062339] [2024-09-25 10:19:33,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:19:33,193 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:19:33,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:34,054 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:19:34,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:19:34,059 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 19 proven. 33 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2024-09-25 10:19:34,059 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:19:34,059 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1287062339] [2024-09-25 10:19:34,059 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1287062339] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:19:34,059 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1855895876] [2024-09-25 10:19:34,059 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-25 10:19:34,059 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:19:34,059 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:19:34,061 INFO L229 MonitoredProcess]: Starting monitored process 24 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:19:34,062 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2024-09-25 10:19:34,251 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2024-09-25 10:19:34,251 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:19:34,253 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 48 conjuncts are in the unsatisfiable core [2024-09-25 10:19:34,255 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:19:34,300 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 48 treesize of output 35 [2024-09-25 10:19:34,304 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 1 [2024-09-25 10:19:34,634 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-25 10:19:34,646 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 24 proven. 31 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2024-09-25 10:19:34,646 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:19:43,117 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 24 proven. 26 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2024-09-25 10:19:43,117 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1855895876] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:19:43,117 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:19:43,117 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 15, 15] total 44 [2024-09-25 10:19:43,117 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [898149353] [2024-09-25 10:19:43,117 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:19:43,117 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2024-09-25 10:19:43,117 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:19:43,118 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2024-09-25 10:19:43,118 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=357, Invalid=1533, Unknown=2, NotChecked=0, Total=1892 [2024-09-25 10:19:43,118 INFO L87 Difference]: Start difference. First operand 1528 states and 1854 transitions. Second operand has 44 states, 44 states have (on average 2.75) internal successors, (121), 44 states have internal predecessors, (121), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:19:56,089 WARN L293 SmtUtils]: Spent 12.07s on a formula simplification. DAG size of input: 66 DAG size of output: 53 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-25 10:20:08,234 WARN L293 SmtUtils]: Spent 12.06s on a formula simplification. DAG size of input: 62 DAG size of output: 49 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-25 10:20:09,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:20:09,792 INFO L93 Difference]: Finished difference Result 2757 states and 3328 transitions. [2024-09-25 10:20:09,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2024-09-25 10:20:09,793 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 2.75) internal successors, (121), 44 states have internal predecessors, (121), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-25 10:20:09,793 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:20:09,798 INFO L225 Difference]: With dead ends: 2757 [2024-09-25 10:20:09,798 INFO L226 Difference]: Without dead ends: 1467 [2024-09-25 10:20:09,800 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1400 ImplicationChecksByTransitivity, 33.4s TimeCoverageRelationStatistics Valid=856, Invalid=3834, Unknown=2, NotChecked=0, Total=4692 [2024-09-25 10:20:09,800 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 232 mSDsluCounter, 461 mSDsCounter, 0 mSdLazyCounter, 780 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 232 SdHoareTripleChecker+Valid, 489 SdHoareTripleChecker+Invalid, 843 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 780 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-25 10:20:09,800 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [232 Valid, 489 Invalid, 843 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 780 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-25 10:20:09,801 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1467 states. [2024-09-25 10:20:10,841 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1467 to 1111. [2024-09-25 10:20:10,843 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1111 states, 1106 states have (on average 1.1518987341772151) internal successors, (1274), 1106 states have internal predecessors, (1274), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:10,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1111 states to 1111 states and 1278 transitions. [2024-09-25 10:20:10,847 INFO L78 Accepts]: Start accepts. Automaton has 1111 states and 1278 transitions. Word has length 66 [2024-09-25 10:20:10,847 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:20:10,847 INFO L474 AbstractCegarLoop]: Abstraction has 1111 states and 1278 transitions. [2024-09-25 10:20:10,847 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 44 states have (on average 2.75) internal successors, (121), 44 states have internal predecessors, (121), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:10,847 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:10,848 INFO L276 IsEmpty]: Start isEmpty. Operand 1111 states and 1278 transitions. [2024-09-25 10:20:10,849 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2024-09-25 10:20:10,849 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:20:10,849 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:20:10,863 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Ended with exit code 0 [2024-09-25 10:20:11,049 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2024-09-25 10:20:11,050 INFO L399 AbstractCegarLoop]: === Iteration 26 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:20:11,050 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:11,050 INFO L85 PathProgramCache]: Analyzing trace with hash 1849335033, now seen corresponding path program 10 times [2024-09-25 10:20:11,050 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:20:11,050 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1543585133] [2024-09-25 10:20:11,050 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:20:11,051 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:20:11,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:11,212 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:20:11,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:11,213 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 0 proven. 33 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2024-09-25 10:20:11,213 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:20:11,213 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1543585133] [2024-09-25 10:20:11,213 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1543585133] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:20:11,213 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [581798991] [2024-09-25 10:20:11,213 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-25 10:20:11,214 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:20:11,214 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:20:11,215 INFO L229 MonitoredProcess]: Starting monitored process 25 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:20:11,215 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2024-09-25 10:20:11,299 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-25 10:20:11,300 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:20:11,301 INFO L262 TraceCheckSpWp]: Trace formula consists of 282 conjuncts, 44 conjuncts are in the unsatisfiable core [2024-09-25 10:20:11,302 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:20:11,583 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 10:20:11,584 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-25 10:20:11,595 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 20 proven. 50 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2024-09-25 10:20:11,595 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:20:11,824 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:20:11,824 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 68 treesize of output 55 [2024-09-25 10:20:11,831 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:20:11,832 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 35 [2024-09-25 10:20:11,925 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 21 proven. 30 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2024-09-25 10:20:11,925 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [581798991] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:20:11,925 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:20:11,925 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 14, 11] total 29 [2024-09-25 10:20:11,925 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [609506144] [2024-09-25 10:20:11,925 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:20:11,926 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2024-09-25 10:20:11,926 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:20:11,926 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2024-09-25 10:20:11,926 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=102, Invalid=710, Unknown=0, NotChecked=0, Total=812 [2024-09-25 10:20:11,927 INFO L87 Difference]: Start difference. First operand 1111 states and 1278 transitions. Second operand has 29 states, 29 states have (on average 4.137931034482759) internal successors, (120), 29 states have internal predecessors, (120), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:14,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:20:14,381 INFO L93 Difference]: Finished difference Result 1987 states and 2315 transitions. [2024-09-25 10:20:14,381 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2024-09-25 10:20:14,381 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 4.137931034482759) internal successors, (120), 29 states have internal predecessors, (120), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 68 [2024-09-25 10:20:14,382 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:20:14,387 INFO L225 Difference]: With dead ends: 1987 [2024-09-25 10:20:14,387 INFO L226 Difference]: Without dead ends: 1737 [2024-09-25 10:20:14,388 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 121 SyntacticMatches, 1 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 527 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=374, Invalid=2382, Unknown=0, NotChecked=0, Total=2756 [2024-09-25 10:20:14,388 INFO L434 NwaCegarLoop]: 36 mSDtfsCounter, 370 mSDsluCounter, 587 mSDsCounter, 0 mSdLazyCounter, 1010 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 370 SdHoareTripleChecker+Valid, 623 SdHoareTripleChecker+Invalid, 1021 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 1010 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-25 10:20:14,389 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [370 Valid, 623 Invalid, 1021 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 1010 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-25 10:20:14,389 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1737 states. [2024-09-25 10:20:15,467 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1737 to 1120. [2024-09-25 10:20:15,468 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1120 states, 1115 states have (on average 1.1542600896860986) internal successors, (1287), 1115 states have internal predecessors, (1287), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:15,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1120 states to 1120 states and 1291 transitions. [2024-09-25 10:20:15,471 INFO L78 Accepts]: Start accepts. Automaton has 1120 states and 1291 transitions. Word has length 68 [2024-09-25 10:20:15,471 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:20:15,471 INFO L474 AbstractCegarLoop]: Abstraction has 1120 states and 1291 transitions. [2024-09-25 10:20:15,472 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 4.137931034482759) internal successors, (120), 29 states have internal predecessors, (120), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:15,472 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:15,472 INFO L276 IsEmpty]: Start isEmpty. Operand 1120 states and 1291 transitions. [2024-09-25 10:20:15,473 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2024-09-25 10:20:15,473 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:20:15,473 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:20:15,486 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2024-09-25 10:20:15,673 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2024-09-25 10:20:15,674 INFO L399 AbstractCegarLoop]: === Iteration 27 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:20:15,674 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:15,674 INFO L85 PathProgramCache]: Analyzing trace with hash 128915325, now seen corresponding path program 11 times [2024-09-25 10:20:15,674 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:20:15,674 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [810908219] [2024-09-25 10:20:15,674 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:20:15,674 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:20:15,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:15,833 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:20:15,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:15,835 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 39 proven. 27 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2024-09-25 10:20:15,835 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:20:15,835 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [810908219] [2024-09-25 10:20:15,835 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [810908219] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:20:15,835 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1621139337] [2024-09-25 10:20:15,835 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-25 10:20:15,835 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:20:15,836 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:20:15,837 INFO L229 MonitoredProcess]: Starting monitored process 26 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:20:15,843 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2024-09-25 10:20:16,775 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 9 check-sat command(s) [2024-09-25 10:20:16,776 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:20:16,777 INFO L262 TraceCheckSpWp]: Trace formula consists of 307 conjuncts, 17 conjuncts are in the unsatisfiable core [2024-09-25 10:20:16,778 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:20:16,840 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 39 proven. 27 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2024-09-25 10:20:16,841 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:20:16,935 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 39 proven. 27 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2024-09-25 10:20:16,935 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1621139337] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:20:16,935 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:20:16,935 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 8] total 18 [2024-09-25 10:20:16,936 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1635680852] [2024-09-25 10:20:16,936 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:20:16,936 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2024-09-25 10:20:16,936 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:20:16,936 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2024-09-25 10:20:16,936 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=72, Invalid=234, Unknown=0, NotChecked=0, Total=306 [2024-09-25 10:20:16,936 INFO L87 Difference]: Start difference. First operand 1120 states and 1291 transitions. Second operand has 18 states, 18 states have (on average 5.0) internal successors, (90), 18 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:17,859 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:20:17,860 INFO L93 Difference]: Finished difference Result 1478 states and 1679 transitions. [2024-09-25 10:20:17,860 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-25 10:20:17,860 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 5.0) internal successors, (90), 18 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 75 [2024-09-25 10:20:17,860 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:20:17,864 INFO L225 Difference]: With dead ends: 1478 [2024-09-25 10:20:17,864 INFO L226 Difference]: Without dead ends: 928 [2024-09-25 10:20:17,865 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 146 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 74 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=72, Invalid=234, Unknown=0, NotChecked=0, Total=306 [2024-09-25 10:20:17,865 INFO L434 NwaCegarLoop]: 31 mSDtfsCounter, 0 mSDsluCounter, 234 mSDsCounter, 0 mSdLazyCounter, 181 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 181 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-25 10:20:17,866 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 265 Invalid, 181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 181 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-25 10:20:17,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 928 states. [2024-09-25 10:20:18,716 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 928 to 928. [2024-09-25 10:20:18,717 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 928 states, 923 states have (on average 1.14192849404117) internal successors, (1054), 923 states have internal predecessors, (1054), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:18,718 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 928 states to 928 states and 1058 transitions. [2024-09-25 10:20:18,720 INFO L78 Accepts]: Start accepts. Automaton has 928 states and 1058 transitions. Word has length 75 [2024-09-25 10:20:18,720 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:20:18,721 INFO L474 AbstractCegarLoop]: Abstraction has 928 states and 1058 transitions. [2024-09-25 10:20:18,721 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 5.0) internal successors, (90), 18 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:18,721 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:18,721 INFO L276 IsEmpty]: Start isEmpty. Operand 928 states and 1058 transitions. [2024-09-25 10:20:18,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2024-09-25 10:20:18,722 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:20:18,722 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:20:18,738 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Ended with exit code 0 [2024-09-25 10:20:18,923 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2024-09-25 10:20:18,923 INFO L399 AbstractCegarLoop]: === Iteration 28 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:20:18,923 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:18,923 INFO L85 PathProgramCache]: Analyzing trace with hash 846171212, now seen corresponding path program 12 times [2024-09-25 10:20:18,923 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:20:18,923 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [968375962] [2024-09-25 10:20:18,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:20:18,923 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:20:18,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:19,606 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:20:19,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:19,608 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 62 proven. 31 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-25 10:20:19,608 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:20:19,608 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [968375962] [2024-09-25 10:20:19,608 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [968375962] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:20:19,608 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1564803653] [2024-09-25 10:20:19,608 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-09-25 10:20:19,608 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:20:19,608 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:20:19,609 INFO L229 MonitoredProcess]: Starting monitored process 27 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:20:19,610 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2024-09-25 10:20:19,736 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 5 check-sat command(s) [2024-09-25 10:20:19,737 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:20:19,738 INFO L262 TraceCheckSpWp]: Trace formula consists of 240 conjuncts, 40 conjuncts are in the unsatisfiable core [2024-09-25 10:20:19,739 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:20:20,297 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 44 proven. 59 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-25 10:20:20,297 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:20:20,868 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 44 proven. 50 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2024-09-25 10:20:20,868 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1564803653] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:20:20,868 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:20:20,868 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 19, 16] total 42 [2024-09-25 10:20:20,869 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [201514587] [2024-09-25 10:20:20,869 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:20:20,869 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2024-09-25 10:20:20,869 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:20:20,869 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2024-09-25 10:20:20,869 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=270, Invalid=1452, Unknown=0, NotChecked=0, Total=1722 [2024-09-25 10:20:20,870 INFO L87 Difference]: Start difference. First operand 928 states and 1058 transitions. Second operand has 42 states, 42 states have (on average 3.2857142857142856) internal successors, (138), 42 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:23,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:20:23,572 INFO L93 Difference]: Finished difference Result 1306 states and 1480 transitions. [2024-09-25 10:20:23,572 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2024-09-25 10:20:23,572 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 42 states have (on average 3.2857142857142856) internal successors, (138), 42 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 76 [2024-09-25 10:20:23,572 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:20:23,577 INFO L225 Difference]: With dead ends: 1306 [2024-09-25 10:20:23,577 INFO L226 Difference]: Without dead ends: 1032 [2024-09-25 10:20:23,578 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1606 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=783, Invalid=4619, Unknown=0, NotChecked=0, Total=5402 [2024-09-25 10:20:23,578 INFO L434 NwaCegarLoop]: 31 mSDtfsCounter, 209 mSDsluCounter, 537 mSDsCounter, 0 mSdLazyCounter, 825 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 209 SdHoareTripleChecker+Valid, 568 SdHoareTripleChecker+Invalid, 861 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 825 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-25 10:20:23,578 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [209 Valid, 568 Invalid, 861 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 825 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-25 10:20:23,579 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1032 states. [2024-09-25 10:20:24,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1032 to 798. [2024-09-25 10:20:24,372 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 798 states, 793 states have (on average 1.1424968474148802) internal successors, (906), 793 states have internal predecessors, (906), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:24,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 798 states to 798 states and 910 transitions. [2024-09-25 10:20:24,376 INFO L78 Accepts]: Start accepts. Automaton has 798 states and 910 transitions. Word has length 76 [2024-09-25 10:20:24,376 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:20:24,376 INFO L474 AbstractCegarLoop]: Abstraction has 798 states and 910 transitions. [2024-09-25 10:20:24,376 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 42 states have (on average 3.2857142857142856) internal successors, (138), 42 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:24,376 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:24,376 INFO L276 IsEmpty]: Start isEmpty. Operand 798 states and 910 transitions. [2024-09-25 10:20:24,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2024-09-25 10:20:24,377 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:20:24,377 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:20:24,390 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Ended with exit code 0 [2024-09-25 10:20:24,577 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable27,27 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:20:24,578 INFO L399 AbstractCegarLoop]: === Iteration 29 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:20:24,578 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:24,578 INFO L85 PathProgramCache]: Analyzing trace with hash -984218334, now seen corresponding path program 13 times [2024-09-25 10:20:24,578 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:20:24,578 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [743489938] [2024-09-25 10:20:24,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:20:24,578 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:20:24,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:24,961 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:20:24,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:24,963 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 0 proven. 36 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2024-09-25 10:20:24,963 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:20:24,963 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [743489938] [2024-09-25 10:20:24,963 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [743489938] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:20:24,963 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [232790489] [2024-09-25 10:20:24,963 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-09-25 10:20:24,963 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:20:24,963 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:20:24,964 INFO L229 MonitoredProcess]: Starting monitored process 28 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:20:24,965 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2024-09-25 10:20:25,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:25,058 INFO L262 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 44 conjuncts are in the unsatisfiable core [2024-09-25 10:20:25,059 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:20:25,345 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 8 [2024-09-25 10:20:25,347 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 0 proven. 110 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-25 10:20:25,347 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:20:25,765 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-25 10:20:25,765 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 49 treesize of output 31 [2024-09-25 10:20:25,866 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 39 proven. 57 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-25 10:20:25,866 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [232790489] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:20:25,866 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:20:25,866 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 19, 15] total 39 [2024-09-25 10:20:25,866 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [309408313] [2024-09-25 10:20:25,866 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:20:25,866 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2024-09-25 10:20:25,866 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:20:25,867 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2024-09-25 10:20:25,867 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=220, Invalid=1262, Unknown=0, NotChecked=0, Total=1482 [2024-09-25 10:20:25,867 INFO L87 Difference]: Start difference. First operand 798 states and 910 transitions. Second operand has 39 states, 39 states have (on average 3.769230769230769) internal successors, (147), 39 states have internal predecessors, (147), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:28,246 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:20:28,246 INFO L93 Difference]: Finished difference Result 2303 states and 2696 transitions. [2024-09-25 10:20:28,247 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-25 10:20:28,247 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 39 states have (on average 3.769230769230769) internal successors, (147), 39 states have internal predecessors, (147), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 77 [2024-09-25 10:20:28,247 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:20:28,252 INFO L225 Difference]: With dead ends: 2303 [2024-09-25 10:20:28,252 INFO L226 Difference]: Without dead ends: 1608 [2024-09-25 10:20:28,254 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 130 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 706 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=381, Invalid=2375, Unknown=0, NotChecked=0, Total=2756 [2024-09-25 10:20:28,254 INFO L434 NwaCegarLoop]: 49 mSDtfsCounter, 194 mSDsluCounter, 758 mSDsCounter, 0 mSdLazyCounter, 806 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 194 SdHoareTripleChecker+Valid, 807 SdHoareTripleChecker+Invalid, 825 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 806 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-25 10:20:28,254 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [194 Valid, 807 Invalid, 825 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 806 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-25 10:20:28,255 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1608 states. [2024-09-25 10:20:29,338 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1608 to 1053. [2024-09-25 10:20:29,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1053 states, 1048 states have (on average 1.133587786259542) internal successors, (1188), 1048 states have internal predecessors, (1188), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:29,340 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1053 states to 1053 states and 1192 transitions. [2024-09-25 10:20:29,342 INFO L78 Accepts]: Start accepts. Automaton has 1053 states and 1192 transitions. Word has length 77 [2024-09-25 10:20:29,343 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:20:29,343 INFO L474 AbstractCegarLoop]: Abstraction has 1053 states and 1192 transitions. [2024-09-25 10:20:29,343 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 39 states have (on average 3.769230769230769) internal successors, (147), 39 states have internal predecessors, (147), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:29,343 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:29,343 INFO L276 IsEmpty]: Start isEmpty. Operand 1053 states and 1192 transitions. [2024-09-25 10:20:29,344 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2024-09-25 10:20:29,344 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:20:29,344 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 5, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:20:29,357 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Ended with exit code 0 [2024-09-25 10:20:29,545 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2024-09-25 10:20:29,545 INFO L399 AbstractCegarLoop]: === Iteration 30 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:20:29,545 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:29,545 INFO L85 PathProgramCache]: Analyzing trace with hash -1743097550, now seen corresponding path program 14 times [2024-09-25 10:20:29,545 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:20:29,545 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1110735658] [2024-09-25 10:20:29,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:20:29,545 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:20:29,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:29,854 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:20:29,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:29,856 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 0 proven. 132 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-25 10:20:29,856 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:20:29,856 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1110735658] [2024-09-25 10:20:29,856 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1110735658] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:20:29,856 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2135420452] [2024-09-25 10:20:29,856 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-25 10:20:29,856 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:20:29,857 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:20:29,858 INFO L229 MonitoredProcess]: Starting monitored process 29 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:20:29,859 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2024-09-25 10:20:29,967 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-25 10:20:29,967 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:20:29,968 INFO L262 TraceCheckSpWp]: Trace formula consists of 343 conjuncts, 39 conjuncts are in the unsatisfiable core [2024-09-25 10:20:29,970 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:20:30,137 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 0 proven. 144 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2024-09-25 10:20:30,137 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:20:30,398 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 0 proven. 132 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-25 10:20:30,398 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2135420452] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:20:30,399 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:20:30,399 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 15, 12] total 28 [2024-09-25 10:20:30,399 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [326534529] [2024-09-25 10:20:30,399 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:20:30,399 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2024-09-25 10:20:30,399 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:20:30,399 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2024-09-25 10:20:30,400 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=679, Unknown=0, NotChecked=0, Total=756 [2024-09-25 10:20:30,400 INFO L87 Difference]: Start difference. First operand 1053 states and 1192 transitions. Second operand has 28 states, 28 states have (on average 5.214285714285714) internal successors, (146), 26 states have internal predecessors, (146), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:34,143 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 10:20:34,143 INFO L93 Difference]: Finished difference Result 2107 states and 2440 transitions. [2024-09-25 10:20:34,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2024-09-25 10:20:34,144 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 5.214285714285714) internal successors, (146), 26 states have internal predecessors, (146), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 87 [2024-09-25 10:20:34,144 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 10:20:34,153 INFO L225 Difference]: With dead ends: 2107 [2024-09-25 10:20:34,153 INFO L226 Difference]: Without dead ends: 2102 [2024-09-25 10:20:34,154 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 229 GetRequests, 159 SyntacticMatches, 2 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1188 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=388, Invalid=4442, Unknown=0, NotChecked=0, Total=4830 [2024-09-25 10:20:34,154 INFO L434 NwaCegarLoop]: 175 mSDtfsCounter, 423 mSDsluCounter, 3016 mSDsCounter, 0 mSdLazyCounter, 2519 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 423 SdHoareTripleChecker+Valid, 3191 SdHoareTripleChecker+Invalid, 2548 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 2519 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-09-25 10:20:34,154 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [423 Valid, 3191 Invalid, 2548 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 2519 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-09-25 10:20:34,155 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2102 states. [2024-09-25 10:20:35,652 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2102 to 1321. [2024-09-25 10:20:35,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1321 states, 1316 states have (on average 1.134498480243161) internal successors, (1493), 1316 states have internal predecessors, (1493), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:35,654 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1321 states to 1321 states and 1497 transitions. [2024-09-25 10:20:35,657 INFO L78 Accepts]: Start accepts. Automaton has 1321 states and 1497 transitions. Word has length 87 [2024-09-25 10:20:35,657 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 10:20:35,657 INFO L474 AbstractCegarLoop]: Abstraction has 1321 states and 1497 transitions. [2024-09-25 10:20:35,658 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 5.214285714285714) internal successors, (146), 26 states have internal predecessors, (146), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:20:35,658 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:35,658 INFO L276 IsEmpty]: Start isEmpty. Operand 1321 states and 1497 transitions. [2024-09-25 10:20:35,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2024-09-25 10:20:35,659 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 10:20:35,659 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 10:20:35,672 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2024-09-25 10:20:35,859 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,29 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:20:35,860 INFO L399 AbstractCegarLoop]: === Iteration 31 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 10:20:35,860 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 10:20:35,860 INFO L85 PathProgramCache]: Analyzing trace with hash 1965063732, now seen corresponding path program 15 times [2024-09-25 10:20:35,860 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 10:20:35,860 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1972399939] [2024-09-25 10:20:35,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 10:20:35,860 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 10:20:35,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:36,930 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 10:20:36,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 10:20:36,932 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 35 proven. 110 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2024-09-25 10:20:36,933 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 10:20:36,933 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1972399939] [2024-09-25 10:20:36,933 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1972399939] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 10:20:36,933 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1155031651] [2024-09-25 10:20:36,933 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-25 10:20:36,933 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 10:20:36,933 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 10:20:36,934 INFO L229 MonitoredProcess]: Starting monitored process 30 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 10:20:36,935 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2024-09-25 10:20:37,219 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2024-09-25 10:20:37,219 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 10:20:37,223 INFO L262 TraceCheckSpWp]: Trace formula consists of 319 conjuncts, 145 conjuncts are in the unsatisfiable core [2024-09-25 10:20:37,225 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 10:20:37,349 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 56 treesize of output 43 [2024-09-25 10:20:37,354 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 1 [2024-09-25 10:20:40,374 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:20:40,376 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-25 10:20:40,376 INFO L173 IndexEqualityManager]: detected equality via solver [2024-09-25 10:20:40,378 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 10:20:40,378 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 45 treesize of output 22 [2024-09-25 10:20:40,413 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 68 proven. 89 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-25 10:20:40,413 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 10:20:48,059 WARN L876 $PredicateComparison]: unable to prove that (let ((.cse1 (select |c_#memory_int#2| |c_main_~#input_string~0.base|)) (.cse12 (mod (+ c_main_~i~0 1) 4294967296)) (.cse5 (select |c_#memory_int#1| |c_main_~#vogal_array~0.base|))) (let ((.cse2 (select .cse5 |c_main_~#vogal_array~0.offset|)) (.cse6 (mod c_main_~j~0 4294967296)) (.cse10 (< .cse12 2147483648)) (.cse9 (select .cse1 (+ .cse12 (- 4294967296) |c_main_~#input_string~0.offset|))) (.cse8 (< 2147483647 .cse12)) (.cse7 (select .cse1 (+ .cse12 |c_main_~#input_string~0.offset|)))) (or (let ((.cse0 (mod (+ c_main_~i~0 2) 4294967296))) (and (or (< 2147483647 .cse0) (= (select .cse1 (+ .cse0 |c_main_~#input_string~0.offset|)) .cse2)) (or (= .cse2 (select .cse1 (+ .cse0 (- 4294967296) |c_main_~#input_string~0.offset|))) (< .cse0 2147483648)))) (let ((.cse4 (select .cse5 (+ .cse6 |c_main_~#vogal_array~0.offset|))) (.cse3 (mod c_main_~i~0 4294967296))) (and (or (< 2147483647 .cse3) (not (= (select .cse1 (+ .cse3 |c_main_~#input_string~0.offset|)) .cse4))) (or (not (= (select .cse1 (+ .cse3 (- 4294967296) |c_main_~#input_string~0.offset|)) .cse4)) (< .cse3 2147483648)))) (and (or (not (= .cse7 .cse2)) .cse8) (or (not (= .cse9 .cse2)) .cse10)) (< 1 .cse6) (let ((.cse11 (select .cse5 (+ |c_main_~#vogal_array~0.offset| 1)))) (and (or .cse10 (= .cse9 .cse11)) (or .cse8 (= .cse7 .cse11))))))) is different from true [2024-09-25 10:21:11,588 WARN L293 SmtUtils]: Spent 15.65s on a formula simplification that was a NOOP. DAG size: 66 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-25 10:21:54,323 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 44 proven. 94 refuted. 0 times theorem prover too weak. 38 trivial. 7 not checked. [2024-09-25 10:21:54,324 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1155031651] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-25 10:21:54,324 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-25 10:21:54,324 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 42, 38] total 97 [2024-09-25 10:21:54,324 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1226222571] [2024-09-25 10:21:54,324 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-25 10:21:54,324 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 97 states [2024-09-25 10:21:54,324 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 10:21:54,325 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 97 interpolants. [2024-09-25 10:21:54,325 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1361, Invalid=7757, Unknown=6, NotChecked=188, Total=9312 [2024-09-25 10:21:54,325 INFO L87 Difference]: Start difference. First operand 1321 states and 1497 transitions. Second operand has 97 states, 97 states have (on average 1.9793814432989691) internal successors, (192), 97 states have internal predecessors, (192), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-25 10:21:58,837 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-09-25 10:22:03,025 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-09-25 10:22:07,068 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers []