./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/recursified_nla-digbench/recursified_cohencu-ll.c --full-output --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e378df2c Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/recursified_nla-digbench/recursified_cohencu-ll.c -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 260777f6a7be1f16cc330a008300c11ebdea8f1cf9d8e96a0325274fd8fd5b2a --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --- Real Ultimate output --- This is Ultimate 0.2.5-wip.dk.contract-modifies-e378df2-m [2024-10-15 15:18:33,953 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-10-15 15:18:34,004 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-10-15 15:18:34,008 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-10-15 15:18:34,009 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-10-15 15:18:34,027 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-10-15 15:18:34,028 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-10-15 15:18:34,028 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-10-15 15:18:34,029 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-10-15 15:18:34,030 INFO L153 SettingsManager]: * Use memory slicer=true [2024-10-15 15:18:34,030 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-10-15 15:18:34,030 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-10-15 15:18:34,031 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-10-15 15:18:34,032 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-10-15 15:18:34,033 INFO L153 SettingsManager]: * Use SBE=true [2024-10-15 15:18:34,033 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-10-15 15:18:34,034 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-10-15 15:18:34,034 INFO L153 SettingsManager]: * sizeof long=4 [2024-10-15 15:18:34,034 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-10-15 15:18:34,034 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-10-15 15:18:34,034 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-10-15 15:18:34,036 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-10-15 15:18:34,037 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-10-15 15:18:34,038 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-10-15 15:18:34,038 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-10-15 15:18:34,038 INFO L153 SettingsManager]: * sizeof long double=12 [2024-10-15 15:18:34,038 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-10-15 15:18:34,038 INFO L153 SettingsManager]: * Use constant arrays=true [2024-10-15 15:18:34,039 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-10-15 15:18:34,039 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-10-15 15:18:34,039 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-10-15 15:18:34,039 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-10-15 15:18:34,039 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-10-15 15:18:34,039 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-10-15 15:18:34,040 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-10-15 15:18:34,040 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-10-15 15:18:34,040 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-10-15 15:18:34,040 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-10-15 15:18:34,040 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-10-15 15:18:34,040 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-10-15 15:18:34,041 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-10-15 15:18:34,042 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-10-15 15:18:34,042 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 260777f6a7be1f16cc330a008300c11ebdea8f1cf9d8e96a0325274fd8fd5b2a Applying setting for plugin de.uni_freiburg.informatik.ultimate.boogie.procedureinliner: Inline calls to implemented procedures -> NEVER Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Generate GraphML witnesses -> false [2024-10-15 15:18:34,248 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-10-15 15:18:34,270 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-10-15 15:18:34,273 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-10-15 15:18:34,274 INFO L270 PluginConnector]: Initializing CDTParser... [2024-10-15 15:18:34,275 INFO L274 PluginConnector]: CDTParser initialized [2024-10-15 15:18:34,276 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/recursified_nla-digbench/recursified_cohencu-ll.c [2024-10-15 15:18:35,506 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-10-15 15:18:35,662 INFO L384 CDTParser]: Found 1 translation units. [2024-10-15 15:18:35,663 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_cohencu-ll.c [2024-10-15 15:18:35,670 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/ee03a0899/e6ccac2f20d44c798d4ce763276bb7e5/FLAGc39395f06 [2024-10-15 15:18:35,685 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/ee03a0899/e6ccac2f20d44c798d4ce763276bb7e5 [2024-10-15 15:18:35,687 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-10-15 15:18:35,688 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-10-15 15:18:35,688 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-10-15 15:18:35,689 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-10-15 15:18:35,693 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-10-15 15:18:35,693 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.10 03:18:35" (1/1) ... [2024-10-15 15:18:35,694 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@64b9284a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35, skipping insertion in model container [2024-10-15 15:18:35,694 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.10 03:18:35" (1/1) ... [2024-10-15 15:18:35,713 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-10-15 15:18:35,850 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_cohencu-ll.c[1124,1137] [2024-10-15 15:18:35,880 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-15 15:18:35,888 INFO L200 MainTranslator]: Completed pre-run [2024-10-15 15:18:35,897 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_cohencu-ll.c[1124,1137] [2024-10-15 15:18:35,912 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-15 15:18:35,924 INFO L204 MainTranslator]: Completed translation [2024-10-15 15:18:35,925 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35 WrapperNode [2024-10-15 15:18:35,925 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-10-15 15:18:35,926 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-10-15 15:18:35,928 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-10-15 15:18:35,928 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-10-15 15:18:35,936 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35" (1/1) ... [2024-10-15 15:18:35,942 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35" (1/1) ... [2024-10-15 15:18:35,947 INFO L138 Inliner]: procedures = 16, calls = 99, calls flagged for inlining = 0, calls inlined = 0, statements flattened = 0 [2024-10-15 15:18:35,948 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-10-15 15:18:35,948 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-10-15 15:18:35,948 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-10-15 15:18:35,949 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-10-15 15:18:35,956 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35" (1/1) ... [2024-10-15 15:18:35,957 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35" (1/1) ... [2024-10-15 15:18:35,959 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35" (1/1) ... [2024-10-15 15:18:35,988 INFO L175 MemorySlicer]: Split 66 memory accesses to 6 slices as follows [2, 5, 12, 11, 15, 21]. 32 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2, 0, 0, 0, 0, 0]. The 9 writes are split as follows [0, 1, 2, 2, 2, 2]. [2024-10-15 15:18:35,988 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35" (1/1) ... [2024-10-15 15:18:35,988 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35" (1/1) ... [2024-10-15 15:18:35,994 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35" (1/1) ... [2024-10-15 15:18:36,016 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35" (1/1) ... [2024-10-15 15:18:36,018 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35" (1/1) ... [2024-10-15 15:18:36,018 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35" (1/1) ... [2024-10-15 15:18:36,025 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-10-15 15:18:36,025 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-10-15 15:18:36,027 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-10-15 15:18:36,027 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-10-15 15:18:36,028 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35" (1/1) ... [2024-10-15 15:18:36,033 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-10-15 15:18:36,040 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:18:36,053 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-10-15 15:18:36,055 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-10-15 15:18:36,097 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-10-15 15:18:36,098 INFO L130 BoogieDeclarations]: Found specification of procedure main [2024-10-15 15:18:36,098 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2024-10-15 15:18:36,098 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-10-15 15:18:36,098 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-10-15 15:18:36,098 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-10-15 15:18:36,099 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-10-15 15:18:36,099 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-10-15 15:18:36,099 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-10-15 15:18:36,099 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-10-15 15:18:36,100 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-10-15 15:18:36,100 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-10-15 15:18:36,101 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2024-10-15 15:18:36,101 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2024-10-15 15:18:36,101 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2024-10-15 15:18:36,101 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#5 [2024-10-15 15:18:36,101 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2024-10-15 15:18:36,101 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2024-10-15 15:18:36,101 INFO L130 BoogieDeclarations]: Found specification of procedure func_to_recursive_line_29_to_41_0 [2024-10-15 15:18:36,101 INFO L138 BoogieDeclarations]: Found implementation of procedure func_to_recursive_line_29_to_41_0 [2024-10-15 15:18:36,101 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-10-15 15:18:36,101 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-10-15 15:18:36,101 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-10-15 15:18:36,101 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-10-15 15:18:36,101 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2024-10-15 15:18:36,101 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2024-10-15 15:18:36,102 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2024-10-15 15:18:36,102 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#5 [2024-10-15 15:18:36,102 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-10-15 15:18:36,102 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-10-15 15:18:36,102 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-10-15 15:18:36,179 INFO L238 CfgBuilder]: Building ICFG [2024-10-15 15:18:36,180 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-10-15 15:18:36,373 INFO L? ?]: Removed 8 outVars from TransFormulas that were not future-live. [2024-10-15 15:18:36,373 INFO L287 CfgBuilder]: Performing block encoding [2024-10-15 15:18:36,391 INFO L309 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-10-15 15:18:36,392 INFO L314 CfgBuilder]: Removed 1 assume(true) statements. [2024-10-15 15:18:36,393 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.10 03:18:36 BoogieIcfgContainer [2024-10-15 15:18:36,393 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-10-15 15:18:36,395 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-10-15 15:18:36,395 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-10-15 15:18:36,397 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-10-15 15:18:36,398 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 15.10 03:18:35" (1/3) ... [2024-10-15 15:18:36,399 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@994f51c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.10 03:18:36, skipping insertion in model container [2024-10-15 15:18:36,399 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 03:18:35" (2/3) ... [2024-10-15 15:18:36,400 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@994f51c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.10 03:18:36, skipping insertion in model container [2024-10-15 15:18:36,400 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.10 03:18:36" (3/3) ... [2024-10-15 15:18:36,403 INFO L112 eAbstractionObserver]: Analyzing ICFG recursified_cohencu-ll.c [2024-10-15 15:18:36,416 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-10-15 15:18:36,416 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-10-15 15:18:36,458 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-10-15 15:18:36,463 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@13dc77a4, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-10-15 15:18:36,464 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-10-15 15:18:36,467 INFO L276 IsEmpty]: Start isEmpty. Operand has 44 states, 23 states have (on average 1.173913043478261) internal successors, (27), 25 states have internal predecessors, (27), 15 states have call successors, (15), 4 states have call predecessors, (15), 4 states have return successors, (15), 15 states have call predecessors, (15), 15 states have call successors, (15) [2024-10-15 15:18:36,472 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2024-10-15 15:18:36,472 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:18:36,472 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:18:36,473 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:18:36,478 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:18:36,478 INFO L85 PathProgramCache]: Analyzing trace with hash 775072714, now seen corresponding path program 1 times [2024-10-15 15:18:36,485 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:18:36,485 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1742028937] [2024-10-15 15:18:36,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:18:36,486 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:18:36,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:18:37,115 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-10-15 15:18:37,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:18:37,121 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 15:18:37,125 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:18:37,125 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1742028937] [2024-10-15 15:18:37,126 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1742028937] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 15:18:37,126 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 15:18:37,126 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-10-15 15:18:37,127 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1468090707] [2024-10-15 15:18:37,128 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 15:18:37,131 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-10-15 15:18:37,131 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:18:37,148 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-10-15 15:18:37,149 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2024-10-15 15:18:37,150 INFO L87 Difference]: Start difference. First operand has 44 states, 23 states have (on average 1.173913043478261) internal successors, (27), 25 states have internal predecessors, (27), 15 states have call successors, (15), 4 states have call predecessors, (15), 4 states have return successors, (15), 15 states have call predecessors, (15), 15 states have call successors, (15) Second operand has 8 states, 6 states have (on average 1.1666666666666667) internal successors, (7), 6 states have internal predecessors, (7), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-10-15 15:18:37,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:18:37,397 INFO L93 Difference]: Finished difference Result 102 states and 152 transitions. [2024-10-15 15:18:37,399 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-10-15 15:18:37,400 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 1.1666666666666667) internal successors, (7), 6 states have internal predecessors, (7), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 12 [2024-10-15 15:18:37,400 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:18:37,405 INFO L225 Difference]: With dead ends: 102 [2024-10-15 15:18:37,405 INFO L226 Difference]: Without dead ends: 60 [2024-10-15 15:18:37,408 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2024-10-15 15:18:37,410 INFO L432 NwaCegarLoop]: 40 mSDtfsCounter, 20 mSDsluCounter, 191 mSDsCounter, 0 mSdLazyCounter, 152 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 231 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 152 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-10-15 15:18:37,411 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 231 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 152 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-10-15 15:18:37,423 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2024-10-15 15:18:37,445 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 59. [2024-10-15 15:18:37,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 33 states have (on average 1.0909090909090908) internal successors, (36), 35 states have internal predecessors, (36), 20 states have call successors, (20), 6 states have call predecessors, (20), 5 states have return successors, (19), 18 states have call predecessors, (19), 18 states have call successors, (19) [2024-10-15 15:18:37,449 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 75 transitions. [2024-10-15 15:18:37,451 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 75 transitions. Word has length 12 [2024-10-15 15:18:37,451 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:18:37,451 INFO L471 AbstractCegarLoop]: Abstraction has 59 states and 75 transitions. [2024-10-15 15:18:37,451 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 1.1666666666666667) internal successors, (7), 6 states have internal predecessors, (7), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-10-15 15:18:37,452 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:18:37,452 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 75 transitions. [2024-10-15 15:18:37,453 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2024-10-15 15:18:37,453 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:18:37,453 INFO L215 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:18:37,454 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-10-15 15:18:37,454 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:18:37,455 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:18:37,455 INFO L85 PathProgramCache]: Analyzing trace with hash 1351765856, now seen corresponding path program 1 times [2024-10-15 15:18:37,455 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:18:37,456 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1951646976] [2024-10-15 15:18:37,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:18:37,456 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:18:37,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-10-15 15:18:37,485 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1189142567] [2024-10-15 15:18:37,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:18:37,486 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:18:37,486 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:18:37,487 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:18:37,492 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-10-15 15:18:37,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:18:37,578 INFO L255 TraceCheckSpWp]: Trace formula consists of 190 conjuncts, 35 conjuncts are in the unsatisfiable core [2024-10-15 15:18:37,587 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:18:37,634 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:18:37,642 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:18:37,828 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 15:18:37,828 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-10-15 15:18:37,961 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 15:18:37,961 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:18:37,961 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1951646976] [2024-10-15 15:18:37,962 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-10-15 15:18:37,962 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1189142567] [2024-10-15 15:18:37,962 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1189142567] provided 1 perfect and 1 imperfect interpolant sequences [2024-10-15 15:18:37,962 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-10-15 15:18:37,962 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [9] total 10 [2024-10-15 15:18:37,963 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1728247243] [2024-10-15 15:18:37,963 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 15:18:37,964 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-10-15 15:18:37,964 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:18:37,964 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-10-15 15:18:37,965 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2024-10-15 15:18:37,965 INFO L87 Difference]: Start difference. First operand 59 states and 75 transitions. Second operand has 8 states, 6 states have (on average 1.8333333333333333) internal successors, (11), 6 states have internal predecessors, (11), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-10-15 15:18:38,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:18:38,181 INFO L93 Difference]: Finished difference Result 66 states and 81 transitions. [2024-10-15 15:18:38,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-10-15 15:18:38,182 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 1.8333333333333333) internal successors, (11), 6 states have internal predecessors, (11), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 18 [2024-10-15 15:18:38,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:18:38,183 INFO L225 Difference]: With dead ends: 66 [2024-10-15 15:18:38,185 INFO L226 Difference]: Without dead ends: 64 [2024-10-15 15:18:38,186 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 23 SyntacticMatches, 4 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=37, Invalid=119, Unknown=0, NotChecked=0, Total=156 [2024-10-15 15:18:38,186 INFO L432 NwaCegarLoop]: 40 mSDtfsCounter, 19 mSDsluCounter, 189 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 229 SdHoareTripleChecker+Invalid, 154 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-10-15 15:18:38,187 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 229 Invalid, 154 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-10-15 15:18:38,188 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2024-10-15 15:18:38,200 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 63. [2024-10-15 15:18:38,200 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 36 states have (on average 1.0833333333333333) internal successors, (39), 38 states have internal predecessors, (39), 20 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (19), 18 states have call predecessors, (19), 18 states have call successors, (19) [2024-10-15 15:18:38,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 78 transitions. [2024-10-15 15:18:38,202 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 78 transitions. Word has length 18 [2024-10-15 15:18:38,202 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:18:38,202 INFO L471 AbstractCegarLoop]: Abstraction has 63 states and 78 transitions. [2024-10-15 15:18:38,203 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 1.8333333333333333) internal successors, (11), 6 states have internal predecessors, (11), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-10-15 15:18:38,203 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:18:38,203 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 78 transitions. [2024-10-15 15:18:38,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2024-10-15 15:18:38,204 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:18:38,204 INFO L215 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:18:38,216 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-10-15 15:18:38,408 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:18:38,409 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:18:38,409 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:18:38,410 INFO L85 PathProgramCache]: Analyzing trace with hash -1982254220, now seen corresponding path program 1 times [2024-10-15 15:18:38,410 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:18:38,410 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1089212486] [2024-10-15 15:18:38,410 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:18:38,411 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:18:38,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-10-15 15:18:38,440 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1671724112] [2024-10-15 15:18:38,440 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:18:38,440 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:18:38,441 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:18:38,445 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:18:38,450 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-10-15 15:18:38,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:18:38,549 INFO L255 TraceCheckSpWp]: Trace formula consists of 207 conjuncts, 37 conjuncts are in the unsatisfiable core [2024-10-15 15:18:38,553 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:18:38,566 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:18:38,578 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:18:38,799 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-10-15 15:18:38,799 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-10-15 15:18:38,902 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-10-15 15:18:38,903 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:18:38,903 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1089212486] [2024-10-15 15:18:38,903 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-10-15 15:18:38,903 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1671724112] [2024-10-15 15:18:38,903 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1671724112] provided 1 perfect and 1 imperfect interpolant sequences [2024-10-15 15:18:38,903 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-10-15 15:18:38,904 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [9] total 9 [2024-10-15 15:18:38,904 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1746257873] [2024-10-15 15:18:38,904 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 15:18:38,904 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-10-15 15:18:38,904 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:18:38,905 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-10-15 15:18:38,905 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2024-10-15 15:18:38,905 INFO L87 Difference]: Start difference. First operand 63 states and 78 transitions. Second operand has 8 states, 6 states have (on average 2.0) internal successors, (12), 6 states have internal predecessors, (12), 4 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-10-15 15:18:39,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:18:39,092 INFO L93 Difference]: Finished difference Result 70 states and 84 transitions. [2024-10-15 15:18:39,093 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-10-15 15:18:39,093 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 2.0) internal successors, (12), 6 states have internal predecessors, (12), 4 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 24 [2024-10-15 15:18:39,093 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:18:39,094 INFO L225 Difference]: With dead ends: 70 [2024-10-15 15:18:39,096 INFO L226 Difference]: Without dead ends: 68 [2024-10-15 15:18:39,097 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 34 SyntacticMatches, 6 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=98, Unknown=0, NotChecked=0, Total=132 [2024-10-15 15:18:39,098 INFO L432 NwaCegarLoop]: 41 mSDtfsCounter, 18 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-10-15 15:18:39,098 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 239 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-10-15 15:18:39,102 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2024-10-15 15:18:39,128 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 67. [2024-10-15 15:18:39,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 39 states have (on average 1.0769230769230769) internal successors, (42), 41 states have internal predecessors, (42), 20 states have call successors, (20), 8 states have call predecessors, (20), 7 states have return successors, (19), 18 states have call predecessors, (19), 18 states have call successors, (19) [2024-10-15 15:18:39,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 81 transitions. [2024-10-15 15:18:39,131 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 81 transitions. Word has length 24 [2024-10-15 15:18:39,131 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:18:39,131 INFO L471 AbstractCegarLoop]: Abstraction has 67 states and 81 transitions. [2024-10-15 15:18:39,131 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 2.0) internal successors, (12), 6 states have internal predecessors, (12), 4 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-10-15 15:18:39,132 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:18:39,132 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 81 transitions. [2024-10-15 15:18:39,132 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2024-10-15 15:18:39,132 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:18:39,133 INFO L215 NwaCegarLoop]: trace histogram [4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:18:39,149 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2024-10-15 15:18:39,333 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:18:39,334 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:18:39,335 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:18:39,335 INFO L85 PathProgramCache]: Analyzing trace with hash 1760067974, now seen corresponding path program 1 times [2024-10-15 15:18:39,335 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:18:39,335 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1895035656] [2024-10-15 15:18:39,335 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:18:39,335 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:18:39,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-10-15 15:18:39,353 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1459563356] [2024-10-15 15:18:39,353 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:18:39,353 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:18:39,353 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:18:39,355 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:18:39,356 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-10-15 15:18:39,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:18:39,448 INFO L255 TraceCheckSpWp]: Trace formula consists of 226 conjuncts, 62 conjuncts are in the unsatisfiable core [2024-10-15 15:18:39,452 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:18:39,460 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:18:39,464 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:18:39,469 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:18:39,958 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 2 proven. 12 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-10-15 15:18:39,958 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-10-15 15:18:40,196 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 53 treesize of output 41 [2024-10-15 15:18:40,289 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 5 proven. 7 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-10-15 15:18:40,289 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:18:40,289 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1895035656] [2024-10-15 15:18:40,289 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-10-15 15:18:40,289 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1459563356] [2024-10-15 15:18:40,289 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1459563356] provided 0 perfect and 2 imperfect interpolant sequences [2024-10-15 15:18:40,289 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-10-15 15:18:40,289 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 12] total 22 [2024-10-15 15:18:40,290 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1378774070] [2024-10-15 15:18:40,290 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-10-15 15:18:40,290 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-10-15 15:18:40,290 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:18:40,291 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-10-15 15:18:40,291 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=64, Invalid=398, Unknown=0, NotChecked=0, Total=462 [2024-10-15 15:18:40,291 INFO L87 Difference]: Start difference. First operand 67 states and 81 transitions. Second operand has 22 states, 16 states have (on average 1.75) internal successors, (28), 18 states have internal predecessors, (28), 9 states have call successors, (12), 6 states have call predecessors, (12), 4 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) [2024-10-15 15:18:48,170 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [1] [2024-10-15 15:18:48,758 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:18:48,758 INFO L93 Difference]: Finished difference Result 113 states and 137 transitions. [2024-10-15 15:18:48,759 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2024-10-15 15:18:48,759 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 16 states have (on average 1.75) internal successors, (28), 18 states have internal predecessors, (28), 9 states have call successors, (12), 6 states have call predecessors, (12), 4 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) Word has length 30 [2024-10-15 15:18:48,759 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:18:48,762 INFO L225 Difference]: With dead ends: 113 [2024-10-15 15:18:48,762 INFO L226 Difference]: Without dead ends: 111 [2024-10-15 15:18:48,763 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 77 GetRequests, 35 SyntacticMatches, 5 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 256 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=235, Invalid=1247, Unknown=0, NotChecked=0, Total=1482 [2024-10-15 15:18:48,763 INFO L432 NwaCegarLoop]: 23 mSDtfsCounter, 78 mSDsluCounter, 199 mSDsCounter, 0 mSdLazyCounter, 724 mSolverCounterSat, 45 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 770 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 724 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.4s IncrementalHoareTripleChecker+Time [2024-10-15 15:18:48,764 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 222 Invalid, 770 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 724 Invalid, 1 Unknown, 0 Unchecked, 7.4s Time] [2024-10-15 15:18:48,764 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 111 states. [2024-10-15 15:18:48,789 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 111 to 109. [2024-10-15 15:18:48,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 109 states, 64 states have (on average 1.078125) internal successors, (69), 67 states have internal predecessors, (69), 32 states have call successors, (32), 12 states have call predecessors, (32), 12 states have return successors, (32), 30 states have call predecessors, (32), 29 states have call successors, (32) [2024-10-15 15:18:48,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109 states to 109 states and 133 transitions. [2024-10-15 15:18:48,791 INFO L78 Accepts]: Start accepts. Automaton has 109 states and 133 transitions. Word has length 30 [2024-10-15 15:18:48,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:18:48,791 INFO L471 AbstractCegarLoop]: Abstraction has 109 states and 133 transitions. [2024-10-15 15:18:48,792 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 16 states have (on average 1.75) internal successors, (28), 18 states have internal predecessors, (28), 9 states have call successors, (12), 6 states have call predecessors, (12), 4 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) [2024-10-15 15:18:48,792 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:18:48,792 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 133 transitions. [2024-10-15 15:18:48,793 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2024-10-15 15:18:48,793 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:18:48,793 INFO L215 NwaCegarLoop]: trace histogram [5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:18:48,806 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-10-15 15:18:48,996 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:18:48,997 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:18:48,998 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:18:48,998 INFO L85 PathProgramCache]: Analyzing trace with hash 1652310806, now seen corresponding path program 1 times [2024-10-15 15:18:48,998 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:18:48,998 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [208411351] [2024-10-15 15:18:48,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:18:48,999 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:18:49,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-10-15 15:18:49,021 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [412852243] [2024-10-15 15:18:49,022 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:18:49,022 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:18:49,022 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:18:49,024 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:18:49,025 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-10-15 15:18:49,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:18:49,107 INFO L255 TraceCheckSpWp]: Trace formula consists of 243 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-10-15 15:18:49,109 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:18:49,114 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:18:49,125 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:18:49,929 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 3 proven. 17 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-10-15 15:18:49,929 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-10-15 15:18:50,288 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 46 treesize of output 30 [2024-10-15 15:18:50,442 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 7 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-10-15 15:18:50,443 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:18:50,443 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [208411351] [2024-10-15 15:18:50,443 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-10-15 15:18:50,443 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [412852243] [2024-10-15 15:18:50,443 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [412852243] provided 0 perfect and 2 imperfect interpolant sequences [2024-10-15 15:18:50,443 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-10-15 15:18:50,443 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 12] total 22 [2024-10-15 15:18:50,443 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2065975567] [2024-10-15 15:18:50,443 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-10-15 15:18:50,443 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-10-15 15:18:50,444 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:18:50,444 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-10-15 15:18:50,444 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=64, Invalid=398, Unknown=0, NotChecked=0, Total=462 [2024-10-15 15:18:50,444 INFO L87 Difference]: Start difference. First operand 109 states and 133 transitions. Second operand has 22 states, 16 states have (on average 1.875) internal successors, (30), 18 states have internal predecessors, (30), 9 states have call successors, (14), 6 states have call predecessors, (14), 4 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) [2024-10-15 15:18:58,682 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [1] [2024-10-15 15:18:58,745 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:18:58,745 INFO L93 Difference]: Finished difference Result 122 states and 145 transitions. [2024-10-15 15:18:58,745 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2024-10-15 15:18:58,746 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 16 states have (on average 1.875) internal successors, (30), 18 states have internal predecessors, (30), 9 states have call successors, (14), 6 states have call predecessors, (14), 4 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) Word has length 36 [2024-10-15 15:18:58,746 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:18:58,747 INFO L225 Difference]: With dead ends: 122 [2024-10-15 15:18:58,747 INFO L226 Difference]: Without dead ends: 120 [2024-10-15 15:18:58,748 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 89 GetRequests, 45 SyntacticMatches, 7 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 259 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=235, Invalid=1247, Unknown=0, NotChecked=0, Total=1482 [2024-10-15 15:18:58,748 INFO L432 NwaCegarLoop]: 23 mSDtfsCounter, 83 mSDsluCounter, 183 mSDsCounter, 0 mSdLazyCounter, 671 mSolverCounterSat, 52 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 88 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 724 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 671 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.8s IncrementalHoareTripleChecker+Time [2024-10-15 15:18:58,748 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [88 Valid, 206 Invalid, 724 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 671 Invalid, 1 Unknown, 0 Unchecked, 6.8s Time] [2024-10-15 15:18:58,749 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2024-10-15 15:18:58,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 117. [2024-10-15 15:18:58,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 70 states have (on average 1.0714285714285714) internal successors, (75), 73 states have internal predecessors, (75), 32 states have call successors, (32), 14 states have call predecessors, (32), 14 states have return successors, (32), 30 states have call predecessors, (32), 29 states have call successors, (32) [2024-10-15 15:18:58,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 139 transitions. [2024-10-15 15:18:58,791 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 139 transitions. Word has length 36 [2024-10-15 15:18:58,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:18:58,791 INFO L471 AbstractCegarLoop]: Abstraction has 117 states and 139 transitions. [2024-10-15 15:18:58,792 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 16 states have (on average 1.875) internal successors, (30), 18 states have internal predecessors, (30), 9 states have call successors, (14), 6 states have call predecessors, (14), 4 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) [2024-10-15 15:18:58,792 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:18:58,792 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 139 transitions. [2024-10-15 15:18:58,793 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2024-10-15 15:18:58,793 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:18:58,793 INFO L215 NwaCegarLoop]: trace histogram [6, 5, 5, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:18:58,809 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2024-10-15 15:18:58,993 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:18:58,994 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:18:58,994 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:18:58,994 INFO L85 PathProgramCache]: Analyzing trace with hash 982058431, now seen corresponding path program 1 times [2024-10-15 15:18:58,994 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:18:58,994 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1336392196] [2024-10-15 15:18:58,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:18:58,994 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:18:59,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:18:59,813 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-10-15 15:18:59,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:18:59,819 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2024-10-15 15:18:59,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:18:59,823 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-10-15 15:18:59,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:18:59,828 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2024-10-15 15:18:59,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:18:59,832 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2024-10-15 15:18:59,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:18:59,837 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2024-10-15 15:18:59,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:18:59,841 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 10 proven. 3 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-10-15 15:18:59,842 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:18:59,842 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1336392196] [2024-10-15 15:18:59,843 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1336392196] provided 0 perfect and 1 imperfect interpolant sequences [2024-10-15 15:18:59,843 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [341646252] [2024-10-15 15:18:59,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:18:59,843 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:18:59,843 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:18:59,844 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:18:59,846 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-10-15 15:18:59,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:18:59,942 INFO L255 TraceCheckSpWp]: Trace formula consists of 325 conjuncts, 44 conjuncts are in the unsatisfiable core [2024-10-15 15:18:59,946 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:19:00,634 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 33 treesize of output 21 [2024-10-15 15:19:00,643 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 19 [2024-10-15 15:19:00,716 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2024-10-15 15:19:00,723 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-10-15 15:19:00,839 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 7 proven. 22 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2024-10-15 15:19:00,839 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-10-15 15:19:05,383 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 11 proven. 14 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2024-10-15 15:19:05,383 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [341646252] provided 0 perfect and 2 imperfect interpolant sequences [2024-10-15 15:19:05,383 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-10-15 15:19:05,383 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 10] total 21 [2024-10-15 15:19:05,383 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [994928467] [2024-10-15 15:19:05,383 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-10-15 15:19:05,384 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-10-15 15:19:05,384 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:19:05,384 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-10-15 15:19:05,384 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=63, Invalid=356, Unknown=1, NotChecked=0, Total=420 [2024-10-15 15:19:05,384 INFO L87 Difference]: Start difference. First operand 117 states and 139 transitions. Second operand has 21 states, 16 states have (on average 2.5625) internal successors, (41), 17 states have internal predecessors, (41), 9 states have call successors, (23), 7 states have call predecessors, (23), 4 states have return successors, (16), 3 states have call predecessors, (16), 5 states have call successors, (16) [2024-10-15 15:19:07,463 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:19:07,463 INFO L93 Difference]: Finished difference Result 127 states and 149 transitions. [2024-10-15 15:19:07,464 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2024-10-15 15:19:07,464 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 16 states have (on average 2.5625) internal successors, (41), 17 states have internal predecessors, (41), 9 states have call successors, (23), 7 states have call predecessors, (23), 4 states have return successors, (16), 3 states have call predecessors, (16), 5 states have call successors, (16) Word has length 46 [2024-10-15 15:19:07,464 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:19:07,465 INFO L225 Difference]: With dead ends: 127 [2024-10-15 15:19:07,465 INFO L226 Difference]: Without dead ends: 125 [2024-10-15 15:19:07,465 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 89 SyntacticMatches, 9 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 120 ImplicationChecksByTransitivity, 5.7s TimeCoverageRelationStatistics Valid=155, Invalid=774, Unknown=1, NotChecked=0, Total=930 [2024-10-15 15:19:07,466 INFO L432 NwaCegarLoop]: 29 mSDtfsCounter, 98 mSDsluCounter, 143 mSDsCounter, 0 mSdLazyCounter, 580 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 103 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 629 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 580 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2024-10-15 15:19:07,466 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [103 Valid, 172 Invalid, 629 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 580 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2024-10-15 15:19:07,466 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125 states. [2024-10-15 15:19:07,497 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125 to 125. [2024-10-15 15:19:07,498 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 75 states have (on average 1.0666666666666667) internal successors, (80), 78 states have internal predecessors, (80), 32 states have call successors, (32), 15 states have call predecessors, (32), 17 states have return successors, (35), 31 states have call predecessors, (35), 29 states have call successors, (35) [2024-10-15 15:19:07,499 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 147 transitions. [2024-10-15 15:19:07,499 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 147 transitions. Word has length 46 [2024-10-15 15:19:07,499 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:19:07,499 INFO L471 AbstractCegarLoop]: Abstraction has 125 states and 147 transitions. [2024-10-15 15:19:07,500 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 16 states have (on average 2.5625) internal successors, (41), 17 states have internal predecessors, (41), 9 states have call successors, (23), 7 states have call predecessors, (23), 4 states have return successors, (16), 3 states have call predecessors, (16), 5 states have call successors, (16) [2024-10-15 15:19:07,500 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:19:07,500 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 147 transitions. [2024-10-15 15:19:07,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2024-10-15 15:19:07,505 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:19:07,505 INFO L215 NwaCegarLoop]: trace histogram [6, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:19:07,518 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2024-10-15 15:19:07,705 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2024-10-15 15:19:07,705 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:19:07,706 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:19:07,706 INFO L85 PathProgramCache]: Analyzing trace with hash -1659555766, now seen corresponding path program 1 times [2024-10-15 15:19:07,706 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:19:07,706 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [806420331] [2024-10-15 15:19:07,706 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:19:07,706 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:19:07,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:19:07,975 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-10-15 15:19:07,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:19:08,012 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-10-15 15:19:08,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:19:08,108 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-10-15 15:19:08,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:19:08,111 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2024-10-15 15:19:08,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:19:08,115 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-10-15 15:19:08,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:19:08,118 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2024-10-15 15:19:08,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:19:08,120 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2024-10-15 15:19:08,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:19:08,131 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-10-15 15:19:08,131 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:19:08,131 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [806420331] [2024-10-15 15:19:08,131 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [806420331] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 15:19:08,132 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 15:19:08,132 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-10-15 15:19:08,132 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1119870797] [2024-10-15 15:19:08,132 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 15:19:08,132 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-10-15 15:19:08,132 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:19:08,133 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-10-15 15:19:08,133 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2024-10-15 15:19:08,133 INFO L87 Difference]: Start difference. First operand 125 states and 147 transitions. Second operand has 8 states, 7 states have (on average 2.5714285714285716) internal successors, (18), 6 states have internal predecessors, (18), 4 states have call successors, (9), 3 states have call predecessors, (9), 2 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2024-10-15 15:19:08,765 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:19:08,765 INFO L93 Difference]: Finished difference Result 131 states and 152 transitions. [2024-10-15 15:19:08,765 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-10-15 15:19:08,765 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 2.5714285714285716) internal successors, (18), 6 states have internal predecessors, (18), 4 states have call successors, (9), 3 states have call predecessors, (9), 2 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 46 [2024-10-15 15:19:08,766 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:19:08,767 INFO L225 Difference]: With dead ends: 131 [2024-10-15 15:19:08,767 INFO L226 Difference]: Without dead ends: 129 [2024-10-15 15:19:08,767 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=26, Invalid=64, Unknown=0, NotChecked=0, Total=90 [2024-10-15 15:19:08,768 INFO L432 NwaCegarLoop]: 29 mSDtfsCounter, 24 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 180 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 210 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 180 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-10-15 15:19:08,768 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 102 Invalid, 210 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 180 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-10-15 15:19:08,768 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 129 states. [2024-10-15 15:19:08,805 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 129 to 129. [2024-10-15 15:19:08,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129 states, 78 states have (on average 1.064102564102564) internal successors, (83), 81 states have internal predecessors, (83), 32 states have call successors, (32), 16 states have call predecessors, (32), 18 states have return successors, (35), 31 states have call predecessors, (35), 29 states have call successors, (35) [2024-10-15 15:19:08,807 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 150 transitions. [2024-10-15 15:19:08,808 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 150 transitions. Word has length 46 [2024-10-15 15:19:08,808 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:19:08,808 INFO L471 AbstractCegarLoop]: Abstraction has 129 states and 150 transitions. [2024-10-15 15:19:08,808 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 2.5714285714285716) internal successors, (18), 6 states have internal predecessors, (18), 4 states have call successors, (9), 3 states have call predecessors, (9), 2 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2024-10-15 15:19:08,808 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:19:08,808 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 150 transitions. [2024-10-15 15:19:08,809 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2024-10-15 15:19:08,809 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:19:08,809 INFO L215 NwaCegarLoop]: trace histogram [7, 6, 6, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:19:08,809 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-10-15 15:19:08,809 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:19:08,809 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:19:08,809 INFO L85 PathProgramCache]: Analyzing trace with hash -279405163, now seen corresponding path program 2 times [2024-10-15 15:19:08,809 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:19:08,809 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1715966540] [2024-10-15 15:19:08,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:19:08,810 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:19:08,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-10-15 15:19:08,831 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1765988669] [2024-10-15 15:19:08,831 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-10-15 15:19:08,832 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:19:08,832 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:19:08,833 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:19:08,835 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-10-15 15:19:08,948 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-10-15 15:19:08,948 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-10-15 15:19:08,950 INFO L255 TraceCheckSpWp]: Trace formula consists of 342 conjuncts, 76 conjuncts are in the unsatisfiable core [2024-10-15 15:19:08,953 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:19:08,967 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:19:08,982 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:19:10,601 INFO L349 Elim1Store]: treesize reduction 11, result has 8.3 percent of original size [2024-10-15 15:19:10,601 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 15 treesize of output 7 [2024-10-15 15:19:10,657 INFO L349 Elim1Store]: treesize reduction 29, result has 34.1 percent of original size [2024-10-15 15:19:10,657 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 29 [2024-10-15 15:19:10,689 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-10-15 15:19:11,239 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 4 proven. 49 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2024-10-15 15:19:11,239 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-10-15 15:19:12,196 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 51 treesize of output 35 [2024-10-15 15:19:12,539 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 11 proven. 21 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2024-10-15 15:19:12,539 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:19:12,539 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1715966540] [2024-10-15 15:19:12,539 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-10-15 15:19:12,539 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1765988669] [2024-10-15 15:19:12,539 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1765988669] provided 0 perfect and 2 imperfect interpolant sequences [2024-10-15 15:19:12,539 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-10-15 15:19:12,540 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 14] total 27 [2024-10-15 15:19:12,540 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [299606354] [2024-10-15 15:19:12,540 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-10-15 15:19:12,540 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2024-10-15 15:19:12,540 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:19:12,540 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2024-10-15 15:19:12,541 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=83, Invalid=619, Unknown=0, NotChecked=0, Total=702 [2024-10-15 15:19:12,541 INFO L87 Difference]: Start difference. First operand 129 states and 150 transitions. Second operand has 27 states, 21 states have (on average 2.0476190476190474) internal successors, (43), 21 states have internal predecessors, (43), 11 states have call successors, (20), 9 states have call predecessors, (20), 5 states have return successors, (13), 5 states have call predecessors, (13), 7 states have call successors, (13) [2024-10-15 15:19:18,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:19:18,540 INFO L93 Difference]: Finished difference Result 163 states and 185 transitions. [2024-10-15 15:19:18,541 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2024-10-15 15:19:18,541 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 21 states have (on average 2.0476190476190474) internal successors, (43), 21 states have internal predecessors, (43), 11 states have call successors, (20), 9 states have call predecessors, (20), 5 states have return successors, (13), 5 states have call predecessors, (13), 7 states have call successors, (13) Word has length 52 [2024-10-15 15:19:18,542 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:19:18,545 INFO L225 Difference]: With dead ends: 163 [2024-10-15 15:19:18,545 INFO L226 Difference]: Without dead ends: 161 [2024-10-15 15:19:18,546 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 68 SyntacticMatches, 10 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 746 ImplicationChecksByTransitivity, 4.7s TimeCoverageRelationStatistics Valid=407, Invalid=2785, Unknown=0, NotChecked=0, Total=3192 [2024-10-15 15:19:18,546 INFO L432 NwaCegarLoop]: 42 mSDtfsCounter, 178 mSDsluCounter, 225 mSDsCounter, 0 mSdLazyCounter, 935 mSolverCounterSat, 124 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 267 SdHoareTripleChecker+Invalid, 1059 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 124 IncrementalHoareTripleChecker+Valid, 935 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2024-10-15 15:19:18,546 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [183 Valid, 267 Invalid, 1059 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [124 Valid, 935 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2024-10-15 15:19:18,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 161 states. [2024-10-15 15:19:18,606 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 161 to 157. [2024-10-15 15:19:18,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 96 states have (on average 1.0625) internal successors, (102), 99 states have internal predecessors, (102), 38 states have call successors, (38), 20 states have call predecessors, (38), 22 states have return successors, (40), 37 states have call predecessors, (40), 34 states have call successors, (40) [2024-10-15 15:19:18,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 180 transitions. [2024-10-15 15:19:18,608 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 180 transitions. Word has length 52 [2024-10-15 15:19:18,608 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:19:18,608 INFO L471 AbstractCegarLoop]: Abstraction has 157 states and 180 transitions. [2024-10-15 15:19:18,608 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 21 states have (on average 2.0476190476190474) internal successors, (43), 21 states have internal predecessors, (43), 11 states have call successors, (20), 9 states have call predecessors, (20), 5 states have return successors, (13), 5 states have call predecessors, (13), 7 states have call successors, (13) [2024-10-15 15:19:18,608 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:19:18,609 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 180 transitions. [2024-10-15 15:19:18,612 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2024-10-15 15:19:18,612 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:19:18,613 INFO L215 NwaCegarLoop]: trace histogram [7, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:19:18,628 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2024-10-15 15:19:18,813 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:19:18,813 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:19:18,814 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:19:18,814 INFO L85 PathProgramCache]: Analyzing trace with hash -1573894041, now seen corresponding path program 1 times [2024-10-15 15:19:18,814 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:19:18,814 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1229380518] [2024-10-15 15:19:18,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:19:18,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:19:18,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-10-15 15:19:18,829 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [219318878] [2024-10-15 15:19:18,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:19:18,829 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:19:18,829 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:19:18,831 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:19:18,833 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-10-15 15:19:18,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:19:18,918 INFO L255 TraceCheckSpWp]: Trace formula consists of 282 conjuncts, 21 conjuncts are in the unsatisfiable core [2024-10-15 15:19:18,920 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:19:18,931 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:19:18,947 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:19:19,497 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 30 proven. 2 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-10-15 15:19:19,497 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-10-15 15:19:19,798 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:19:19,798 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1229380518] [2024-10-15 15:19:19,798 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-10-15 15:19:19,798 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [219318878] [2024-10-15 15:19:19,798 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [219318878] provided 0 perfect and 1 imperfect interpolant sequences [2024-10-15 15:19:19,798 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-10-15 15:19:19,798 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8] total 8 [2024-10-15 15:19:19,798 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [650119454] [2024-10-15 15:19:19,798 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-10-15 15:19:19,798 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-10-15 15:19:19,799 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:19:19,799 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-10-15 15:19:19,799 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2024-10-15 15:19:19,799 INFO L87 Difference]: Start difference. First operand 157 states and 180 transitions. Second operand has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 4 states have call successors, (10), 4 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2024-10-15 15:19:20,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:19:20,784 INFO L93 Difference]: Finished difference Result 165 states and 186 transitions. [2024-10-15 15:19:20,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-10-15 15:19:20,784 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 4 states have call successors, (10), 4 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 52 [2024-10-15 15:19:20,784 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:19:20,785 INFO L225 Difference]: With dead ends: 165 [2024-10-15 15:19:20,785 INFO L226 Difference]: Without dead ends: 163 [2024-10-15 15:19:20,786 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 48 SyntacticMatches, 3 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=45, Invalid=137, Unknown=0, NotChecked=0, Total=182 [2024-10-15 15:19:20,786 INFO L432 NwaCegarLoop]: 22 mSDtfsCounter, 31 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 232 mSolverCounterSat, 42 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 98 SdHoareTripleChecker+Invalid, 275 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 232 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2024-10-15 15:19:20,786 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 98 Invalid, 275 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 232 Invalid, 1 Unknown, 0 Unchecked, 0.7s Time] [2024-10-15 15:19:20,786 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2024-10-15 15:19:20,833 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 161. [2024-10-15 15:19:20,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 161 states, 99 states have (on average 1.0606060606060606) internal successors, (105), 102 states have internal predecessors, (105), 38 states have call successors, (38), 21 states have call predecessors, (38), 23 states have return successors, (40), 37 states have call predecessors, (40), 34 states have call successors, (40) [2024-10-15 15:19:20,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 161 states to 161 states and 183 transitions. [2024-10-15 15:19:20,835 INFO L78 Accepts]: Start accepts. Automaton has 161 states and 183 transitions. Word has length 52 [2024-10-15 15:19:20,836 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:19:20,837 INFO L471 AbstractCegarLoop]: Abstraction has 161 states and 183 transitions. [2024-10-15 15:19:20,837 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 4 states have call successors, (10), 4 states have call predecessors, (10), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2024-10-15 15:19:20,837 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:19:20,838 INFO L276 IsEmpty]: Start isEmpty. Operand 161 states and 183 transitions. [2024-10-15 15:19:20,838 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2024-10-15 15:19:20,838 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:19:20,838 INFO L215 NwaCegarLoop]: trace histogram [8, 7, 7, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:19:20,857 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2024-10-15 15:19:21,041 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:19:21,042 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:19:21,042 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:19:21,042 INFO L85 PathProgramCache]: Analyzing trace with hash -1781053975, now seen corresponding path program 3 times [2024-10-15 15:19:21,042 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:19:21,042 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [420866425] [2024-10-15 15:19:21,042 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:19:21,042 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:19:21,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-10-15 15:19:21,076 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [2026961687] [2024-10-15 15:19:21,076 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-10-15 15:19:21,076 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:19:21,076 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:19:21,077 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:19:21,078 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-10-15 15:19:21,169 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2024-10-15 15:19:21,169 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-10-15 15:19:21,171 INFO L255 TraceCheckSpWp]: Trace formula consists of 272 conjuncts, 80 conjuncts are in the unsatisfiable core [2024-10-15 15:19:21,173 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:19:21,187 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:19:21,197 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:19:21,207 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:19:22,054 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-10-15 15:19:22,064 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-10-15 15:19:22,537 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 0 proven. 61 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2024-10-15 15:19:22,537 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-10-15 15:19:23,234 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 14 proven. 7 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2024-10-15 15:19:23,234 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:19:23,234 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [420866425] [2024-10-15 15:19:23,234 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-10-15 15:19:23,234 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2026961687] [2024-10-15 15:19:23,234 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2026961687] provided 0 perfect and 2 imperfect interpolant sequences [2024-10-15 15:19:23,235 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-10-15 15:19:23,235 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 10] total 20 [2024-10-15 15:19:23,235 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [156648636] [2024-10-15 15:19:23,235 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-10-15 15:19:23,235 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2024-10-15 15:19:23,235 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:19:23,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2024-10-15 15:19:23,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=328, Unknown=0, NotChecked=0, Total=380 [2024-10-15 15:19:23,236 INFO L87 Difference]: Start difference. First operand 161 states and 183 transitions. Second operand has 20 states, 16 states have (on average 2.5625) internal successors, (41), 14 states have internal predecessors, (41), 9 states have call successors, (22), 9 states have call predecessors, (22), 3 states have return successors, (15), 5 states have call predecessors, (15), 5 states have call successors, (15) [2024-10-15 15:19:26,192 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:19:26,193 INFO L93 Difference]: Finished difference Result 171 states and 190 transitions. [2024-10-15 15:19:26,193 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2024-10-15 15:19:26,193 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 16 states have (on average 2.5625) internal successors, (41), 14 states have internal predecessors, (41), 9 states have call successors, (22), 9 states have call predecessors, (22), 3 states have return successors, (15), 5 states have call predecessors, (15), 5 states have call successors, (15) Word has length 58 [2024-10-15 15:19:26,194 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:19:26,194 INFO L225 Difference]: With dead ends: 171 [2024-10-15 15:19:26,195 INFO L226 Difference]: Without dead ends: 169 [2024-10-15 15:19:26,195 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 86 SyntacticMatches, 12 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 92 ImplicationChecksByTransitivity, 1.5s TimeCoverageRelationStatistics Valid=115, Invalid=641, Unknown=0, NotChecked=0, Total=756 [2024-10-15 15:19:26,195 INFO L432 NwaCegarLoop]: 58 mSDtfsCounter, 101 mSDsluCounter, 395 mSDsCounter, 0 mSdLazyCounter, 862 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 101 SdHoareTripleChecker+Valid, 453 SdHoareTripleChecker+Invalid, 900 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 862 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2024-10-15 15:19:26,195 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [101 Valid, 453 Invalid, 900 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 862 Invalid, 0 Unknown, 0 Unchecked, 2.3s Time] [2024-10-15 15:19:26,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169 states. [2024-10-15 15:19:26,251 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169 to 165. [2024-10-15 15:19:26,251 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 165 states, 102 states have (on average 1.0588235294117647) internal successors, (108), 105 states have internal predecessors, (108), 38 states have call successors, (38), 22 states have call predecessors, (38), 24 states have return successors, (40), 37 states have call predecessors, (40), 34 states have call successors, (40) [2024-10-15 15:19:26,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 165 states to 165 states and 186 transitions. [2024-10-15 15:19:26,252 INFO L78 Accepts]: Start accepts. Automaton has 165 states and 186 transitions. Word has length 58 [2024-10-15 15:19:26,252 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:19:26,252 INFO L471 AbstractCegarLoop]: Abstraction has 165 states and 186 transitions. [2024-10-15 15:19:26,252 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 16 states have (on average 2.5625) internal successors, (41), 14 states have internal predecessors, (41), 9 states have call successors, (22), 9 states have call predecessors, (22), 3 states have return successors, (15), 5 states have call predecessors, (15), 5 states have call successors, (15) [2024-10-15 15:19:26,253 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:19:26,253 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 186 transitions. [2024-10-15 15:19:26,253 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2024-10-15 15:19:26,253 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:19:26,253 INFO L215 NwaCegarLoop]: trace histogram [8, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:19:26,267 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2024-10-15 15:19:26,454 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:19:26,454 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:19:26,454 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:19:26,454 INFO L85 PathProgramCache]: Analyzing trace with hash -1103831102, now seen corresponding path program 1 times [2024-10-15 15:19:26,455 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:19:26,455 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [997249163] [2024-10-15 15:19:26,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:19:26,455 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:19:26,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-10-15 15:19:26,475 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1131430527] [2024-10-15 15:19:26,475 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:19:26,475 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:19:26,475 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:19:26,477 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:19:26,481 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-10-15 15:19:26,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:19:26,565 INFO L255 TraceCheckSpWp]: Trace formula consists of 301 conjuncts, 51 conjuncts are in the unsatisfiable core [2024-10-15 15:19:26,568 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:19:26,589 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:19:26,599 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:19:26,640 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-10-15 15:20:10,022 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2024-10-15 15:20:23,795 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-10-15 15:20:23,795 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 68 treesize of output 72 [2024-10-15 15:20:24,054 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 6 proven. 32 refuted. 32 times theorem prover too weak. 28 trivial. 0 not checked. [2024-10-15 15:20:24,054 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-10-15 15:20:24,762 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 21 [2024-10-15 15:20:25,513 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:20:25,514 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [997249163] [2024-10-15 15:20:25,517 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-10-15 15:20:25,517 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1131430527] [2024-10-15 15:20:25,517 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1131430527] provided 0 perfect and 1 imperfect interpolant sequences [2024-10-15 15:20:25,517 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-10-15 15:20:25,517 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18] total 18 [2024-10-15 15:20:25,517 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [409620127] [2024-10-15 15:20:25,517 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-10-15 15:20:25,518 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2024-10-15 15:20:25,518 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:20:25,518 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2024-10-15 15:20:25,518 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=78, Invalid=471, Unknown=3, NotChecked=0, Total=552 [2024-10-15 15:20:25,518 INFO L87 Difference]: Start difference. First operand 165 states and 186 transitions. Second operand has 18 states, 15 states have (on average 1.7333333333333334) internal successors, (26), 15 states have internal predecessors, (26), 6 states have call successors, (11), 6 states have call predecessors, (11), 5 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) [2024-10-15 15:20:29,932 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:20:29,932 INFO L93 Difference]: Finished difference Result 173 states and 192 transitions. [2024-10-15 15:20:29,932 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2024-10-15 15:20:29,933 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 15 states have (on average 1.7333333333333334) internal successors, (26), 15 states have internal predecessors, (26), 6 states have call successors, (11), 6 states have call predecessors, (11), 5 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) Word has length 58 [2024-10-15 15:20:29,933 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:20:29,934 INFO L225 Difference]: With dead ends: 173 [2024-10-15 15:20:29,934 INFO L226 Difference]: Without dead ends: 171 [2024-10-15 15:20:29,935 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 46 SyntacticMatches, 12 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 401 ImplicationChecksByTransitivity, 57.9s TimeCoverageRelationStatistics Valid=256, Invalid=1463, Unknown=3, NotChecked=0, Total=1722 [2024-10-15 15:20:29,935 INFO L432 NwaCegarLoop]: 19 mSDtfsCounter, 68 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 612 mSolverCounterSat, 61 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 674 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 612 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2024-10-15 15:20:29,935 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 95 Invalid, 674 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 612 Invalid, 1 Unknown, 0 Unchecked, 2.2s Time] [2024-10-15 15:20:29,936 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2024-10-15 15:20:30,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 169. [2024-10-15 15:20:30,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 105 states have (on average 1.0571428571428572) internal successors, (111), 108 states have internal predecessors, (111), 38 states have call successors, (38), 23 states have call predecessors, (38), 25 states have return successors, (40), 37 states have call predecessors, (40), 34 states have call successors, (40) [2024-10-15 15:20:30,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 189 transitions. [2024-10-15 15:20:30,009 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 189 transitions. Word has length 58 [2024-10-15 15:20:30,010 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:20:30,010 INFO L471 AbstractCegarLoop]: Abstraction has 169 states and 189 transitions. [2024-10-15 15:20:30,011 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 15 states have (on average 1.7333333333333334) internal successors, (26), 15 states have internal predecessors, (26), 6 states have call successors, (11), 6 states have call predecessors, (11), 5 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) [2024-10-15 15:20:30,011 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:20:30,011 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 189 transitions. [2024-10-15 15:20:30,012 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2024-10-15 15:20:30,012 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:20:30,012 INFO L215 NwaCegarLoop]: trace histogram [9, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:20:30,028 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2024-10-15 15:20:30,212 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2024-10-15 15:20:30,213 INFO L396 AbstractCegarLoop]: === Iteration 12 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:20:30,213 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:20:30,213 INFO L85 PathProgramCache]: Analyzing trace with hash 1703546843, now seen corresponding path program 1 times [2024-10-15 15:20:30,213 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:20:30,213 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [910558847] [2024-10-15 15:20:30,213 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:20:30,213 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:20:30,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-10-15 15:20:30,236 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1284576246] [2024-10-15 15:20:30,236 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:20:30,236 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:20:30,236 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:20:30,237 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:20:30,239 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-10-15 15:20:30,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:30,330 INFO L255 TraceCheckSpWp]: Trace formula consists of 324 conjuncts, 37 conjuncts are in the unsatisfiable core [2024-10-15 15:20:30,332 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:20:30,351 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:20:30,363 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:20:30,376 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:20:31,306 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 72 proven. 16 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-10-15 15:20:31,306 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-10-15 15:20:31,764 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:20:31,764 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [910558847] [2024-10-15 15:20:31,764 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-10-15 15:20:31,764 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1284576246] [2024-10-15 15:20:31,764 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1284576246] provided 0 perfect and 1 imperfect interpolant sequences [2024-10-15 15:20:31,764 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-10-15 15:20:31,764 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10] total 10 [2024-10-15 15:20:31,764 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1658598779] [2024-10-15 15:20:31,764 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-10-15 15:20:31,764 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2024-10-15 15:20:31,764 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:20:31,765 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2024-10-15 15:20:31,765 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2024-10-15 15:20:31,765 INFO L87 Difference]: Start difference. First operand 169 states and 189 transitions. Second operand has 10 states, 9 states have (on average 3.0) internal successors, (27), 9 states have internal predecessors, (27), 4 states have call successors, (12), 4 states have call predecessors, (12), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2024-10-15 15:20:33,142 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:20:33,143 INFO L93 Difference]: Finished difference Result 177 states and 195 transitions. [2024-10-15 15:20:33,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-10-15 15:20:33,143 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 3.0) internal successors, (27), 9 states have internal predecessors, (27), 4 states have call successors, (12), 4 states have call predecessors, (12), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 64 [2024-10-15 15:20:33,143 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:20:33,144 INFO L225 Difference]: With dead ends: 177 [2024-10-15 15:20:33,144 INFO L226 Difference]: Without dead ends: 175 [2024-10-15 15:20:33,145 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 55 SyntacticMatches, 5 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=85, Invalid=335, Unknown=0, NotChecked=0, Total=420 [2024-10-15 15:20:33,145 INFO L432 NwaCegarLoop]: 21 mSDtfsCounter, 32 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 267 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 98 SdHoareTripleChecker+Invalid, 309 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 267 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-10-15 15:20:33,145 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 98 Invalid, 309 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 267 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-10-15 15:20:33,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 175 states. [2024-10-15 15:20:33,234 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 175 to 173. [2024-10-15 15:20:33,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 173 states, 108 states have (on average 1.0555555555555556) internal successors, (114), 111 states have internal predecessors, (114), 38 states have call successors, (38), 24 states have call predecessors, (38), 26 states have return successors, (40), 37 states have call predecessors, (40), 34 states have call successors, (40) [2024-10-15 15:20:33,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 173 states to 173 states and 192 transitions. [2024-10-15 15:20:33,236 INFO L78 Accepts]: Start accepts. Automaton has 173 states and 192 transitions. Word has length 64 [2024-10-15 15:20:33,236 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:20:33,236 INFO L471 AbstractCegarLoop]: Abstraction has 173 states and 192 transitions. [2024-10-15 15:20:33,236 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 3.0) internal successors, (27), 9 states have internal predecessors, (27), 4 states have call successors, (12), 4 states have call predecessors, (12), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2024-10-15 15:20:33,236 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:20:33,236 INFO L276 IsEmpty]: Start isEmpty. Operand 173 states and 192 transitions. [2024-10-15 15:20:33,237 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2024-10-15 15:20:33,237 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:20:33,237 INFO L215 NwaCegarLoop]: trace histogram [10, 9, 9, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:20:33,250 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2024-10-15 15:20:33,437 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2024-10-15 15:20:33,438 INFO L396 AbstractCegarLoop]: === Iteration 13 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:20:33,438 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:20:33,438 INFO L85 PathProgramCache]: Analyzing trace with hash -767700430, now seen corresponding path program 1 times [2024-10-15 15:20:33,438 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:20:33,438 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1769970867] [2024-10-15 15:20:33,438 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:20:33,438 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:20:33,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-10-15 15:20:33,461 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1915039189] [2024-10-15 15:20:33,461 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:20:33,461 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:20:33,461 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:20:33,463 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:20:33,464 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-10-15 15:20:33,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:33,560 INFO L255 TraceCheckSpWp]: Trace formula consists of 341 conjuncts, 19 conjuncts are in the unsatisfiable core [2024-10-15 15:20:33,562 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:20:33,570 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:20:33,586 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:20:34,468 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 90 proven. 8 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2024-10-15 15:20:34,468 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-10-15 15:20:35,095 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:20:35,095 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1769970867] [2024-10-15 15:20:35,095 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-10-15 15:20:35,095 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1915039189] [2024-10-15 15:20:35,095 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1915039189] provided 0 perfect and 1 imperfect interpolant sequences [2024-10-15 15:20:35,095 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-10-15 15:20:35,095 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8] total 8 [2024-10-15 15:20:35,095 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1384210854] [2024-10-15 15:20:35,095 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-10-15 15:20:35,095 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-10-15 15:20:35,096 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:20:35,096 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-10-15 15:20:35,096 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2024-10-15 15:20:35,096 INFO L87 Difference]: Start difference. First operand 173 states and 192 transitions. Second operand has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2024-10-15 15:20:36,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:20:36,148 INFO L93 Difference]: Finished difference Result 181 states and 198 transitions. [2024-10-15 15:20:36,148 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-10-15 15:20:36,149 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 70 [2024-10-15 15:20:36,149 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:20:36,150 INFO L225 Difference]: With dead ends: 181 [2024-10-15 15:20:36,150 INFO L226 Difference]: Without dead ends: 177 [2024-10-15 15:20:36,150 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 110 GetRequests, 88 SyntacticMatches, 9 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=51, Invalid=159, Unknown=0, NotChecked=0, Total=210 [2024-10-15 15:20:36,150 INFO L432 NwaCegarLoop]: 22 mSDtfsCounter, 29 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 215 mSolverCounterSat, 40 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 258 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 215 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2024-10-15 15:20:36,150 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 95 Invalid, 258 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 215 Invalid, 3 Unknown, 0 Unchecked, 0.7s Time] [2024-10-15 15:20:36,151 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 177 states. [2024-10-15 15:20:36,235 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 177 to 175. [2024-10-15 15:20:36,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 175 states, 110 states have (on average 1.0454545454545454) internal successors, (115), 112 states have internal predecessors, (115), 38 states have call successors, (38), 25 states have call predecessors, (38), 26 states have return successors, (40), 37 states have call predecessors, (40), 34 states have call successors, (40) [2024-10-15 15:20:36,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 175 states to 175 states and 193 transitions. [2024-10-15 15:20:36,236 INFO L78 Accepts]: Start accepts. Automaton has 175 states and 193 transitions. Word has length 70 [2024-10-15 15:20:36,236 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:20:36,236 INFO L471 AbstractCegarLoop]: Abstraction has 175 states and 193 transitions. [2024-10-15 15:20:36,236 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2024-10-15 15:20:36,237 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:20:36,237 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 193 transitions. [2024-10-15 15:20:36,237 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2024-10-15 15:20:36,237 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:20:36,237 INFO L215 NwaCegarLoop]: trace histogram [11, 10, 10, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:20:36,255 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2024-10-15 15:20:36,438 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,12 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:20:36,438 INFO L396 AbstractCegarLoop]: === Iteration 14 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:20:36,438 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:20:36,438 INFO L85 PathProgramCache]: Analyzing trace with hash 593297479, now seen corresponding path program 1 times [2024-10-15 15:20:36,439 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:20:36,439 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2132756027] [2024-10-15 15:20:36,439 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:20:36,439 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:20:36,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-10-15 15:20:36,461 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [289463500] [2024-10-15 15:20:36,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:20:36,462 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:20:36,462 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:20:36,463 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:20:36,464 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2024-10-15 15:20:36,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:36,565 INFO L255 TraceCheckSpWp]: Trace formula consists of 360 conjuncts, 27 conjuncts are in the unsatisfiable core [2024-10-15 15:20:36,568 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:20:36,575 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:20:36,589 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:20:36,603 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:20:37,789 INFO L134 CoverageAnalysis]: Checked inductivity of 200 backedges. 110 proven. 10 refuted. 0 times theorem prover too weak. 80 trivial. 0 not checked. [2024-10-15 15:20:37,790 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-10-15 15:20:38,532 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:20:38,532 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2132756027] [2024-10-15 15:20:38,532 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-10-15 15:20:38,532 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [289463500] [2024-10-15 15:20:38,532 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [289463500] provided 0 perfect and 1 imperfect interpolant sequences [2024-10-15 15:20:38,532 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-10-15 15:20:38,532 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8] total 8 [2024-10-15 15:20:38,532 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1700428964] [2024-10-15 15:20:38,532 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-10-15 15:20:38,532 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-10-15 15:20:38,532 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:20:38,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-10-15 15:20:38,533 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2024-10-15 15:20:38,533 INFO L87 Difference]: Start difference. First operand 175 states and 193 transitions. Second operand has 8 states, 7 states have (on average 3.7142857142857144) internal successors, (26), 7 states have internal predecessors, (26), 4 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2024-10-15 15:20:39,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:20:39,451 INFO L93 Difference]: Finished difference Result 177 states and 194 transitions. [2024-10-15 15:20:39,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-10-15 15:20:39,451 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.7142857142857144) internal successors, (26), 7 states have internal predecessors, (26), 4 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 76 [2024-10-15 15:20:39,451 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:20:39,452 INFO L225 Difference]: With dead ends: 177 [2024-10-15 15:20:39,452 INFO L226 Difference]: Without dead ends: 139 [2024-10-15 15:20:39,452 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 97 SyntacticMatches, 11 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=49, Invalid=161, Unknown=0, NotChecked=0, Total=210 [2024-10-15 15:20:39,453 INFO L432 NwaCegarLoop]: 21 mSDtfsCounter, 20 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 230 mSolverCounterSat, 37 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 92 SdHoareTripleChecker+Invalid, 268 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 230 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-10-15 15:20:39,453 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 92 Invalid, 268 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 230 Invalid, 1 Unknown, 0 Unchecked, 0.6s Time] [2024-10-15 15:20:39,453 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139 states. [2024-10-15 15:20:39,516 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139 to 139. [2024-10-15 15:20:39,516 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 139 states, 86 states have (on average 1.0465116279069768) internal successors, (90), 88 states have internal predecessors, (90), 32 states have call successors, (32), 19 states have call predecessors, (32), 20 states have return successors, (34), 31 states have call predecessors, (34), 29 states have call successors, (34) [2024-10-15 15:20:39,517 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 156 transitions. [2024-10-15 15:20:39,517 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 156 transitions. Word has length 76 [2024-10-15 15:20:39,517 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:20:39,517 INFO L471 AbstractCegarLoop]: Abstraction has 139 states and 156 transitions. [2024-10-15 15:20:39,517 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.7142857142857144) internal successors, (26), 7 states have internal predecessors, (26), 4 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2024-10-15 15:20:39,518 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:20:39,518 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 156 transitions. [2024-10-15 15:20:39,518 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2024-10-15 15:20:39,518 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:20:39,518 INFO L215 NwaCegarLoop]: trace histogram [11, 10, 10, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:20:39,530 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2024-10-15 15:20:39,718 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2024-10-15 15:20:39,719 INFO L396 AbstractCegarLoop]: === Iteration 15 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:20:39,719 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:20:39,719 INFO L85 PathProgramCache]: Analyzing trace with hash 394387029, now seen corresponding path program 1 times [2024-10-15 15:20:39,719 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:20:39,719 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1636049758] [2024-10-15 15:20:39,719 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:20:39,720 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:20:39,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:40,235 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-10-15 15:20:40,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:40,291 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-10-15 15:20:40,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:41,115 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-10-15 15:20:41,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:41,128 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2024-10-15 15:20:41,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:41,140 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-10-15 15:20:41,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:41,154 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2024-10-15 15:20:41,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:41,166 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2024-10-15 15:20:41,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:41,176 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2024-10-15 15:20:41,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:41,326 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-10-15 15:20:41,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:41,329 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2024-10-15 15:20:41,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:41,334 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-10-15 15:20:41,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:41,341 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2024-10-15 15:20:41,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:41,343 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2024-10-15 15:20:41,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:41,345 INFO L134 CoverageAnalysis]: Checked inductivity of 215 backedges. 20 proven. 14 refuted. 0 times theorem prover too weak. 181 trivial. 0 not checked. [2024-10-15 15:20:41,345 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:20:41,346 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1636049758] [2024-10-15 15:20:41,346 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1636049758] provided 0 perfect and 1 imperfect interpolant sequences [2024-10-15 15:20:41,346 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1440006285] [2024-10-15 15:20:41,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:20:41,346 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:20:41,346 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:20:41,350 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:20:41,351 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2024-10-15 15:20:41,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:41,458 INFO L255 TraceCheckSpWp]: Trace formula consists of 417 conjuncts, 70 conjuncts are in the unsatisfiable core [2024-10-15 15:20:41,460 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:20:42,879 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 13 [2024-10-15 15:20:42,887 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 19 [2024-10-15 15:20:42,897 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2024-10-15 15:20:44,751 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2024-10-15 15:20:44,759 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-10-15 15:20:45,043 INFO L134 CoverageAnalysis]: Checked inductivity of 215 backedges. 16 proven. 83 refuted. 0 times theorem prover too weak. 116 trivial. 0 not checked. [2024-10-15 15:20:45,044 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-10-15 15:20:47,452 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1440006285] provided 0 perfect and 1 imperfect interpolant sequences [2024-10-15 15:20:47,453 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-10-15 15:20:47,453 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 19] total 27 [2024-10-15 15:20:47,453 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1800112104] [2024-10-15 15:20:47,453 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-10-15 15:20:47,453 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2024-10-15 15:20:47,453 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:20:47,453 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2024-10-15 15:20:47,454 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=96, Invalid=716, Unknown=0, NotChecked=0, Total=812 [2024-10-15 15:20:47,454 INFO L87 Difference]: Start difference. First operand 139 states and 156 transitions. Second operand has 27 states, 20 states have (on average 2.75) internal successors, (55), 22 states have internal predecessors, (55), 12 states have call successors, (28), 6 states have call predecessors, (28), 7 states have return successors, (25), 10 states have call predecessors, (25), 10 states have call successors, (25) [2024-10-15 15:20:50,350 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:20:50,350 INFO L93 Difference]: Finished difference Result 149 states and 165 transitions. [2024-10-15 15:20:50,350 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2024-10-15 15:20:50,351 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 20 states have (on average 2.75) internal successors, (55), 22 states have internal predecessors, (55), 12 states have call successors, (28), 6 states have call predecessors, (28), 7 states have return successors, (25), 10 states have call predecessors, (25), 10 states have call successors, (25) Word has length 82 [2024-10-15 15:20:50,351 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:20:50,352 INFO L225 Difference]: With dead ends: 149 [2024-10-15 15:20:50,352 INFO L226 Difference]: Without dead ends: 147 [2024-10-15 15:20:50,352 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 89 SyntacticMatches, 17 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 417 ImplicationChecksByTransitivity, 5.2s TimeCoverageRelationStatistics Valid=205, Invalid=1355, Unknown=0, NotChecked=0, Total=1560 [2024-10-15 15:20:50,353 INFO L432 NwaCegarLoop]: 19 mSDtfsCounter, 68 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 592 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 118 SdHoareTripleChecker+Invalid, 654 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 592 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2024-10-15 15:20:50,353 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 118 Invalid, 654 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 592 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2024-10-15 15:20:50,353 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 147 states. [2024-10-15 15:20:50,436 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 147 to 147. [2024-10-15 15:20:50,437 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 147 states, 92 states have (on average 1.0434782608695652) internal successors, (96), 94 states have internal predecessors, (96), 32 states have call successors, (32), 21 states have call predecessors, (32), 22 states have return successors, (34), 31 states have call predecessors, (34), 29 states have call successors, (34) [2024-10-15 15:20:50,437 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 147 states to 147 states and 162 transitions. [2024-10-15 15:20:50,438 INFO L78 Accepts]: Start accepts. Automaton has 147 states and 162 transitions. Word has length 82 [2024-10-15 15:20:50,438 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:20:50,438 INFO L471 AbstractCegarLoop]: Abstraction has 147 states and 162 transitions. [2024-10-15 15:20:50,438 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 20 states have (on average 2.75) internal successors, (55), 22 states have internal predecessors, (55), 12 states have call successors, (28), 6 states have call predecessors, (28), 7 states have return successors, (25), 10 states have call predecessors, (25), 10 states have call successors, (25) [2024-10-15 15:20:50,438 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:20:50,438 INFO L276 IsEmpty]: Start isEmpty. Operand 147 states and 162 transitions. [2024-10-15 15:20:50,439 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2024-10-15 15:20:50,439 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:20:50,439 INFO L215 NwaCegarLoop]: trace histogram [12, 11, 11, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:20:50,453 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2024-10-15 15:20:50,639 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2024-10-15 15:20:50,639 INFO L396 AbstractCegarLoop]: === Iteration 16 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:20:50,640 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:20:50,640 INFO L85 PathProgramCache]: Analyzing trace with hash 1573323314, now seen corresponding path program 1 times [2024-10-15 15:20:50,640 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:20:50,640 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [470452210] [2024-10-15 15:20:50,640 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:20:50,640 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:20:50,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-10-15 15:20:50,662 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [604136598] [2024-10-15 15:20:50,662 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:20:50,662 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:20:50,662 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:20:50,666 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:20:50,667 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2024-10-15 15:20:50,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 15:20:50,783 INFO L255 TraceCheckSpWp]: Trace formula consists of 436 conjuncts, 143 conjuncts are in the unsatisfiable core [2024-10-15 15:20:50,786 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:20:50,820 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:20:50,837 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:20:50,852 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:20:50,866 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:20:50,880 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-10-15 15:20:53,589 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-10-15 15:20:57,078 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-10-15 15:20:57,185 INFO L349 Elim1Store]: treesize reduction 14, result has 58.8 percent of original size [2024-10-15 15:20:57,185 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 36 treesize of output 39 [2024-10-15 15:20:57,301 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-10-15 15:20:57,747 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-10-15 15:20:57,747 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 73 treesize of output 109 [2024-10-15 15:20:59,293 INFO L134 CoverageAnalysis]: Checked inductivity of 257 backedges. 123 proven. 65 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2024-10-15 15:20:59,293 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-10-15 15:21:04,982 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 15:21:04,982 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [470452210] [2024-10-15 15:21:04,982 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-10-15 15:21:04,982 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [604136598] [2024-10-15 15:21:04,982 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [604136598] provided 0 perfect and 1 imperfect interpolant sequences [2024-10-15 15:21:04,982 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-10-15 15:21:04,983 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2024-10-15 15:21:04,983 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [897988187] [2024-10-15 15:21:04,983 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-10-15 15:21:04,983 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2024-10-15 15:21:04,983 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 15:21:04,983 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2024-10-15 15:21:04,984 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=134, Invalid=988, Unknown=0, NotChecked=0, Total=1122 [2024-10-15 15:21:04,984 INFO L87 Difference]: Start difference. First operand 147 states and 162 transitions. Second operand has 27 states, 22 states have (on average 1.6818181818181819) internal successors, (37), 21 states have internal predecessors, (37), 8 states have call successors, (16), 7 states have call predecessors, (16), 7 states have return successors, (14), 6 states have call predecessors, (14), 7 states have call successors, (14) [2024-10-15 15:21:14,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 15:21:14,816 INFO L93 Difference]: Finished difference Result 155 states and 168 transitions. [2024-10-15 15:21:14,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2024-10-15 15:21:14,816 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 22 states have (on average 1.6818181818181819) internal successors, (37), 21 states have internal predecessors, (37), 8 states have call successors, (16), 7 states have call predecessors, (16), 7 states have return successors, (14), 6 states have call predecessors, (14), 7 states have call successors, (14) Word has length 88 [2024-10-15 15:21:14,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-15 15:21:14,817 INFO L225 Difference]: With dead ends: 155 [2024-10-15 15:21:14,817 INFO L226 Difference]: Without dead ends: 153 [2024-10-15 15:21:14,818 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 58 SyntacticMatches, 9 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 770 ImplicationChecksByTransitivity, 12.3s TimeCoverageRelationStatistics Valid=359, Invalid=2501, Unknown=2, NotChecked=0, Total=2862 [2024-10-15 15:21:14,818 INFO L432 NwaCegarLoop]: 20 mSDtfsCounter, 57 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 983 mSolverCounterSat, 56 mSolverCounterUnsat, 9 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 114 SdHoareTripleChecker+Invalid, 1048 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 983 IncrementalHoareTripleChecker+Invalid, 9 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2024-10-15 15:21:14,818 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 114 Invalid, 1048 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 983 Invalid, 9 Unknown, 0 Unchecked, 4.2s Time] [2024-10-15 15:21:14,819 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153 states. [2024-10-15 15:21:14,913 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153 to 151. [2024-10-15 15:21:14,913 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 151 states, 95 states have (on average 1.0421052631578946) internal successors, (99), 97 states have internal predecessors, (99), 32 states have call successors, (32), 22 states have call predecessors, (32), 23 states have return successors, (34), 31 states have call predecessors, (34), 29 states have call successors, (34) [2024-10-15 15:21:14,914 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 151 states to 151 states and 165 transitions. [2024-10-15 15:21:14,914 INFO L78 Accepts]: Start accepts. Automaton has 151 states and 165 transitions. Word has length 88 [2024-10-15 15:21:14,914 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-15 15:21:14,914 INFO L471 AbstractCegarLoop]: Abstraction has 151 states and 165 transitions. [2024-10-15 15:21:14,914 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 22 states have (on average 1.6818181818181819) internal successors, (37), 21 states have internal predecessors, (37), 8 states have call successors, (16), 7 states have call predecessors, (16), 7 states have return successors, (14), 6 states have call predecessors, (14), 7 states have call successors, (14) [2024-10-15 15:21:14,915 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:21:14,915 INFO L276 IsEmpty]: Start isEmpty. Operand 151 states and 165 transitions. [2024-10-15 15:21:14,915 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2024-10-15 15:21:14,915 INFO L207 NwaCegarLoop]: Found error trace [2024-10-15 15:21:14,915 INFO L215 NwaCegarLoop]: trace histogram [13, 12, 12, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 15:21:14,929 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2024-10-15 15:21:15,116 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2024-10-15 15:21:15,116 INFO L396 AbstractCegarLoop]: === Iteration 17 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-15 15:21:15,116 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 15:21:15,116 INFO L85 PathProgramCache]: Analyzing trace with hash 1625324318, now seen corresponding path program 4 times [2024-10-15 15:21:15,116 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 15:21:15,116 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [145902772] [2024-10-15 15:21:15,117 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 15:21:15,117 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 15:21:15,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-10-15 15:21:15,157 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1935537783] [2024-10-15 15:21:15,158 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-10-15 15:21:15,158 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-15 15:21:15,158 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-10-15 15:21:15,162 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-15 15:21:15,164 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2024-10-15 15:21:15,412 INFO L227 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-10-15 15:21:15,412 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-10-15 15:21:15,416 INFO L255 TraceCheckSpWp]: Trace formula consists of 404 conjuncts, 190 conjuncts are in the unsatisfiable core [2024-10-15 15:21:15,420 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-15 15:21:22,289 INFO L349 Elim1Store]: treesize reduction 48, result has 53.4 percent of original size [2024-10-15 15:21:22,290 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 5 case distinctions, treesize of input 147 treesize of output 145 [2024-10-15 15:21:22,959 INFO L349 Elim1Store]: treesize reduction 22, result has 56.0 percent of original size [2024-10-15 15:21:22,959 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 87 treesize of output 94 [2024-10-15 15:21:23,067 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-10-15 15:21:23,067 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 69 treesize of output 89 [2024-10-15 15:21:23,088 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 81 treesize of output 71 [2024-10-15 15:22:32,083 WARN L286 SmtUtils]: Spent 5.86s on a formula simplification. DAG size of input: 230 DAG size of output: 493 (called from [L 388] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate)