/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationJordan_32.epf -i ../../../trunk/examples/svcomp/loops-crafted-1/mono-crafted_6.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-fb4f59a-m [2022-04-28 03:49:58,910 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-04-28 03:49:58,913 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-04-28 03:49:58,937 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-04-28 03:49:58,938 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-04-28 03:49:58,939 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-04-28 03:49:58,940 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-04-28 03:49:58,941 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-04-28 03:49:58,943 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-04-28 03:49:58,943 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-04-28 03:49:58,944 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-04-28 03:49:58,945 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-04-28 03:49:58,945 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-04-28 03:49:58,946 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-04-28 03:49:58,947 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-04-28 03:49:58,948 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-04-28 03:49:58,949 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-04-28 03:49:58,949 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-04-28 03:49:58,951 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-04-28 03:49:58,953 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-04-28 03:49:58,954 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-04-28 03:49:58,955 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-04-28 03:49:58,956 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-04-28 03:49:58,957 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-04-28 03:49:58,957 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-04-28 03:49:58,960 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-04-28 03:49:58,960 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-04-28 03:49:58,960 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-04-28 03:49:58,961 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-04-28 03:49:58,961 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-04-28 03:49:58,962 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-04-28 03:49:58,962 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-04-28 03:49:58,963 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-04-28 03:49:58,964 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-04-28 03:49:58,964 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-04-28 03:49:58,965 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-04-28 03:49:58,965 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-04-28 03:49:58,966 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-04-28 03:49:58,966 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-04-28 03:49:58,966 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-04-28 03:49:58,967 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-04-28 03:49:58,967 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-04-28 03:49:58,968 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/acceleratedInterpolation/acceleratedInterpolationJordan_32.epf [2022-04-28 03:49:58,976 INFO L113 SettingsManager]: Loading preferences was successful [2022-04-28 03:49:58,976 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-04-28 03:49:58,977 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-04-28 03:49:58,977 INFO L138 SettingsManager]: * sizeof long=4 [2022-04-28 03:49:58,977 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-04-28 03:49:58,977 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-04-28 03:49:58,978 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-04-28 03:49:58,978 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-04-28 03:49:58,978 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-04-28 03:49:58,978 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-04-28 03:49:58,978 INFO L138 SettingsManager]: * sizeof long double=12 [2022-04-28 03:49:58,978 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-04-28 03:49:58,979 INFO L138 SettingsManager]: * Use constant arrays=true [2022-04-28 03:49:58,979 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-04-28 03:49:58,979 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-04-28 03:49:58,979 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-04-28 03:49:58,980 INFO L138 SettingsManager]: * To the following directory=./dump/ [2022-04-28 03:49:58,980 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-04-28 03:49:58,980 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-28 03:49:58,980 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-04-28 03:49:58,980 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=Craig_NestedInterpolation [2022-04-28 03:49:58,980 INFO L138 SettingsManager]: * Trace refinement strategy=ACCELERATED_INTERPOLATION [2022-04-28 03:49:58,981 INFO L138 SettingsManager]: * Trace refinement strategy used in Accelerated Interpolation=CAMEL [2022-04-28 03:49:58,981 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-04-28 03:49:58,981 INFO L138 SettingsManager]: * Loop acceleration method that is used by accelerated interpolation=JORDAN [2022-04-28 03:49:58,981 INFO L138 SettingsManager]: * Use separate solver for trace checks=false WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-04-28 03:49:59,235 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-04-28 03:49:59,259 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-04-28 03:49:59,261 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-04-28 03:49:59,262 INFO L271 PluginConnector]: Initializing CDTParser... [2022-04-28 03:49:59,264 INFO L275 PluginConnector]: CDTParser initialized [2022-04-28 03:49:59,265 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/loops-crafted-1/mono-crafted_6.c [2022-04-28 03:49:59,318 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d710bb75a/3a7e09a77c014ea7b72bf108d45d0657/FLAGc78032dc3 [2022-04-28 03:49:59,680 INFO L306 CDTParser]: Found 1 translation units. [2022-04-28 03:49:59,681 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/loops-crafted-1/mono-crafted_6.c [2022-04-28 03:49:59,687 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d710bb75a/3a7e09a77c014ea7b72bf108d45d0657/FLAGc78032dc3 [2022-04-28 03:50:00,097 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d710bb75a/3a7e09a77c014ea7b72bf108d45d0657 [2022-04-28 03:50:00,099 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-04-28 03:50:00,100 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2022-04-28 03:50:00,101 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-04-28 03:50:00,101 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-04-28 03:50:00,103 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-04-28 03:50:00,104 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.04 03:50:00" (1/1) ... [2022-04-28 03:50:00,105 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@34ca4de0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 03:50:00, skipping insertion in model container [2022-04-28 03:50:00,105 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.04 03:50:00" (1/1) ... [2022-04-28 03:50:00,110 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-04-28 03:50:00,119 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-04-28 03:50:00,216 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/loops-crafted-1/mono-crafted_6.c[318,331] [2022-04-28 03:50:00,255 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-28 03:50:00,268 INFO L203 MainTranslator]: Completed pre-run [2022-04-28 03:50:00,277 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/loops-crafted-1/mono-crafted_6.c[318,331] [2022-04-28 03:50:00,280 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-04-28 03:50:00,290 INFO L208 MainTranslator]: Completed translation [2022-04-28 03:50:00,290 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 03:50:00 WrapperNode [2022-04-28 03:50:00,290 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-04-28 03:50:00,291 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-04-28 03:50:00,291 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-04-28 03:50:00,291 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-04-28 03:50:00,301 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 03:50:00" (1/1) ... [2022-04-28 03:50:00,301 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 03:50:00" (1/1) ... [2022-04-28 03:50:00,307 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 03:50:00" (1/1) ... [2022-04-28 03:50:00,307 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 03:50:00" (1/1) ... [2022-04-28 03:50:00,311 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 03:50:00" (1/1) ... [2022-04-28 03:50:00,314 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 03:50:00" (1/1) ... [2022-04-28 03:50:00,315 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 03:50:00" (1/1) ... [2022-04-28 03:50:00,316 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-04-28 03:50:00,317 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-04-28 03:50:00,317 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-04-28 03:50:00,317 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-04-28 03:50:00,318 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 03:50:00" (1/1) ... [2022-04-28 03:50:00,324 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-04-28 03:50:00,332 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:50:00,342 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-04-28 03:50:00,343 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-04-28 03:50:00,367 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2022-04-28 03:50:00,367 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-04-28 03:50:00,367 INFO L138 BoogieDeclarations]: Found implementation of procedure reach_error [2022-04-28 03:50:00,367 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2022-04-28 03:50:00,368 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2022-04-28 03:50:00,368 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2022-04-28 03:50:00,368 INFO L130 BoogieDeclarations]: Found specification of procedure __assert_fail [2022-04-28 03:50:00,368 INFO L130 BoogieDeclarations]: Found specification of procedure reach_error [2022-04-28 03:50:00,368 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-04-28 03:50:00,368 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2022-04-28 03:50:00,368 INFO L130 BoogieDeclarations]: Found specification of procedure main [2022-04-28 03:50:00,368 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2022-04-28 03:50:00,368 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-04-28 03:50:00,368 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-04-28 03:50:00,368 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-04-28 03:50:00,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-04-28 03:50:00,369 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-04-28 03:50:00,410 INFO L234 CfgBuilder]: Building ICFG [2022-04-28 03:50:00,412 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-04-28 03:50:00,555 INFO L275 CfgBuilder]: Performing block encoding [2022-04-28 03:50:00,561 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-04-28 03:50:00,561 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-04-28 03:50:00,562 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.04 03:50:00 BoogieIcfgContainer [2022-04-28 03:50:00,563 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-04-28 03:50:00,564 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-04-28 03:50:00,564 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-04-28 03:50:00,567 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-04-28 03:50:00,567 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.04 03:50:00" (1/3) ... [2022-04-28 03:50:00,568 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4b64b819 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.04 03:50:00, skipping insertion in model container [2022-04-28 03:50:00,568 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.04 03:50:00" (2/3) ... [2022-04-28 03:50:00,568 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4b64b819 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.04 03:50:00, skipping insertion in model container [2022-04-28 03:50:00,568 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.04 03:50:00" (3/3) ... [2022-04-28 03:50:00,569 INFO L111 eAbstractionObserver]: Analyzing ICFG mono-crafted_6.c [2022-04-28 03:50:00,591 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:Craig_NestedInterpolation Determinization: PREDICATE_ABSTRACTION [2022-04-28 03:50:00,591 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-04-28 03:50:00,658 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-04-28 03:50:00,679 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=Craig_NestedInterpolation, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@1b9e588e, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@7f331ae6 [2022-04-28 03:50:00,679 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-04-28 03:50:00,686 INFO L276 IsEmpty]: Start isEmpty. Operand has 22 states, 14 states have (on average 1.4285714285714286) internal successors, (20), 15 states have internal predecessors, (20), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2022-04-28 03:50:00,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-04-28 03:50:00,692 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:50:00,692 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:50:00,693 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:50:00,714 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:50:00,715 INFO L85 PathProgramCache]: Analyzing trace with hash -1440262230, now seen corresponding path program 1 times [2022-04-28 03:50:00,721 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:00,722 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [849412294] [2022-04-28 03:50:00,731 INFO L202 tedInterpolationCore]: No loops in this trace, falling back to nested interpolation [2022-04-28 03:50:00,731 INFO L85 PathProgramCache]: Analyzing trace with hash -1440262230, now seen corresponding path program 2 times [2022-04-28 03:50:00,738 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:50:00,740 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [621873618] [2022-04-28 03:50:00,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:00,741 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:50:00,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:00,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:50:00,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:00,961 INFO L290 TraceCheckUtils]: 0: Hoare triple {31#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {25#true} is VALID [2022-04-28 03:50:00,961 INFO L290 TraceCheckUtils]: 1: Hoare triple {25#true} assume true; {25#true} is VALID [2022-04-28 03:50:00,961 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25#true} {25#true} #48#return; {25#true} is VALID [2022-04-28 03:50:00,963 INFO L272 TraceCheckUtils]: 0: Hoare triple {25#true} call ULTIMATE.init(); {31#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:50:00,963 INFO L290 TraceCheckUtils]: 1: Hoare triple {31#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {25#true} is VALID [2022-04-28 03:50:00,963 INFO L290 TraceCheckUtils]: 2: Hoare triple {25#true} assume true; {25#true} is VALID [2022-04-28 03:50:00,964 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {25#true} {25#true} #48#return; {25#true} is VALID [2022-04-28 03:50:00,964 INFO L272 TraceCheckUtils]: 4: Hoare triple {25#true} call #t~ret7 := main(); {25#true} is VALID [2022-04-28 03:50:00,967 INFO L290 TraceCheckUtils]: 5: Hoare triple {25#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {30#(= main_~x~0 0)} is VALID [2022-04-28 03:50:00,968 INFO L290 TraceCheckUtils]: 6: Hoare triple {30#(= main_~x~0 0)} assume !(~x~0 < 1000000); {26#false} is VALID [2022-04-28 03:50:00,968 INFO L272 TraceCheckUtils]: 7: Hoare triple {26#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {26#false} is VALID [2022-04-28 03:50:00,968 INFO L290 TraceCheckUtils]: 8: Hoare triple {26#false} ~cond := #in~cond; {26#false} is VALID [2022-04-28 03:50:00,968 INFO L290 TraceCheckUtils]: 9: Hoare triple {26#false} assume 0 == ~cond; {26#false} is VALID [2022-04-28 03:50:00,968 INFO L290 TraceCheckUtils]: 10: Hoare triple {26#false} assume !false; {26#false} is VALID [2022-04-28 03:50:00,969 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 03:50:00,969 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:50:00,969 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [621873618] [2022-04-28 03:50:00,970 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [621873618] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:50:00,970 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:50:00,970 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-04-28 03:50:00,972 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:50:00,973 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [849412294] [2022-04-28 03:50:00,973 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [849412294] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:50:00,973 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:50:00,973 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-04-28 03:50:00,973 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [607474105] [2022-04-28 03:50:00,974 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:50:00,978 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 1.75) internal successors, (7), 3 states have internal predecessors, (7), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 11 [2022-04-28 03:50:00,979 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:50:00,981 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 1.75) internal successors, (7), 3 states have internal predecessors, (7), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:01,002 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 11 edges. 11 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:01,003 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-04-28 03:50:01,003 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:01,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-04-28 03:50:01,028 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-04-28 03:50:01,031 INFO L87 Difference]: Start difference. First operand has 22 states, 14 states have (on average 1.4285714285714286) internal successors, (20), 15 states have internal predecessors, (20), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Second operand has 4 states, 4 states have (on average 1.75) internal successors, (7), 3 states have internal predecessors, (7), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:01,183 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:01,184 INFO L93 Difference]: Finished difference Result 40 states and 52 transitions. [2022-04-28 03:50:01,184 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-04-28 03:50:01,184 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 1.75) internal successors, (7), 3 states have internal predecessors, (7), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 11 [2022-04-28 03:50:01,184 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:50:01,185 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 1.75) internal successors, (7), 3 states have internal predecessors, (7), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:01,192 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 52 transitions. [2022-04-28 03:50:01,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 1.75) internal successors, (7), 3 states have internal predecessors, (7), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:01,196 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 52 transitions. [2022-04-28 03:50:01,196 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 4 states and 52 transitions. [2022-04-28 03:50:01,253 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 52 edges. 52 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:01,259 INFO L225 Difference]: With dead ends: 40 [2022-04-28 03:50:01,259 INFO L226 Difference]: Without dead ends: 17 [2022-04-28 03:50:01,262 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-04-28 03:50:01,264 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 17 mSDsluCounter, 9 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-04-28 03:50:01,265 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 30 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-04-28 03:50:01,278 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17 states. [2022-04-28 03:50:01,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17 to 17. [2022-04-28 03:50:01,288 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:50:01,289 INFO L82 GeneralOperation]: Start isEquivalent. First operand 17 states. Second operand has 17 states, 12 states have (on average 1.25) internal successors, (15), 12 states have internal predecessors, (15), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:01,289 INFO L74 IsIncluded]: Start isIncluded. First operand 17 states. Second operand has 17 states, 12 states have (on average 1.25) internal successors, (15), 12 states have internal predecessors, (15), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:01,289 INFO L87 Difference]: Start difference. First operand 17 states. Second operand has 17 states, 12 states have (on average 1.25) internal successors, (15), 12 states have internal predecessors, (15), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:01,291 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:01,292 INFO L93 Difference]: Finished difference Result 17 states and 19 transitions. [2022-04-28 03:50:01,292 INFO L276 IsEmpty]: Start isEmpty. Operand 17 states and 19 transitions. [2022-04-28 03:50:01,292 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:01,292 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:01,292 INFO L74 IsIncluded]: Start isIncluded. First operand has 17 states, 12 states have (on average 1.25) internal successors, (15), 12 states have internal predecessors, (15), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 17 states. [2022-04-28 03:50:01,293 INFO L87 Difference]: Start difference. First operand has 17 states, 12 states have (on average 1.25) internal successors, (15), 12 states have internal predecessors, (15), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 17 states. [2022-04-28 03:50:01,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:01,295 INFO L93 Difference]: Finished difference Result 17 states and 19 transitions. [2022-04-28 03:50:01,295 INFO L276 IsEmpty]: Start isEmpty. Operand 17 states and 19 transitions. [2022-04-28 03:50:01,295 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:01,295 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:01,295 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:50:01,296 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:50:01,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17 states, 12 states have (on average 1.25) internal successors, (15), 12 states have internal predecessors, (15), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:01,297 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 19 transitions. [2022-04-28 03:50:01,298 INFO L78 Accepts]: Start accepts. Automaton has 17 states and 19 transitions. Word has length 11 [2022-04-28 03:50:01,298 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:50:01,299 INFO L495 AbstractCegarLoop]: Abstraction has 17 states and 19 transitions. [2022-04-28 03:50:01,299 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 1.75) internal successors, (7), 3 states have internal predecessors, (7), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:01,299 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 17 states and 19 transitions. [2022-04-28 03:50:01,319 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:01,320 INFO L276 IsEmpty]: Start isEmpty. Operand 17 states and 19 transitions. [2022-04-28 03:50:01,320 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-04-28 03:50:01,320 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:50:01,320 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:50:01,321 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-04-28 03:50:01,321 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:50:01,321 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:50:01,321 INFO L85 PathProgramCache]: Analyzing trace with hash -273622713, now seen corresponding path program 1 times [2022-04-28 03:50:01,322 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:01,322 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [658298359] [2022-04-28 03:50:05,482 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:50:05,612 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:05,614 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:50:05,617 INFO L85 PathProgramCache]: Analyzing trace with hash -550999127, now seen corresponding path program 1 times [2022-04-28 03:50:05,617 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:50:05,618 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1980829810] [2022-04-28 03:50:05,618 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:05,618 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:50:05,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:05,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:50:05,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:05,737 INFO L290 TraceCheckUtils]: 0: Hoare triple {191#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {184#true} is VALID [2022-04-28 03:50:05,738 INFO L290 TraceCheckUtils]: 1: Hoare triple {184#true} assume true; {184#true} is VALID [2022-04-28 03:50:05,738 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {184#true} {184#true} #48#return; {184#true} is VALID [2022-04-28 03:50:05,739 INFO L272 TraceCheckUtils]: 0: Hoare triple {184#true} call ULTIMATE.init(); {191#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:50:05,739 INFO L290 TraceCheckUtils]: 1: Hoare triple {191#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {184#true} is VALID [2022-04-28 03:50:05,739 INFO L290 TraceCheckUtils]: 2: Hoare triple {184#true} assume true; {184#true} is VALID [2022-04-28 03:50:05,740 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {184#true} {184#true} #48#return; {184#true} is VALID [2022-04-28 03:50:05,740 INFO L272 TraceCheckUtils]: 4: Hoare triple {184#true} call #t~ret7 := main(); {184#true} is VALID [2022-04-28 03:50:05,741 INFO L290 TraceCheckUtils]: 5: Hoare triple {184#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {189#(= main_~x~0 0)} is VALID [2022-04-28 03:50:05,743 INFO L290 TraceCheckUtils]: 6: Hoare triple {189#(= main_~x~0 0)} [54] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_15 v_main_~x~0_14)) (.cse1 (= |v_main_#t~post4_4| |v_main_#t~post4_3|))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_15)) (and (< v_main_~x~0_15 v_main_~x~0_14) (< v_main_~x~0_14 500001)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_15, main_#t~post4=|v_main_#t~post4_4|} OutVars{main_~x~0=v_main_~x~0_14, main_#t~post4=|v_main_#t~post4_3|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {190#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:05,743 INFO L290 TraceCheckUtils]: 7: Hoare triple {190#(<= main_~x~0 500000)} [53] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {185#false} is VALID [2022-04-28 03:50:05,744 INFO L272 TraceCheckUtils]: 8: Hoare triple {185#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {185#false} is VALID [2022-04-28 03:50:05,744 INFO L290 TraceCheckUtils]: 9: Hoare triple {185#false} ~cond := #in~cond; {185#false} is VALID [2022-04-28 03:50:05,744 INFO L290 TraceCheckUtils]: 10: Hoare triple {185#false} assume 0 == ~cond; {185#false} is VALID [2022-04-28 03:50:05,744 INFO L290 TraceCheckUtils]: 11: Hoare triple {185#false} assume !false; {185#false} is VALID [2022-04-28 03:50:05,745 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 03:50:05,745 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:50:05,746 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1980829810] [2022-04-28 03:50:05,747 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1980829810] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:50:05,747 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:50:05,747 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-28 03:50:05,843 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:50:05,843 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [658298359] [2022-04-28 03:50:05,844 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [658298359] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:50:05,845 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:50:05,845 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-04-28 03:50:05,845 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [872259542] [2022-04-28 03:50:05,845 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:50:05,846 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.8) internal successors, (9), 4 states have internal predecessors, (9), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 13 [2022-04-28 03:50:05,846 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:50:05,846 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 1.8) internal successors, (9), 4 states have internal predecessors, (9), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:05,859 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 13 edges. 13 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:05,859 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-04-28 03:50:05,859 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:05,860 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-04-28 03:50:05,861 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=26, Unknown=0, NotChecked=0, Total=42 [2022-04-28 03:50:05,861 INFO L87 Difference]: Start difference. First operand 17 states and 19 transitions. Second operand has 5 states, 5 states have (on average 1.8) internal successors, (9), 4 states have internal predecessors, (9), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:06,003 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:06,004 INFO L93 Difference]: Finished difference Result 29 states and 36 transitions. [2022-04-28 03:50:06,004 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-04-28 03:50:06,004 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.8) internal successors, (9), 4 states have internal predecessors, (9), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 13 [2022-04-28 03:50:06,005 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:50:06,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 1.8) internal successors, (9), 4 states have internal predecessors, (9), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:06,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 36 transitions. [2022-04-28 03:50:06,009 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 1.8) internal successors, (9), 4 states have internal predecessors, (9), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:06,012 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 36 transitions. [2022-04-28 03:50:06,012 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 5 states and 36 transitions. [2022-04-28 03:50:06,053 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:06,056 INFO L225 Difference]: With dead ends: 29 [2022-04-28 03:50:06,056 INFO L226 Difference]: Without dead ends: 20 [2022-04-28 03:50:06,057 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 1 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=28, Invalid=44, Unknown=0, NotChecked=0, Total=72 [2022-04-28 03:50:06,059 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 15 mSDsluCounter, 12 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 25 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-04-28 03:50:06,060 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 25 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-04-28 03:50:06,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20 states. [2022-04-28 03:50:06,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20 to 20. [2022-04-28 03:50:06,076 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:50:06,078 INFO L82 GeneralOperation]: Start isEquivalent. First operand 20 states. Second operand has 20 states, 15 states have (on average 1.2666666666666666) internal successors, (19), 15 states have internal predecessors, (19), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:06,080 INFO L74 IsIncluded]: Start isIncluded. First operand 20 states. Second operand has 20 states, 15 states have (on average 1.2666666666666666) internal successors, (19), 15 states have internal predecessors, (19), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:06,080 INFO L87 Difference]: Start difference. First operand 20 states. Second operand has 20 states, 15 states have (on average 1.2666666666666666) internal successors, (19), 15 states have internal predecessors, (19), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:06,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:06,083 INFO L93 Difference]: Finished difference Result 20 states and 23 transitions. [2022-04-28 03:50:06,083 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 23 transitions. [2022-04-28 03:50:06,083 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:06,083 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:06,084 INFO L74 IsIncluded]: Start isIncluded. First operand has 20 states, 15 states have (on average 1.2666666666666666) internal successors, (19), 15 states have internal predecessors, (19), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 20 states. [2022-04-28 03:50:06,084 INFO L87 Difference]: Start difference. First operand has 20 states, 15 states have (on average 1.2666666666666666) internal successors, (19), 15 states have internal predecessors, (19), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 20 states. [2022-04-28 03:50:06,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:06,086 INFO L93 Difference]: Finished difference Result 20 states and 23 transitions. [2022-04-28 03:50:06,086 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 23 transitions. [2022-04-28 03:50:06,087 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:06,087 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:06,087 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:50:06,087 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:50:06,088 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 15 states have (on average 1.2666666666666666) internal successors, (19), 15 states have internal predecessors, (19), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:06,089 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 23 transitions. [2022-04-28 03:50:06,089 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 23 transitions. Word has length 13 [2022-04-28 03:50:06,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:50:06,089 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 23 transitions. [2022-04-28 03:50:06,090 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.8) internal successors, (9), 4 states have internal predecessors, (9), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:06,090 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 20 states and 23 transitions. [2022-04-28 03:50:06,114 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 23 edges. 23 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:06,115 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 23 transitions. [2022-04-28 03:50:06,115 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-04-28 03:50:06,116 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:50:06,116 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:50:06,116 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-04-28 03:50:06,119 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:50:06,121 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:50:06,121 INFO L85 PathProgramCache]: Analyzing trace with hash -88759266, now seen corresponding path program 1 times [2022-04-28 03:50:06,122 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:06,122 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [2008860935] [2022-04-28 03:50:08,423 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:08,803 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:08,804 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:50:08,807 INFO L85 PathProgramCache]: Analyzing trace with hash 1729789352, now seen corresponding path program 1 times [2022-04-28 03:50:08,807 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:50:08,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1163827831] [2022-04-28 03:50:08,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:08,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:50:08,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:08,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:50:08,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:08,882 INFO L290 TraceCheckUtils]: 0: Hoare triple {346#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {338#true} is VALID [2022-04-28 03:50:08,882 INFO L290 TraceCheckUtils]: 1: Hoare triple {338#true} assume true; {338#true} is VALID [2022-04-28 03:50:08,882 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {338#true} {338#true} #48#return; {338#true} is VALID [2022-04-28 03:50:08,883 INFO L272 TraceCheckUtils]: 0: Hoare triple {338#true} call ULTIMATE.init(); {346#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:50:08,883 INFO L290 TraceCheckUtils]: 1: Hoare triple {346#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {338#true} is VALID [2022-04-28 03:50:08,884 INFO L290 TraceCheckUtils]: 2: Hoare triple {338#true} assume true; {338#true} is VALID [2022-04-28 03:50:08,884 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {338#true} {338#true} #48#return; {338#true} is VALID [2022-04-28 03:50:08,884 INFO L272 TraceCheckUtils]: 4: Hoare triple {338#true} call #t~ret7 := main(); {338#true} is VALID [2022-04-28 03:50:08,887 INFO L290 TraceCheckUtils]: 5: Hoare triple {338#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {343#(= main_~x~0 0)} is VALID [2022-04-28 03:50:08,890 INFO L290 TraceCheckUtils]: 6: Hoare triple {343#(= main_~x~0 0)} [56] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_9| |v_main_#t~post4_8|)) (.cse1 (= v_main_~x~0_22 v_main_~x~0_21))) (or (and (< v_main_~x~0_22 v_main_~x~0_21) (< v_main_~x~0_21 500001)) (and (not (< v_main_~x~0_22 500000)) .cse0 .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_22, main_#t~post4=|v_main_#t~post4_9|} OutVars{main_~x~0=v_main_~x~0_21, main_#t~post4=|v_main_#t~post4_8|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {344#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:08,891 INFO L290 TraceCheckUtils]: 7: Hoare triple {344#(<= main_~x~0 500000)} [57] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {344#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:08,896 INFO L290 TraceCheckUtils]: 8: Hoare triple {344#(<= main_~x~0 500000)} [58] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_4| |v_main_#t~post6_3|)) (.cse2 (= |v_main_#t~post5_4| |v_main_#t~post5_3|)) (.cse3 (= v_main_~x~0_24 v_main_~x~0_23)) (.cse1 (<= 500000 v_main_~x~0_24))) (or (and (= v_main_~y~0_4 v_main_~y~0_5) .cse0 (or (not .cse1) (not (< v_main_~x~0_24 750000))) .cse2 .cse3) (and .cse0 .cse2 .cse3 (= v_main_~y~0_5 v_main_~y~0_4)) (and .cse1 (= (+ v_main_~x~0_24 v_main_~y~0_4) (+ v_main_~x~0_23 v_main_~y~0_5)) (< v_main_~x~0_23 750001) (< v_main_~x~0_24 v_main_~x~0_23)))) InVars {main_~y~0=v_main_~y~0_5, main_#t~post5=|v_main_#t~post5_4|, main_~x~0=v_main_~x~0_24, main_#t~post6=|v_main_#t~post6_4|} OutVars{main_~y~0=v_main_~y~0_4, main_#t~post5=|v_main_#t~post5_3|, main_~x~0=v_main_~x~0_23, main_#t~post6=|v_main_#t~post6_3|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {345#(<= main_~x~0 750000)} is VALID [2022-04-28 03:50:08,896 INFO L290 TraceCheckUtils]: 9: Hoare triple {345#(<= main_~x~0 750000)} [55] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {339#false} is VALID [2022-04-28 03:50:08,897 INFO L272 TraceCheckUtils]: 10: Hoare triple {339#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {339#false} is VALID [2022-04-28 03:50:08,897 INFO L290 TraceCheckUtils]: 11: Hoare triple {339#false} ~cond := #in~cond; {339#false} is VALID [2022-04-28 03:50:08,897 INFO L290 TraceCheckUtils]: 12: Hoare triple {339#false} assume 0 == ~cond; {339#false} is VALID [2022-04-28 03:50:08,897 INFO L290 TraceCheckUtils]: 13: Hoare triple {339#false} assume !false; {339#false} is VALID [2022-04-28 03:50:08,897 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 03:50:08,898 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:50:08,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1163827831] [2022-04-28 03:50:08,898 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1163827831] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:50:08,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [52241010] [2022-04-28 03:50:08,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:08,898 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:08,898 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:50:08,903 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:50:08,927 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-04-28 03:50:08,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:08,947 INFO L263 TraceCheckSpWp]: Trace formula consists of 58 conjuncts, 4 conjunts are in the unsatisfiable core [2022-04-28 03:50:08,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:08,965 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:50:09,267 INFO L272 TraceCheckUtils]: 0: Hoare triple {338#true} call ULTIMATE.init(); {338#true} is VALID [2022-04-28 03:50:09,267 INFO L290 TraceCheckUtils]: 1: Hoare triple {338#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {338#true} is VALID [2022-04-28 03:50:09,267 INFO L290 TraceCheckUtils]: 2: Hoare triple {338#true} assume true; {338#true} is VALID [2022-04-28 03:50:09,267 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {338#true} {338#true} #48#return; {338#true} is VALID [2022-04-28 03:50:09,268 INFO L272 TraceCheckUtils]: 4: Hoare triple {338#true} call #t~ret7 := main(); {338#true} is VALID [2022-04-28 03:50:09,271 INFO L290 TraceCheckUtils]: 5: Hoare triple {338#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {365#(<= main_~x~0 0)} is VALID [2022-04-28 03:50:09,273 INFO L290 TraceCheckUtils]: 6: Hoare triple {365#(<= main_~x~0 0)} [56] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_9| |v_main_#t~post4_8|)) (.cse1 (= v_main_~x~0_22 v_main_~x~0_21))) (or (and (< v_main_~x~0_22 v_main_~x~0_21) (< v_main_~x~0_21 500001)) (and (not (< v_main_~x~0_22 500000)) .cse0 .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_22, main_#t~post4=|v_main_#t~post4_9|} OutVars{main_~x~0=v_main_~x~0_21, main_#t~post4=|v_main_#t~post4_8|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {344#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:09,273 INFO L290 TraceCheckUtils]: 7: Hoare triple {344#(<= main_~x~0 500000)} [57] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {344#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:09,274 INFO L290 TraceCheckUtils]: 8: Hoare triple {344#(<= main_~x~0 500000)} [58] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_4| |v_main_#t~post6_3|)) (.cse2 (= |v_main_#t~post5_4| |v_main_#t~post5_3|)) (.cse3 (= v_main_~x~0_24 v_main_~x~0_23)) (.cse1 (<= 500000 v_main_~x~0_24))) (or (and (= v_main_~y~0_4 v_main_~y~0_5) .cse0 (or (not .cse1) (not (< v_main_~x~0_24 750000))) .cse2 .cse3) (and .cse0 .cse2 .cse3 (= v_main_~y~0_5 v_main_~y~0_4)) (and .cse1 (= (+ v_main_~x~0_24 v_main_~y~0_4) (+ v_main_~x~0_23 v_main_~y~0_5)) (< v_main_~x~0_23 750001) (< v_main_~x~0_24 v_main_~x~0_23)))) InVars {main_~y~0=v_main_~y~0_5, main_#t~post5=|v_main_#t~post5_4|, main_~x~0=v_main_~x~0_24, main_#t~post6=|v_main_#t~post6_4|} OutVars{main_~y~0=v_main_~y~0_4, main_#t~post5=|v_main_#t~post5_3|, main_~x~0=v_main_~x~0_23, main_#t~post6=|v_main_#t~post6_3|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {345#(<= main_~x~0 750000)} is VALID [2022-04-28 03:50:09,275 INFO L290 TraceCheckUtils]: 9: Hoare triple {345#(<= main_~x~0 750000)} [55] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {339#false} is VALID [2022-04-28 03:50:09,275 INFO L272 TraceCheckUtils]: 10: Hoare triple {339#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {339#false} is VALID [2022-04-28 03:50:09,275 INFO L290 TraceCheckUtils]: 11: Hoare triple {339#false} ~cond := #in~cond; {339#false} is VALID [2022-04-28 03:50:09,275 INFO L290 TraceCheckUtils]: 12: Hoare triple {339#false} assume 0 == ~cond; {339#false} is VALID [2022-04-28 03:50:09,275 INFO L290 TraceCheckUtils]: 13: Hoare triple {339#false} assume !false; {339#false} is VALID [2022-04-28 03:50:09,276 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 03:50:09,276 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:50:09,376 INFO L290 TraceCheckUtils]: 13: Hoare triple {339#false} assume !false; {339#false} is VALID [2022-04-28 03:50:09,376 INFO L290 TraceCheckUtils]: 12: Hoare triple {339#false} assume 0 == ~cond; {339#false} is VALID [2022-04-28 03:50:09,377 INFO L290 TraceCheckUtils]: 11: Hoare triple {339#false} ~cond := #in~cond; {339#false} is VALID [2022-04-28 03:50:09,377 INFO L272 TraceCheckUtils]: 10: Hoare triple {339#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {339#false} is VALID [2022-04-28 03:50:09,377 INFO L290 TraceCheckUtils]: 9: Hoare triple {402#(< main_~x~0 1000000)} [55] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {339#false} is VALID [2022-04-28 03:50:09,378 INFO L290 TraceCheckUtils]: 8: Hoare triple {402#(< main_~x~0 1000000)} [58] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_4| |v_main_#t~post6_3|)) (.cse2 (= |v_main_#t~post5_4| |v_main_#t~post5_3|)) (.cse3 (= v_main_~x~0_24 v_main_~x~0_23)) (.cse1 (<= 500000 v_main_~x~0_24))) (or (and (= v_main_~y~0_4 v_main_~y~0_5) .cse0 (or (not .cse1) (not (< v_main_~x~0_24 750000))) .cse2 .cse3) (and .cse0 .cse2 .cse3 (= v_main_~y~0_5 v_main_~y~0_4)) (and .cse1 (= (+ v_main_~x~0_24 v_main_~y~0_4) (+ v_main_~x~0_23 v_main_~y~0_5)) (< v_main_~x~0_23 750001) (< v_main_~x~0_24 v_main_~x~0_23)))) InVars {main_~y~0=v_main_~y~0_5, main_#t~post5=|v_main_#t~post5_4|, main_~x~0=v_main_~x~0_24, main_#t~post6=|v_main_#t~post6_4|} OutVars{main_~y~0=v_main_~y~0_4, main_#t~post5=|v_main_#t~post5_3|, main_~x~0=v_main_~x~0_23, main_#t~post6=|v_main_#t~post6_3|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {402#(< main_~x~0 1000000)} is VALID [2022-04-28 03:50:09,379 INFO L290 TraceCheckUtils]: 7: Hoare triple {402#(< main_~x~0 1000000)} [57] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {402#(< main_~x~0 1000000)} is VALID [2022-04-28 03:50:09,380 INFO L290 TraceCheckUtils]: 6: Hoare triple {402#(< main_~x~0 1000000)} [56] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_9| |v_main_#t~post4_8|)) (.cse1 (= v_main_~x~0_22 v_main_~x~0_21))) (or (and (< v_main_~x~0_22 v_main_~x~0_21) (< v_main_~x~0_21 500001)) (and (not (< v_main_~x~0_22 500000)) .cse0 .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_22, main_#t~post4=|v_main_#t~post4_9|} OutVars{main_~x~0=v_main_~x~0_21, main_#t~post4=|v_main_#t~post4_8|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {402#(< main_~x~0 1000000)} is VALID [2022-04-28 03:50:09,380 INFO L290 TraceCheckUtils]: 5: Hoare triple {338#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {402#(< main_~x~0 1000000)} is VALID [2022-04-28 03:50:09,380 INFO L272 TraceCheckUtils]: 4: Hoare triple {338#true} call #t~ret7 := main(); {338#true} is VALID [2022-04-28 03:50:09,380 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {338#true} {338#true} #48#return; {338#true} is VALID [2022-04-28 03:50:09,380 INFO L290 TraceCheckUtils]: 2: Hoare triple {338#true} assume true; {338#true} is VALID [2022-04-28 03:50:09,381 INFO L290 TraceCheckUtils]: 1: Hoare triple {338#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {338#true} is VALID [2022-04-28 03:50:09,381 INFO L272 TraceCheckUtils]: 0: Hoare triple {338#true} call ULTIMATE.init(); {338#true} is VALID [2022-04-28 03:50:09,381 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:09,381 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [52241010] provided 1 perfect and 1 imperfect interpolant sequences [2022-04-28 03:50:09,381 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-04-28 03:50:09,381 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6, 5] total 8 [2022-04-28 03:50:09,521 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:50:09,521 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [2008860935] [2022-04-28 03:50:09,521 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [2008860935] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:50:09,521 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:50:09,522 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-04-28 03:50:09,522 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [509725436] [2022-04-28 03:50:09,522 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:50:09,524 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 2.1666666666666665) internal successors, (13), 6 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-04-28 03:50:09,524 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:50:09,524 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 2.1666666666666665) internal successors, (13), 6 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:09,538 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 17 edges. 17 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:09,538 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-04-28 03:50:09,538 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:09,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-04-28 03:50:09,539 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-04-28 03:50:09,540 INFO L87 Difference]: Start difference. First operand 20 states and 23 transitions. Second operand has 6 states, 6 states have (on average 2.1666666666666665) internal successors, (13), 6 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:09,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:09,672 INFO L93 Difference]: Finished difference Result 38 states and 50 transitions. [2022-04-28 03:50:09,672 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-04-28 03:50:09,673 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 2.1666666666666665) internal successors, (13), 6 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-04-28 03:50:09,673 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:50:09,673 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 2.1666666666666665) internal successors, (13), 6 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:09,674 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 44 transitions. [2022-04-28 03:50:09,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 2.1666666666666665) internal successors, (13), 6 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:09,676 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 44 transitions. [2022-04-28 03:50:09,676 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 6 states and 44 transitions. [2022-04-28 03:50:09,713 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 44 edges. 44 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:09,714 INFO L225 Difference]: With dead ends: 38 [2022-04-28 03:50:09,714 INFO L226 Difference]: Without dead ends: 29 [2022-04-28 03:50:09,714 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 33 SyntacticMatches, 4 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-04-28 03:50:09,715 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 6 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-04-28 03:50:09,715 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 48 Invalid, 47 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-04-28 03:50:09,716 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-04-28 03:50:09,737 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 26. [2022-04-28 03:50:09,737 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:50:09,738 INFO L82 GeneralOperation]: Start isEquivalent. First operand 29 states. Second operand has 26 states, 21 states have (on average 1.1904761904761905) internal successors, (25), 21 states have internal predecessors, (25), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:09,738 INFO L74 IsIncluded]: Start isIncluded. First operand 29 states. Second operand has 26 states, 21 states have (on average 1.1904761904761905) internal successors, (25), 21 states have internal predecessors, (25), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:09,738 INFO L87 Difference]: Start difference. First operand 29 states. Second operand has 26 states, 21 states have (on average 1.1904761904761905) internal successors, (25), 21 states have internal predecessors, (25), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:09,745 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:09,745 INFO L93 Difference]: Finished difference Result 29 states and 33 transitions. [2022-04-28 03:50:09,745 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-04-28 03:50:09,745 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:09,745 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:09,745 INFO L74 IsIncluded]: Start isIncluded. First operand has 26 states, 21 states have (on average 1.1904761904761905) internal successors, (25), 21 states have internal predecessors, (25), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 29 states. [2022-04-28 03:50:09,746 INFO L87 Difference]: Start difference. First operand has 26 states, 21 states have (on average 1.1904761904761905) internal successors, (25), 21 states have internal predecessors, (25), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 29 states. [2022-04-28 03:50:09,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:09,747 INFO L93 Difference]: Finished difference Result 29 states and 33 transitions. [2022-04-28 03:50:09,747 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-04-28 03:50:09,747 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:09,747 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:09,747 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:50:09,747 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:50:09,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 21 states have (on average 1.1904761904761905) internal successors, (25), 21 states have internal predecessors, (25), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:09,749 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 29 transitions. [2022-04-28 03:50:09,749 INFO L78 Accepts]: Start accepts. Automaton has 26 states and 29 transitions. Word has length 17 [2022-04-28 03:50:09,749 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:50:09,749 INFO L495 AbstractCegarLoop]: Abstraction has 26 states and 29 transitions. [2022-04-28 03:50:09,749 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 2.1666666666666665) internal successors, (13), 6 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:09,749 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 26 states and 29 transitions. [2022-04-28 03:50:09,781 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 29 edges. 29 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:09,781 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states and 29 transitions. [2022-04-28 03:50:09,783 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-04-28 03:50:09,783 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:50:09,783 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:50:09,811 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-04-28 03:50:10,003 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:10,004 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:50:10,004 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:50:10,004 INFO L85 PathProgramCache]: Analyzing trace with hash -1006918194, now seen corresponding path program 1 times [2022-04-28 03:50:10,004 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:10,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [54766426] [2022-04-28 03:50:10,177 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:10,526 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:10,835 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:10,836 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:50:10,840 INFO L85 PathProgramCache]: Analyzing trace with hash -1965538073, now seen corresponding path program 1 times [2022-04-28 03:50:10,841 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:50:10,841 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1529268113] [2022-04-28 03:50:10,841 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:10,841 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:50:10,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:10,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:50:10,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:10,960 INFO L290 TraceCheckUtils]: 0: Hoare triple {628#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {620#true} is VALID [2022-04-28 03:50:10,960 INFO L290 TraceCheckUtils]: 1: Hoare triple {620#true} assume true; {620#true} is VALID [2022-04-28 03:50:10,960 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {620#true} {620#true} #48#return; {620#true} is VALID [2022-04-28 03:50:10,961 INFO L272 TraceCheckUtils]: 0: Hoare triple {620#true} call ULTIMATE.init(); {628#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:50:10,961 INFO L290 TraceCheckUtils]: 1: Hoare triple {628#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {620#true} is VALID [2022-04-28 03:50:10,961 INFO L290 TraceCheckUtils]: 2: Hoare triple {620#true} assume true; {620#true} is VALID [2022-04-28 03:50:10,961 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {620#true} {620#true} #48#return; {620#true} is VALID [2022-04-28 03:50:10,961 INFO L272 TraceCheckUtils]: 4: Hoare triple {620#true} call #t~ret7 := main(); {620#true} is VALID [2022-04-28 03:50:10,962 INFO L290 TraceCheckUtils]: 5: Hoare triple {620#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {625#(= main_~x~0 0)} is VALID [2022-04-28 03:50:10,963 INFO L290 TraceCheckUtils]: 6: Hoare triple {625#(= main_~x~0 0)} [60] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_41 v_main_~x~0_40)) (.cse1 (= |v_main_#t~post4_16| |v_main_#t~post4_15|))) (or (and .cse0 .cse1) (and .cse0 (not (< v_main_~x~0_41 500000)) .cse1) (and (< v_main_~x~0_41 v_main_~x~0_40) (< v_main_~x~0_40 500001)))) InVars {main_~x~0=v_main_~x~0_41, main_#t~post4=|v_main_#t~post4_16|} OutVars{main_~x~0=v_main_~x~0_40, main_#t~post4=|v_main_#t~post4_15|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {626#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:10,964 INFO L290 TraceCheckUtils]: 7: Hoare triple {626#(<= main_~x~0 500000)} [61] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {626#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:10,965 INFO L290 TraceCheckUtils]: 8: Hoare triple {626#(<= main_~x~0 500000)} [62] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_12| |v_main_#t~post6_10|)) (.cse3 (<= 750000 v_main_~x~0_43)) (.cse1 (= v_main_~y~0_15 v_main_~y~0_14)) (.cse2 (= v_main_~x~0_43 v_main_~x~0_42))) (or (and .cse0 .cse1 .cse2) (and (= (+ v_main_~x~0_42 (* v_main_~y~0_15 2)) (+ v_main_~x~0_43 (* v_main_~y~0_14 2))) .cse3 (< v_main_~y~0_14 (+ v_main_~y~0_15 2 (div (+ 999999 (* (- 1) v_main_~x~0_43)) 2))) (< v_main_~y~0_15 v_main_~y~0_14)) (and .cse0 (or (not .cse3) (not (< v_main_~x~0_43 1000000))) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_15, main_~x~0=v_main_~x~0_43, main_#t~post6=|v_main_#t~post6_12|} OutVars{main_~y~0=v_main_~y~0_14, main_~x~0=v_main_~x~0_42, main_#t~post6=|v_main_#t~post6_10|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {626#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:10,965 INFO L290 TraceCheckUtils]: 9: Hoare triple {626#(<= main_~x~0 500000)} [63] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {626#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:10,966 INFO L290 TraceCheckUtils]: 10: Hoare triple {626#(<= main_~x~0 500000)} [64] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post5_11| |v_main_#t~post5_10|)) (.cse2 (= v_main_~y~0_17 v_main_~y~0_16)) (.cse3 (= v_main_~x~0_45 v_main_~x~0_44)) (.cse4 (= |v_main_#t~post6_15| |v_main_#t~post6_11|)) (.cse1 (<= 500000 v_main_~x~0_45))) (or (and .cse0 (or (not .cse1) (not (< v_main_~x~0_45 750000))) .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4) (and (< v_main_~x~0_45 v_main_~x~0_44) .cse1 (= (+ v_main_~x~0_44 v_main_~y~0_17) (+ v_main_~x~0_45 v_main_~y~0_16)) (< v_main_~x~0_44 750001)))) InVars {main_~y~0=v_main_~y~0_17, main_#t~post5=|v_main_#t~post5_11|, main_~x~0=v_main_~x~0_45, main_#t~post6=|v_main_#t~post6_15|} OutVars{main_~y~0=v_main_~y~0_16, main_#t~post5=|v_main_#t~post5_10|, main_~x~0=v_main_~x~0_44, main_#t~post6=|v_main_#t~post6_11|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {627#(<= main_~x~0 750000)} is VALID [2022-04-28 03:50:10,967 INFO L290 TraceCheckUtils]: 11: Hoare triple {627#(<= main_~x~0 750000)} [59] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {621#false} is VALID [2022-04-28 03:50:10,967 INFO L272 TraceCheckUtils]: 12: Hoare triple {621#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {621#false} is VALID [2022-04-28 03:50:10,967 INFO L290 TraceCheckUtils]: 13: Hoare triple {621#false} ~cond := #in~cond; {621#false} is VALID [2022-04-28 03:50:10,967 INFO L290 TraceCheckUtils]: 14: Hoare triple {621#false} assume 0 == ~cond; {621#false} is VALID [2022-04-28 03:50:10,967 INFO L290 TraceCheckUtils]: 15: Hoare triple {621#false} assume !false; {621#false} is VALID [2022-04-28 03:50:10,967 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:10,968 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:50:10,968 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1529268113] [2022-04-28 03:50:10,968 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1529268113] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:50:10,968 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1407098239] [2022-04-28 03:50:10,968 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:10,968 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:10,968 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:50:10,969 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:50:10,972 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-04-28 03:50:11,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:11,005 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 9 conjunts are in the unsatisfiable core [2022-04-28 03:50:11,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:11,018 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:50:11,346 INFO L272 TraceCheckUtils]: 0: Hoare triple {620#true} call ULTIMATE.init(); {620#true} is VALID [2022-04-28 03:50:11,346 INFO L290 TraceCheckUtils]: 1: Hoare triple {620#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {620#true} is VALID [2022-04-28 03:50:11,347 INFO L290 TraceCheckUtils]: 2: Hoare triple {620#true} assume true; {620#true} is VALID [2022-04-28 03:50:11,347 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {620#true} {620#true} #48#return; {620#true} is VALID [2022-04-28 03:50:11,347 INFO L272 TraceCheckUtils]: 4: Hoare triple {620#true} call #t~ret7 := main(); {620#true} is VALID [2022-04-28 03:50:11,347 INFO L290 TraceCheckUtils]: 5: Hoare triple {620#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {625#(= main_~x~0 0)} is VALID [2022-04-28 03:50:11,348 INFO L290 TraceCheckUtils]: 6: Hoare triple {625#(= main_~x~0 0)} [60] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_41 v_main_~x~0_40)) (.cse1 (= |v_main_#t~post4_16| |v_main_#t~post4_15|))) (or (and .cse0 .cse1) (and .cse0 (not (< v_main_~x~0_41 500000)) .cse1) (and (< v_main_~x~0_41 v_main_~x~0_40) (< v_main_~x~0_40 500001)))) InVars {main_~x~0=v_main_~x~0_41, main_#t~post4=|v_main_#t~post4_16|} OutVars{main_~x~0=v_main_~x~0_40, main_#t~post4=|v_main_#t~post4_15|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {650#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:50:11,349 INFO L290 TraceCheckUtils]: 7: Hoare triple {650#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [61] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {650#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:50:11,350 INFO L290 TraceCheckUtils]: 8: Hoare triple {650#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [62] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_12| |v_main_#t~post6_10|)) (.cse3 (<= 750000 v_main_~x~0_43)) (.cse1 (= v_main_~y~0_15 v_main_~y~0_14)) (.cse2 (= v_main_~x~0_43 v_main_~x~0_42))) (or (and .cse0 .cse1 .cse2) (and (= (+ v_main_~x~0_42 (* v_main_~y~0_15 2)) (+ v_main_~x~0_43 (* v_main_~y~0_14 2))) .cse3 (< v_main_~y~0_14 (+ v_main_~y~0_15 2 (div (+ 999999 (* (- 1) v_main_~x~0_43)) 2))) (< v_main_~y~0_15 v_main_~y~0_14)) (and .cse0 (or (not .cse3) (not (< v_main_~x~0_43 1000000))) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_15, main_~x~0=v_main_~x~0_43, main_#t~post6=|v_main_#t~post6_12|} OutVars{main_~y~0=v_main_~y~0_14, main_~x~0=v_main_~x~0_42, main_#t~post6=|v_main_#t~post6_10|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {650#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:50:11,351 INFO L290 TraceCheckUtils]: 9: Hoare triple {650#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [63] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {650#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:50:11,354 INFO L290 TraceCheckUtils]: 10: Hoare triple {650#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [64] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post5_11| |v_main_#t~post5_10|)) (.cse2 (= v_main_~y~0_17 v_main_~y~0_16)) (.cse3 (= v_main_~x~0_45 v_main_~x~0_44)) (.cse4 (= |v_main_#t~post6_15| |v_main_#t~post6_11|)) (.cse1 (<= 500000 v_main_~x~0_45))) (or (and .cse0 (or (not .cse1) (not (< v_main_~x~0_45 750000))) .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4) (and (< v_main_~x~0_45 v_main_~x~0_44) .cse1 (= (+ v_main_~x~0_44 v_main_~y~0_17) (+ v_main_~x~0_45 v_main_~y~0_16)) (< v_main_~x~0_44 750001)))) InVars {main_~y~0=v_main_~y~0_17, main_#t~post5=|v_main_#t~post5_11|, main_~x~0=v_main_~x~0_45, main_#t~post6=|v_main_#t~post6_15|} OutVars{main_~y~0=v_main_~y~0_16, main_#t~post5=|v_main_#t~post5_10|, main_~x~0=v_main_~x~0_44, main_#t~post6=|v_main_#t~post6_11|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {663#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} is VALID [2022-04-28 03:50:11,355 INFO L290 TraceCheckUtils]: 11: Hoare triple {663#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} [59] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {621#false} is VALID [2022-04-28 03:50:11,355 INFO L272 TraceCheckUtils]: 12: Hoare triple {621#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {621#false} is VALID [2022-04-28 03:50:11,355 INFO L290 TraceCheckUtils]: 13: Hoare triple {621#false} ~cond := #in~cond; {621#false} is VALID [2022-04-28 03:50:11,355 INFO L290 TraceCheckUtils]: 14: Hoare triple {621#false} assume 0 == ~cond; {621#false} is VALID [2022-04-28 03:50:11,355 INFO L290 TraceCheckUtils]: 15: Hoare triple {621#false} assume !false; {621#false} is VALID [2022-04-28 03:50:11,356 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:11,356 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:50:11,970 INFO L290 TraceCheckUtils]: 15: Hoare triple {621#false} assume !false; {621#false} is VALID [2022-04-28 03:50:11,971 INFO L290 TraceCheckUtils]: 14: Hoare triple {682#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {621#false} is VALID [2022-04-28 03:50:11,971 INFO L290 TraceCheckUtils]: 13: Hoare triple {686#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {682#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:50:11,972 INFO L272 TraceCheckUtils]: 12: Hoare triple {690#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {686#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:50:11,973 INFO L290 TraceCheckUtils]: 11: Hoare triple {694#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [59] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {690#(= main_~x~0 1000000)} is VALID [2022-04-28 03:50:11,974 INFO L290 TraceCheckUtils]: 10: Hoare triple {694#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [64] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post5_11| |v_main_#t~post5_10|)) (.cse2 (= v_main_~y~0_17 v_main_~y~0_16)) (.cse3 (= v_main_~x~0_45 v_main_~x~0_44)) (.cse4 (= |v_main_#t~post6_15| |v_main_#t~post6_11|)) (.cse1 (<= 500000 v_main_~x~0_45))) (or (and .cse0 (or (not .cse1) (not (< v_main_~x~0_45 750000))) .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4) (and (< v_main_~x~0_45 v_main_~x~0_44) .cse1 (= (+ v_main_~x~0_44 v_main_~y~0_17) (+ v_main_~x~0_45 v_main_~y~0_16)) (< v_main_~x~0_44 750001)))) InVars {main_~y~0=v_main_~y~0_17, main_#t~post5=|v_main_#t~post5_11|, main_~x~0=v_main_~x~0_45, main_#t~post6=|v_main_#t~post6_15|} OutVars{main_~y~0=v_main_~y~0_16, main_#t~post5=|v_main_#t~post5_10|, main_~x~0=v_main_~x~0_44, main_#t~post6=|v_main_#t~post6_11|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {694#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:11,974 INFO L290 TraceCheckUtils]: 9: Hoare triple {694#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [63] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {694#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:11,976 INFO L290 TraceCheckUtils]: 8: Hoare triple {704#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [62] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_12| |v_main_#t~post6_10|)) (.cse3 (<= 750000 v_main_~x~0_43)) (.cse1 (= v_main_~y~0_15 v_main_~y~0_14)) (.cse2 (= v_main_~x~0_43 v_main_~x~0_42))) (or (and .cse0 .cse1 .cse2) (and (= (+ v_main_~x~0_42 (* v_main_~y~0_15 2)) (+ v_main_~x~0_43 (* v_main_~y~0_14 2))) .cse3 (< v_main_~y~0_14 (+ v_main_~y~0_15 2 (div (+ 999999 (* (- 1) v_main_~x~0_43)) 2))) (< v_main_~y~0_15 v_main_~y~0_14)) (and .cse0 (or (not .cse3) (not (< v_main_~x~0_43 1000000))) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_15, main_~x~0=v_main_~x~0_43, main_#t~post6=|v_main_#t~post6_12|} OutVars{main_~y~0=v_main_~y~0_14, main_~x~0=v_main_~x~0_42, main_#t~post6=|v_main_#t~post6_10|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {694#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:11,976 INFO L290 TraceCheckUtils]: 7: Hoare triple {704#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [61] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {704#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:50:11,979 INFO L290 TraceCheckUtils]: 6: Hoare triple {704#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [60] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_41 v_main_~x~0_40)) (.cse1 (= |v_main_#t~post4_16| |v_main_#t~post4_15|))) (or (and .cse0 .cse1) (and .cse0 (not (< v_main_~x~0_41 500000)) .cse1) (and (< v_main_~x~0_41 v_main_~x~0_40) (< v_main_~x~0_40 500001)))) InVars {main_~x~0=v_main_~x~0_41, main_#t~post4=|v_main_#t~post4_16|} OutVars{main_~x~0=v_main_~x~0_40, main_#t~post4=|v_main_#t~post4_15|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {704#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:50:11,979 INFO L290 TraceCheckUtils]: 5: Hoare triple {620#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {704#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:50:11,980 INFO L272 TraceCheckUtils]: 4: Hoare triple {620#true} call #t~ret7 := main(); {620#true} is VALID [2022-04-28 03:50:11,980 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {620#true} {620#true} #48#return; {620#true} is VALID [2022-04-28 03:50:11,980 INFO L290 TraceCheckUtils]: 2: Hoare triple {620#true} assume true; {620#true} is VALID [2022-04-28 03:50:11,980 INFO L290 TraceCheckUtils]: 1: Hoare triple {620#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {620#true} is VALID [2022-04-28 03:50:11,980 INFO L272 TraceCheckUtils]: 0: Hoare triple {620#true} call ULTIMATE.init(); {620#true} is VALID [2022-04-28 03:50:11,980 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:11,981 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1407098239] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:50:12,005 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:50:12,005 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:50:12,142 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:50:12,142 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [54766426] [2022-04-28 03:50:12,142 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [54766426] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:50:12,142 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:50:12,142 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-04-28 03:50:12,142 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [437568189] [2022-04-28 03:50:12,143 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:50:12,144 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.625) internal successors, (21), 7 states have internal predecessors, (21), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-04-28 03:50:12,144 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:50:12,144 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 2.625) internal successors, (21), 7 states have internal predecessors, (21), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:12,168 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:12,168 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-04-28 03:50:12,168 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:12,169 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-04-28 03:50:12,169 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=74, Invalid=198, Unknown=0, NotChecked=0, Total=272 [2022-04-28 03:50:12,169 INFO L87 Difference]: Start difference. First operand 26 states and 29 transitions. Second operand has 8 states, 8 states have (on average 2.625) internal successors, (21), 7 states have internal predecessors, (21), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:12,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:12,476 INFO L93 Difference]: Finished difference Result 55 states and 64 transitions. [2022-04-28 03:50:12,476 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-04-28 03:50:12,476 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.625) internal successors, (21), 7 states have internal predecessors, (21), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-04-28 03:50:12,476 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:50:12,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 2.625) internal successors, (21), 7 states have internal predecessors, (21), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:12,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 44 transitions. [2022-04-28 03:50:12,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 2.625) internal successors, (21), 7 states have internal predecessors, (21), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:12,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 44 transitions. [2022-04-28 03:50:12,479 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 8 states and 44 transitions. [2022-04-28 03:50:12,514 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 44 edges. 44 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:12,515 INFO L225 Difference]: With dead ends: 55 [2022-04-28 03:50:12,515 INFO L226 Difference]: Without dead ends: 37 [2022-04-28 03:50:12,516 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 42 SyntacticMatches, 1 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 95 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=123, Invalid=339, Unknown=0, NotChecked=0, Total=462 [2022-04-28 03:50:12,517 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 20 mSDsluCounter, 22 mSDsCounter, 0 mSdLazyCounter, 84 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 36 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 84 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-04-28 03:50:12,517 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 36 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 84 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-04-28 03:50:12,518 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-04-28 03:50:12,553 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 32. [2022-04-28 03:50:12,554 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:50:12,554 INFO L82 GeneralOperation]: Start isEquivalent. First operand 37 states. Second operand has 32 states, 27 states have (on average 1.1851851851851851) internal successors, (32), 27 states have internal predecessors, (32), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:12,554 INFO L74 IsIncluded]: Start isIncluded. First operand 37 states. Second operand has 32 states, 27 states have (on average 1.1851851851851851) internal successors, (32), 27 states have internal predecessors, (32), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:12,554 INFO L87 Difference]: Start difference. First operand 37 states. Second operand has 32 states, 27 states have (on average 1.1851851851851851) internal successors, (32), 27 states have internal predecessors, (32), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:12,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:12,556 INFO L93 Difference]: Finished difference Result 37 states and 41 transitions. [2022-04-28 03:50:12,556 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 41 transitions. [2022-04-28 03:50:12,556 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:12,556 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:12,557 INFO L74 IsIncluded]: Start isIncluded. First operand has 32 states, 27 states have (on average 1.1851851851851851) internal successors, (32), 27 states have internal predecessors, (32), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 37 states. [2022-04-28 03:50:12,557 INFO L87 Difference]: Start difference. First operand has 32 states, 27 states have (on average 1.1851851851851851) internal successors, (32), 27 states have internal predecessors, (32), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 37 states. [2022-04-28 03:50:12,558 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:12,558 INFO L93 Difference]: Finished difference Result 37 states and 41 transitions. [2022-04-28 03:50:12,558 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 41 transitions. [2022-04-28 03:50:12,559 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:12,559 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:12,559 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:50:12,559 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:50:12,559 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 27 states have (on average 1.1851851851851851) internal successors, (32), 27 states have internal predecessors, (32), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:12,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 36 transitions. [2022-04-28 03:50:12,560 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 36 transitions. Word has length 25 [2022-04-28 03:50:12,560 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:50:12,561 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 36 transitions. [2022-04-28 03:50:12,561 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.625) internal successors, (21), 7 states have internal predecessors, (21), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:12,561 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 32 states and 36 transitions. [2022-04-28 03:50:12,594 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:12,594 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 36 transitions. [2022-04-28 03:50:12,595 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-04-28 03:50:12,595 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:50:12,595 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:50:12,621 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-04-28 03:50:12,795 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable3 [2022-04-28 03:50:12,796 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:50:12,796 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:50:12,796 INFO L85 PathProgramCache]: Analyzing trace with hash 472639013, now seen corresponding path program 2 times [2022-04-28 03:50:12,796 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:12,797 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1615264068] [2022-04-28 03:50:12,945 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:15,944 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:50:16,083 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:16,375 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:16,376 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:50:16,380 INFO L85 PathProgramCache]: Analyzing trace with hash 1969854247, now seen corresponding path program 1 times [2022-04-28 03:50:16,380 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:50:16,380 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1182068228] [2022-04-28 03:50:16,380 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:16,380 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:50:16,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:16,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:50:16,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:16,481 INFO L290 TraceCheckUtils]: 0: Hoare triple {1001#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {993#true} is VALID [2022-04-28 03:50:16,481 INFO L290 TraceCheckUtils]: 1: Hoare triple {993#true} assume true; {993#true} is VALID [2022-04-28 03:50:16,481 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {993#true} {993#true} #48#return; {993#true} is VALID [2022-04-28 03:50:16,482 INFO L272 TraceCheckUtils]: 0: Hoare triple {993#true} call ULTIMATE.init(); {1001#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:50:16,482 INFO L290 TraceCheckUtils]: 1: Hoare triple {1001#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {993#true} is VALID [2022-04-28 03:50:16,482 INFO L290 TraceCheckUtils]: 2: Hoare triple {993#true} assume true; {993#true} is VALID [2022-04-28 03:50:16,482 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {993#true} {993#true} #48#return; {993#true} is VALID [2022-04-28 03:50:16,482 INFO L272 TraceCheckUtils]: 4: Hoare triple {993#true} call #t~ret7 := main(); {993#true} is VALID [2022-04-28 03:50:16,483 INFO L290 TraceCheckUtils]: 5: Hoare triple {993#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {998#(= main_~x~0 0)} is VALID [2022-04-28 03:50:16,483 INFO L290 TraceCheckUtils]: 6: Hoare triple {998#(= main_~x~0 0)} [66] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_23| |v_main_#t~post4_22|)) (.cse1 (= v_main_~x~0_69 v_main_~x~0_68))) (or (and (< v_main_~x~0_68 500001) (< v_main_~x~0_69 v_main_~x~0_68)) (and .cse0 .cse1) (and .cse0 (<= 500000 v_main_~x~0_69) .cse1))) InVars {main_~x~0=v_main_~x~0_69, main_#t~post4=|v_main_#t~post4_23|} OutVars{main_~x~0=v_main_~x~0_68, main_#t~post4=|v_main_#t~post4_22|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {999#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:16,484 INFO L290 TraceCheckUtils]: 7: Hoare triple {999#(<= main_~x~0 500000)} [67] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {999#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:16,485 INFO L290 TraceCheckUtils]: 8: Hoare triple {999#(<= main_~x~0 500000)} [68] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_71)) (.cse1 (= |v_main_#t~post6_25| |v_main_#t~post6_23|)) (.cse2 (= v_main_~y~0_33 v_main_~y~0_32))) (or (and (< v_main_~y~0_33 v_main_~y~0_32) (= (+ (* v_main_~y~0_33 2) v_main_~x~0_70) (+ v_main_~x~0_71 (* v_main_~y~0_32 2))) (< v_main_~y~0_32 (+ v_main_~y~0_33 2 (div (+ (* (- 1) v_main_~x~0_71) 999999) 2))) .cse0) (and (= v_main_~x~0_71 v_main_~x~0_70) .cse1 .cse2) (and (or (not (< v_main_~x~0_71 1000000)) (not .cse0)) (= v_main_~x~0_70 v_main_~x~0_71) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_33, main_~x~0=v_main_~x~0_71, main_#t~post6=|v_main_#t~post6_25|} OutVars{main_~y~0=v_main_~y~0_32, main_~x~0=v_main_~x~0_70, main_#t~post6=|v_main_#t~post6_23|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {999#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:16,485 INFO L290 TraceCheckUtils]: 9: Hoare triple {999#(<= main_~x~0 500000)} [69] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {999#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:16,486 INFO L290 TraceCheckUtils]: 10: Hoare triple {999#(<= main_~x~0 500000)} [70] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_73)) (.cse1 (= |v_main_#t~post6_28| |v_main_#t~post6_24|)) (.cse2 (= v_main_~x~0_73 v_main_~x~0_72)) (.cse3 (= v_main_~y~0_35 v_main_~y~0_34))) (or (and (< v_main_~x~0_72 750001) (= (+ v_main_~x~0_72 v_main_~y~0_35) (+ v_main_~x~0_73 v_main_~y~0_34)) .cse0 (< v_main_~x~0_73 v_main_~x~0_72)) (and .cse1 .cse2 (= |v_main_#t~post5_17| |v_main_#t~post5_16|) .cse3) (and (or (not (< v_main_~x~0_73 750000)) (not .cse0)) .cse1 .cse2 (= |v_main_#t~post5_16| |v_main_#t~post5_17|) .cse3))) InVars {main_~y~0=v_main_~y~0_35, main_#t~post5=|v_main_#t~post5_17|, main_~x~0=v_main_~x~0_73, main_#t~post6=|v_main_#t~post6_28|} OutVars{main_~y~0=v_main_~y~0_34, main_#t~post5=|v_main_#t~post5_16|, main_~x~0=v_main_~x~0_72, main_#t~post6=|v_main_#t~post6_24|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {1000#(<= main_~x~0 750000)} is VALID [2022-04-28 03:50:16,486 INFO L290 TraceCheckUtils]: 11: Hoare triple {1000#(<= main_~x~0 750000)} [65] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {994#false} is VALID [2022-04-28 03:50:16,486 INFO L272 TraceCheckUtils]: 12: Hoare triple {994#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {994#false} is VALID [2022-04-28 03:50:16,486 INFO L290 TraceCheckUtils]: 13: Hoare triple {994#false} ~cond := #in~cond; {994#false} is VALID [2022-04-28 03:50:16,486 INFO L290 TraceCheckUtils]: 14: Hoare triple {994#false} assume 0 == ~cond; {994#false} is VALID [2022-04-28 03:50:16,487 INFO L290 TraceCheckUtils]: 15: Hoare triple {994#false} assume !false; {994#false} is VALID [2022-04-28 03:50:16,487 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:16,487 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:50:16,488 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1182068228] [2022-04-28 03:50:16,488 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1182068228] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:50:16,488 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1079421741] [2022-04-28 03:50:16,488 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:16,488 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:16,488 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:50:16,489 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:50:16,511 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-04-28 03:50:16,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:16,529 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:50:16,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:16,542 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:50:16,753 INFO L272 TraceCheckUtils]: 0: Hoare triple {993#true} call ULTIMATE.init(); {993#true} is VALID [2022-04-28 03:50:16,754 INFO L290 TraceCheckUtils]: 1: Hoare triple {993#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {993#true} is VALID [2022-04-28 03:50:16,754 INFO L290 TraceCheckUtils]: 2: Hoare triple {993#true} assume true; {993#true} is VALID [2022-04-28 03:50:16,754 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {993#true} {993#true} #48#return; {993#true} is VALID [2022-04-28 03:50:16,754 INFO L272 TraceCheckUtils]: 4: Hoare triple {993#true} call #t~ret7 := main(); {993#true} is VALID [2022-04-28 03:50:16,755 INFO L290 TraceCheckUtils]: 5: Hoare triple {993#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {1020#(<= main_~x~0 0)} is VALID [2022-04-28 03:50:16,755 INFO L290 TraceCheckUtils]: 6: Hoare triple {1020#(<= main_~x~0 0)} [66] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_23| |v_main_#t~post4_22|)) (.cse1 (= v_main_~x~0_69 v_main_~x~0_68))) (or (and (< v_main_~x~0_68 500001) (< v_main_~x~0_69 v_main_~x~0_68)) (and .cse0 .cse1) (and .cse0 (<= 500000 v_main_~x~0_69) .cse1))) InVars {main_~x~0=v_main_~x~0_69, main_#t~post4=|v_main_#t~post4_23|} OutVars{main_~x~0=v_main_~x~0_68, main_#t~post4=|v_main_#t~post4_22|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {999#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:16,756 INFO L290 TraceCheckUtils]: 7: Hoare triple {999#(<= main_~x~0 500000)} [67] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {999#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:16,757 INFO L290 TraceCheckUtils]: 8: Hoare triple {999#(<= main_~x~0 500000)} [68] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_71)) (.cse1 (= |v_main_#t~post6_25| |v_main_#t~post6_23|)) (.cse2 (= v_main_~y~0_33 v_main_~y~0_32))) (or (and (< v_main_~y~0_33 v_main_~y~0_32) (= (+ (* v_main_~y~0_33 2) v_main_~x~0_70) (+ v_main_~x~0_71 (* v_main_~y~0_32 2))) (< v_main_~y~0_32 (+ v_main_~y~0_33 2 (div (+ (* (- 1) v_main_~x~0_71) 999999) 2))) .cse0) (and (= v_main_~x~0_71 v_main_~x~0_70) .cse1 .cse2) (and (or (not (< v_main_~x~0_71 1000000)) (not .cse0)) (= v_main_~x~0_70 v_main_~x~0_71) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_33, main_~x~0=v_main_~x~0_71, main_#t~post6=|v_main_#t~post6_25|} OutVars{main_~y~0=v_main_~y~0_32, main_~x~0=v_main_~x~0_70, main_#t~post6=|v_main_#t~post6_23|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {999#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:16,757 INFO L290 TraceCheckUtils]: 9: Hoare triple {999#(<= main_~x~0 500000)} [69] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {999#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:16,758 INFO L290 TraceCheckUtils]: 10: Hoare triple {999#(<= main_~x~0 500000)} [70] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_73)) (.cse1 (= |v_main_#t~post6_28| |v_main_#t~post6_24|)) (.cse2 (= v_main_~x~0_73 v_main_~x~0_72)) (.cse3 (= v_main_~y~0_35 v_main_~y~0_34))) (or (and (< v_main_~x~0_72 750001) (= (+ v_main_~x~0_72 v_main_~y~0_35) (+ v_main_~x~0_73 v_main_~y~0_34)) .cse0 (< v_main_~x~0_73 v_main_~x~0_72)) (and .cse1 .cse2 (= |v_main_#t~post5_17| |v_main_#t~post5_16|) .cse3) (and (or (not (< v_main_~x~0_73 750000)) (not .cse0)) .cse1 .cse2 (= |v_main_#t~post5_16| |v_main_#t~post5_17|) .cse3))) InVars {main_~y~0=v_main_~y~0_35, main_#t~post5=|v_main_#t~post5_17|, main_~x~0=v_main_~x~0_73, main_#t~post6=|v_main_#t~post6_28|} OutVars{main_~y~0=v_main_~y~0_34, main_#t~post5=|v_main_#t~post5_16|, main_~x~0=v_main_~x~0_72, main_#t~post6=|v_main_#t~post6_24|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {1000#(<= main_~x~0 750000)} is VALID [2022-04-28 03:50:16,758 INFO L290 TraceCheckUtils]: 11: Hoare triple {1000#(<= main_~x~0 750000)} [65] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {994#false} is VALID [2022-04-28 03:50:16,758 INFO L272 TraceCheckUtils]: 12: Hoare triple {994#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {994#false} is VALID [2022-04-28 03:50:16,758 INFO L290 TraceCheckUtils]: 13: Hoare triple {994#false} ~cond := #in~cond; {994#false} is VALID [2022-04-28 03:50:16,759 INFO L290 TraceCheckUtils]: 14: Hoare triple {994#false} assume 0 == ~cond; {994#false} is VALID [2022-04-28 03:50:16,759 INFO L290 TraceCheckUtils]: 15: Hoare triple {994#false} assume !false; {994#false} is VALID [2022-04-28 03:50:16,759 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:16,759 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:50:17,322 INFO L290 TraceCheckUtils]: 15: Hoare triple {994#false} assume !false; {994#false} is VALID [2022-04-28 03:50:17,323 INFO L290 TraceCheckUtils]: 14: Hoare triple {1054#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {994#false} is VALID [2022-04-28 03:50:17,324 INFO L290 TraceCheckUtils]: 13: Hoare triple {1058#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {1054#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:50:17,325 INFO L272 TraceCheckUtils]: 12: Hoare triple {1062#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {1058#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:50:17,326 INFO L290 TraceCheckUtils]: 11: Hoare triple {1066#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [65] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {1062#(= main_~x~0 1000000)} is VALID [2022-04-28 03:50:17,327 INFO L290 TraceCheckUtils]: 10: Hoare triple {1066#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [70] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_73)) (.cse1 (= |v_main_#t~post6_28| |v_main_#t~post6_24|)) (.cse2 (= v_main_~x~0_73 v_main_~x~0_72)) (.cse3 (= v_main_~y~0_35 v_main_~y~0_34))) (or (and (< v_main_~x~0_72 750001) (= (+ v_main_~x~0_72 v_main_~y~0_35) (+ v_main_~x~0_73 v_main_~y~0_34)) .cse0 (< v_main_~x~0_73 v_main_~x~0_72)) (and .cse1 .cse2 (= |v_main_#t~post5_17| |v_main_#t~post5_16|) .cse3) (and (or (not (< v_main_~x~0_73 750000)) (not .cse0)) .cse1 .cse2 (= |v_main_#t~post5_16| |v_main_#t~post5_17|) .cse3))) InVars {main_~y~0=v_main_~y~0_35, main_#t~post5=|v_main_#t~post5_17|, main_~x~0=v_main_~x~0_73, main_#t~post6=|v_main_#t~post6_28|} OutVars{main_~y~0=v_main_~y~0_34, main_#t~post5=|v_main_#t~post5_16|, main_~x~0=v_main_~x~0_72, main_#t~post6=|v_main_#t~post6_24|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {1066#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:17,327 INFO L290 TraceCheckUtils]: 9: Hoare triple {1066#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [69] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {1066#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:17,328 INFO L290 TraceCheckUtils]: 8: Hoare triple {1076#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [68] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_71)) (.cse1 (= |v_main_#t~post6_25| |v_main_#t~post6_23|)) (.cse2 (= v_main_~y~0_33 v_main_~y~0_32))) (or (and (< v_main_~y~0_33 v_main_~y~0_32) (= (+ (* v_main_~y~0_33 2) v_main_~x~0_70) (+ v_main_~x~0_71 (* v_main_~y~0_32 2))) (< v_main_~y~0_32 (+ v_main_~y~0_33 2 (div (+ (* (- 1) v_main_~x~0_71) 999999) 2))) .cse0) (and (= v_main_~x~0_71 v_main_~x~0_70) .cse1 .cse2) (and (or (not (< v_main_~x~0_71 1000000)) (not .cse0)) (= v_main_~x~0_70 v_main_~x~0_71) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_33, main_~x~0=v_main_~x~0_71, main_#t~post6=|v_main_#t~post6_25|} OutVars{main_~y~0=v_main_~y~0_32, main_~x~0=v_main_~x~0_70, main_#t~post6=|v_main_#t~post6_23|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {1066#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:17,329 INFO L290 TraceCheckUtils]: 7: Hoare triple {1076#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [67] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {1076#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:50:17,331 INFO L290 TraceCheckUtils]: 6: Hoare triple {1076#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [66] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_23| |v_main_#t~post4_22|)) (.cse1 (= v_main_~x~0_69 v_main_~x~0_68))) (or (and (< v_main_~x~0_68 500001) (< v_main_~x~0_69 v_main_~x~0_68)) (and .cse0 .cse1) (and .cse0 (<= 500000 v_main_~x~0_69) .cse1))) InVars {main_~x~0=v_main_~x~0_69, main_#t~post4=|v_main_#t~post4_23|} OutVars{main_~x~0=v_main_~x~0_68, main_#t~post4=|v_main_#t~post4_22|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {1076#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:50:17,331 INFO L290 TraceCheckUtils]: 5: Hoare triple {993#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {1076#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:50:17,331 INFO L272 TraceCheckUtils]: 4: Hoare triple {993#true} call #t~ret7 := main(); {993#true} is VALID [2022-04-28 03:50:17,331 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {993#true} {993#true} #48#return; {993#true} is VALID [2022-04-28 03:50:17,332 INFO L290 TraceCheckUtils]: 2: Hoare triple {993#true} assume true; {993#true} is VALID [2022-04-28 03:50:17,332 INFO L290 TraceCheckUtils]: 1: Hoare triple {993#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {993#true} is VALID [2022-04-28 03:50:17,332 INFO L272 TraceCheckUtils]: 0: Hoare triple {993#true} call ULTIMATE.init(); {993#true} is VALID [2022-04-28 03:50:17,332 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:17,332 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1079421741] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:50:17,332 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:50:17,332 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:50:17,539 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:50:17,539 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1615264068] [2022-04-28 03:50:17,539 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1615264068] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:50:17,539 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:50:17,539 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-04-28 03:50:17,540 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [671982695] [2022-04-28 03:50:17,540 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:50:17,540 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 8 states have internal predecessors, (25), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2022-04-28 03:50:17,540 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:50:17,540 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 8 states have internal predecessors, (25), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:17,563 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 29 edges. 29 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:17,564 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-04-28 03:50:17,564 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:17,564 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-04-28 03:50:17,564 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=231, Unknown=0, NotChecked=0, Total=306 [2022-04-28 03:50:17,565 INFO L87 Difference]: Start difference. First operand 32 states and 36 transitions. Second operand has 9 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 8 states have internal predecessors, (25), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:17,950 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:17,950 INFO L93 Difference]: Finished difference Result 59 states and 68 transitions. [2022-04-28 03:50:17,951 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-04-28 03:50:17,951 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 8 states have internal predecessors, (25), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2022-04-28 03:50:17,951 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:50:17,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 8 states have internal predecessors, (25), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:17,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 48 transitions. [2022-04-28 03:50:17,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 8 states have internal predecessors, (25), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:17,954 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 48 transitions. [2022-04-28 03:50:17,954 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 9 states and 48 transitions. [2022-04-28 03:50:18,002 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 48 edges. 48 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:18,004 INFO L225 Difference]: With dead ends: 59 [2022-04-28 03:50:18,004 INFO L226 Difference]: Without dead ends: 41 [2022-04-28 03:50:18,004 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 43 SyntacticMatches, 3 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 115 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=126, Invalid=426, Unknown=0, NotChecked=0, Total=552 [2022-04-28 03:50:18,005 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 24 mSDsluCounter, 27 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-04-28 03:50:18,005 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 42 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-04-28 03:50:18,006 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41 states. [2022-04-28 03:50:18,052 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41 to 36. [2022-04-28 03:50:18,053 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:50:18,053 INFO L82 GeneralOperation]: Start isEquivalent. First operand 41 states. Second operand has 36 states, 31 states have (on average 1.1612903225806452) internal successors, (36), 31 states have internal predecessors, (36), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:18,053 INFO L74 IsIncluded]: Start isIncluded. First operand 41 states. Second operand has 36 states, 31 states have (on average 1.1612903225806452) internal successors, (36), 31 states have internal predecessors, (36), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:18,053 INFO L87 Difference]: Start difference. First operand 41 states. Second operand has 36 states, 31 states have (on average 1.1612903225806452) internal successors, (36), 31 states have internal predecessors, (36), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:18,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:18,054 INFO L93 Difference]: Finished difference Result 41 states and 45 transitions. [2022-04-28 03:50:18,054 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 45 transitions. [2022-04-28 03:50:18,055 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:18,055 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:18,055 INFO L74 IsIncluded]: Start isIncluded. First operand has 36 states, 31 states have (on average 1.1612903225806452) internal successors, (36), 31 states have internal predecessors, (36), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 41 states. [2022-04-28 03:50:18,055 INFO L87 Difference]: Start difference. First operand has 36 states, 31 states have (on average 1.1612903225806452) internal successors, (36), 31 states have internal predecessors, (36), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 41 states. [2022-04-28 03:50:18,056 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:18,056 INFO L93 Difference]: Finished difference Result 41 states and 45 transitions. [2022-04-28 03:50:18,057 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 45 transitions. [2022-04-28 03:50:18,057 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:18,057 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:18,057 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:50:18,057 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:50:18,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 31 states have (on average 1.1612903225806452) internal successors, (36), 31 states have internal predecessors, (36), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:18,058 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 40 transitions. [2022-04-28 03:50:18,058 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 40 transitions. Word has length 29 [2022-04-28 03:50:18,058 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:50:18,059 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 40 transitions. [2022-04-28 03:50:18,059 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 2.7777777777777777) internal successors, (25), 8 states have internal predecessors, (25), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:18,059 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 36 states and 40 transitions. [2022-04-28 03:50:18,107 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 40 edges. 40 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:18,107 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 40 transitions. [2022-04-28 03:50:18,108 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-04-28 03:50:18,108 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:50:18,108 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:50:18,133 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-04-28 03:50:18,315 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:18,316 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:50:18,316 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:50:18,316 INFO L85 PathProgramCache]: Analyzing trace with hash 1728455420, now seen corresponding path program 3 times [2022-04-28 03:50:18,316 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:18,316 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1199306277] [2022-04-28 03:50:18,448 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:22,118 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:50:22,256 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:22,525 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:22,527 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:50:22,538 INFO L85 PathProgramCache]: Analyzing trace with hash 1610279271, now seen corresponding path program 1 times [2022-04-28 03:50:22,538 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:50:22,538 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [133501722] [2022-04-28 03:50:22,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:22,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:50:22,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:22,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:50:22,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:22,635 INFO L290 TraceCheckUtils]: 0: Hoare triple {1404#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {1393#true} is VALID [2022-04-28 03:50:22,635 INFO L290 TraceCheckUtils]: 1: Hoare triple {1393#true} assume true; {1393#true} is VALID [2022-04-28 03:50:22,635 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1393#true} {1393#true} #48#return; {1393#true} is VALID [2022-04-28 03:50:22,635 INFO L272 TraceCheckUtils]: 0: Hoare triple {1393#true} call ULTIMATE.init(); {1404#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:50:22,636 INFO L290 TraceCheckUtils]: 1: Hoare triple {1404#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {1393#true} is VALID [2022-04-28 03:50:22,636 INFO L290 TraceCheckUtils]: 2: Hoare triple {1393#true} assume true; {1393#true} is VALID [2022-04-28 03:50:22,636 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {1393#true} {1393#true} #48#return; {1393#true} is VALID [2022-04-28 03:50:22,636 INFO L272 TraceCheckUtils]: 4: Hoare triple {1393#true} call #t~ret7 := main(); {1393#true} is VALID [2022-04-28 03:50:22,639 INFO L290 TraceCheckUtils]: 5: Hoare triple {1393#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {1398#(= main_~x~0 0)} is VALID [2022-04-28 03:50:22,640 INFO L290 TraceCheckUtils]: 6: Hoare triple {1398#(= main_~x~0 0)} [72] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_98 v_main_~x~0_97))) (or (and .cse0 (= |v_main_#t~post4_30| |v_main_#t~post4_29|)) (and (< v_main_~x~0_98 v_main_~x~0_97) (< v_main_~x~0_97 500001)) (and .cse0 (= |v_main_#t~post4_29| |v_main_#t~post4_30|) (not (< v_main_~x~0_98 500000))))) InVars {main_~x~0=v_main_~x~0_98, main_#t~post4=|v_main_#t~post4_30|} OutVars{main_~x~0=v_main_~x~0_97, main_#t~post4=|v_main_#t~post4_29|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {1399#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:22,641 INFO L290 TraceCheckUtils]: 7: Hoare triple {1399#(<= main_~x~0 500000)} [73] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {1399#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:22,642 INFO L290 TraceCheckUtils]: 8: Hoare triple {1399#(<= main_~x~0 500000)} [74] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_100)) (.cse1 (= |v_main_#t~post6_38| |v_main_#t~post6_36|)) (.cse2 (= v_main_~y~0_52 v_main_~y~0_51)) (.cse3 (= v_main_~x~0_100 v_main_~x~0_99))) (or (and (or (not .cse0) (not (< v_main_~x~0_100 1000000))) .cse1 .cse2 .cse3) (and .cse0 (< v_main_~y~0_51 (+ v_main_~y~0_52 2 (div (+ 999999 (* v_main_~x~0_100 (- 1))) 2))) (= (+ v_main_~x~0_100 (* v_main_~y~0_51 2)) (+ v_main_~x~0_99 (* v_main_~y~0_52 2))) (< v_main_~y~0_52 v_main_~y~0_51)) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_52, main_~x~0=v_main_~x~0_100, main_#t~post6=|v_main_#t~post6_38|} OutVars{main_~y~0=v_main_~y~0_51, main_~x~0=v_main_~x~0_99, main_#t~post6=|v_main_#t~post6_36|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {1400#(<= main_~x~0 1000000)} is VALID [2022-04-28 03:50:22,642 INFO L290 TraceCheckUtils]: 9: Hoare triple {1400#(<= main_~x~0 1000000)} [75] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {1400#(<= main_~x~0 1000000)} is VALID [2022-04-28 03:50:22,643 INFO L290 TraceCheckUtils]: 10: Hoare triple {1400#(<= main_~x~0 1000000)} [76] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_54 v_main_~y~0_53)) (.cse1 (= |v_main_#t~post5_23| |v_main_#t~post5_22|)) (.cse2 (= v_main_~x~0_102 v_main_~x~0_101)) (.cse4 (<= 500000 v_main_~x~0_102)) (.cse3 (= |v_main_#t~post6_41| |v_main_#t~post6_37|))) (or (and .cse0 .cse1 .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_102 v_main_~y~0_53))) (and .cse4 (= (+ v_main_~x~0_101 v_main_~y~0_54) .cse5) (< v_main_~y~0_54 v_main_~y~0_53) (< .cse5 (+ 750001 v_main_~y~0_54)))) (and .cse0 .cse1 .cse2 (or (not .cse4) (not (< v_main_~x~0_102 750000))) .cse3))) InVars {main_~y~0=v_main_~y~0_54, main_#t~post5=|v_main_#t~post5_23|, main_~x~0=v_main_~x~0_102, main_#t~post6=|v_main_#t~post6_41|} OutVars{main_~y~0=v_main_~y~0_53, main_#t~post5=|v_main_#t~post5_22|, main_~x~0=v_main_~x~0_101, main_#t~post6=|v_main_#t~post6_37|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {1400#(<= main_~x~0 1000000)} is VALID [2022-04-28 03:50:22,643 INFO L290 TraceCheckUtils]: 11: Hoare triple {1400#(<= main_~x~0 1000000)} [71] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {1401#(and (<= main_~x~0 1000000) (< 999999 main_~x~0))} is VALID [2022-04-28 03:50:22,644 INFO L272 TraceCheckUtils]: 12: Hoare triple {1401#(and (<= main_~x~0 1000000) (< 999999 main_~x~0))} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {1402#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2022-04-28 03:50:22,644 INFO L290 TraceCheckUtils]: 13: Hoare triple {1402#(not (= |__VERIFIER_assert_#in~cond| 0))} ~cond := #in~cond; {1403#(not (= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:50:22,645 INFO L290 TraceCheckUtils]: 14: Hoare triple {1403#(not (= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {1394#false} is VALID [2022-04-28 03:50:22,645 INFO L290 TraceCheckUtils]: 15: Hoare triple {1394#false} assume !false; {1394#false} is VALID [2022-04-28 03:50:22,645 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:50:22,645 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:50:22,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [133501722] [2022-04-28 03:50:22,645 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [133501722] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:50:22,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1224033110] [2022-04-28 03:50:22,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:22,646 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:22,646 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:50:22,647 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:50:22,673 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-04-28 03:50:22,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:22,687 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:50:22,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:22,701 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:50:22,926 INFO L272 TraceCheckUtils]: 0: Hoare triple {1393#true} call ULTIMATE.init(); {1393#true} is VALID [2022-04-28 03:50:22,926 INFO L290 TraceCheckUtils]: 1: Hoare triple {1393#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {1393#true} is VALID [2022-04-28 03:50:22,927 INFO L290 TraceCheckUtils]: 2: Hoare triple {1393#true} assume true; {1393#true} is VALID [2022-04-28 03:50:22,927 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {1393#true} {1393#true} #48#return; {1393#true} is VALID [2022-04-28 03:50:22,927 INFO L272 TraceCheckUtils]: 4: Hoare triple {1393#true} call #t~ret7 := main(); {1393#true} is VALID [2022-04-28 03:50:22,927 INFO L290 TraceCheckUtils]: 5: Hoare triple {1393#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {1423#(<= main_~x~0 0)} is VALID [2022-04-28 03:50:22,928 INFO L290 TraceCheckUtils]: 6: Hoare triple {1423#(<= main_~x~0 0)} [72] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_98 v_main_~x~0_97))) (or (and .cse0 (= |v_main_#t~post4_30| |v_main_#t~post4_29|)) (and (< v_main_~x~0_98 v_main_~x~0_97) (< v_main_~x~0_97 500001)) (and .cse0 (= |v_main_#t~post4_29| |v_main_#t~post4_30|) (not (< v_main_~x~0_98 500000))))) InVars {main_~x~0=v_main_~x~0_98, main_#t~post4=|v_main_#t~post4_30|} OutVars{main_~x~0=v_main_~x~0_97, main_#t~post4=|v_main_#t~post4_29|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {1399#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:22,929 INFO L290 TraceCheckUtils]: 7: Hoare triple {1399#(<= main_~x~0 500000)} [73] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {1399#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:22,930 INFO L290 TraceCheckUtils]: 8: Hoare triple {1399#(<= main_~x~0 500000)} [74] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_100)) (.cse1 (= |v_main_#t~post6_38| |v_main_#t~post6_36|)) (.cse2 (= v_main_~y~0_52 v_main_~y~0_51)) (.cse3 (= v_main_~x~0_100 v_main_~x~0_99))) (or (and (or (not .cse0) (not (< v_main_~x~0_100 1000000))) .cse1 .cse2 .cse3) (and .cse0 (< v_main_~y~0_51 (+ v_main_~y~0_52 2 (div (+ 999999 (* v_main_~x~0_100 (- 1))) 2))) (= (+ v_main_~x~0_100 (* v_main_~y~0_51 2)) (+ v_main_~x~0_99 (* v_main_~y~0_52 2))) (< v_main_~y~0_52 v_main_~y~0_51)) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_52, main_~x~0=v_main_~x~0_100, main_#t~post6=|v_main_#t~post6_38|} OutVars{main_~y~0=v_main_~y~0_51, main_~x~0=v_main_~x~0_99, main_#t~post6=|v_main_#t~post6_36|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {1399#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:22,930 INFO L290 TraceCheckUtils]: 9: Hoare triple {1399#(<= main_~x~0 500000)} [75] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {1399#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:22,931 INFO L290 TraceCheckUtils]: 10: Hoare triple {1399#(<= main_~x~0 500000)} [76] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_54 v_main_~y~0_53)) (.cse1 (= |v_main_#t~post5_23| |v_main_#t~post5_22|)) (.cse2 (= v_main_~x~0_102 v_main_~x~0_101)) (.cse4 (<= 500000 v_main_~x~0_102)) (.cse3 (= |v_main_#t~post6_41| |v_main_#t~post6_37|))) (or (and .cse0 .cse1 .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_102 v_main_~y~0_53))) (and .cse4 (= (+ v_main_~x~0_101 v_main_~y~0_54) .cse5) (< v_main_~y~0_54 v_main_~y~0_53) (< .cse5 (+ 750001 v_main_~y~0_54)))) (and .cse0 .cse1 .cse2 (or (not .cse4) (not (< v_main_~x~0_102 750000))) .cse3))) InVars {main_~y~0=v_main_~y~0_54, main_#t~post5=|v_main_#t~post5_23|, main_~x~0=v_main_~x~0_102, main_#t~post6=|v_main_#t~post6_41|} OutVars{main_~y~0=v_main_~y~0_53, main_#t~post5=|v_main_#t~post5_22|, main_~x~0=v_main_~x~0_101, main_#t~post6=|v_main_#t~post6_37|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {1439#(< main_~x~0 750001)} is VALID [2022-04-28 03:50:22,932 INFO L290 TraceCheckUtils]: 11: Hoare triple {1439#(< main_~x~0 750001)} [71] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {1394#false} is VALID [2022-04-28 03:50:22,932 INFO L272 TraceCheckUtils]: 12: Hoare triple {1394#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {1394#false} is VALID [2022-04-28 03:50:22,932 INFO L290 TraceCheckUtils]: 13: Hoare triple {1394#false} ~cond := #in~cond; {1394#false} is VALID [2022-04-28 03:50:22,932 INFO L290 TraceCheckUtils]: 14: Hoare triple {1394#false} assume 0 == ~cond; {1394#false} is VALID [2022-04-28 03:50:22,932 INFO L290 TraceCheckUtils]: 15: Hoare triple {1394#false} assume !false; {1394#false} is VALID [2022-04-28 03:50:22,932 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:22,932 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:50:23,460 INFO L290 TraceCheckUtils]: 15: Hoare triple {1394#false} assume !false; {1394#false} is VALID [2022-04-28 03:50:23,461 INFO L290 TraceCheckUtils]: 14: Hoare triple {1458#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {1394#false} is VALID [2022-04-28 03:50:23,461 INFO L290 TraceCheckUtils]: 13: Hoare triple {1462#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {1458#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:50:23,462 INFO L272 TraceCheckUtils]: 12: Hoare triple {1401#(and (<= main_~x~0 1000000) (< 999999 main_~x~0))} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {1462#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:50:23,463 INFO L290 TraceCheckUtils]: 11: Hoare triple {1400#(<= main_~x~0 1000000)} [71] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {1401#(and (<= main_~x~0 1000000) (< 999999 main_~x~0))} is VALID [2022-04-28 03:50:23,464 INFO L290 TraceCheckUtils]: 10: Hoare triple {1400#(<= main_~x~0 1000000)} [76] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_54 v_main_~y~0_53)) (.cse1 (= |v_main_#t~post5_23| |v_main_#t~post5_22|)) (.cse2 (= v_main_~x~0_102 v_main_~x~0_101)) (.cse4 (<= 500000 v_main_~x~0_102)) (.cse3 (= |v_main_#t~post6_41| |v_main_#t~post6_37|))) (or (and .cse0 .cse1 .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_102 v_main_~y~0_53))) (and .cse4 (= (+ v_main_~x~0_101 v_main_~y~0_54) .cse5) (< v_main_~y~0_54 v_main_~y~0_53) (< .cse5 (+ 750001 v_main_~y~0_54)))) (and .cse0 .cse1 .cse2 (or (not .cse4) (not (< v_main_~x~0_102 750000))) .cse3))) InVars {main_~y~0=v_main_~y~0_54, main_#t~post5=|v_main_#t~post5_23|, main_~x~0=v_main_~x~0_102, main_#t~post6=|v_main_#t~post6_41|} OutVars{main_~y~0=v_main_~y~0_53, main_#t~post5=|v_main_#t~post5_22|, main_~x~0=v_main_~x~0_101, main_#t~post6=|v_main_#t~post6_37|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {1400#(<= main_~x~0 1000000)} is VALID [2022-04-28 03:50:23,465 INFO L290 TraceCheckUtils]: 9: Hoare triple {1400#(<= main_~x~0 1000000)} [75] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {1400#(<= main_~x~0 1000000)} is VALID [2022-04-28 03:50:23,466 INFO L290 TraceCheckUtils]: 8: Hoare triple {1478#(and (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))) (<= main_~x~0 1000000))} [74] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_100)) (.cse1 (= |v_main_#t~post6_38| |v_main_#t~post6_36|)) (.cse2 (= v_main_~y~0_52 v_main_~y~0_51)) (.cse3 (= v_main_~x~0_100 v_main_~x~0_99))) (or (and (or (not .cse0) (not (< v_main_~x~0_100 1000000))) .cse1 .cse2 .cse3) (and .cse0 (< v_main_~y~0_51 (+ v_main_~y~0_52 2 (div (+ 999999 (* v_main_~x~0_100 (- 1))) 2))) (= (+ v_main_~x~0_100 (* v_main_~y~0_51 2)) (+ v_main_~x~0_99 (* v_main_~y~0_52 2))) (< v_main_~y~0_52 v_main_~y~0_51)) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_52, main_~x~0=v_main_~x~0_100, main_#t~post6=|v_main_#t~post6_38|} OutVars{main_~y~0=v_main_~y~0_51, main_~x~0=v_main_~x~0_99, main_#t~post6=|v_main_#t~post6_36|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {1400#(<= main_~x~0 1000000)} is VALID [2022-04-28 03:50:23,466 INFO L290 TraceCheckUtils]: 7: Hoare triple {1478#(and (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))) (<= main_~x~0 1000000))} [73] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {1478#(and (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))) (<= main_~x~0 1000000))} is VALID [2022-04-28 03:50:23,468 INFO L290 TraceCheckUtils]: 6: Hoare triple {1478#(and (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))) (<= main_~x~0 1000000))} [72] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_98 v_main_~x~0_97))) (or (and .cse0 (= |v_main_#t~post4_30| |v_main_#t~post4_29|)) (and (< v_main_~x~0_98 v_main_~x~0_97) (< v_main_~x~0_97 500001)) (and .cse0 (= |v_main_#t~post4_29| |v_main_#t~post4_30|) (not (< v_main_~x~0_98 500000))))) InVars {main_~x~0=v_main_~x~0_98, main_#t~post4=|v_main_#t~post4_30|} OutVars{main_~x~0=v_main_~x~0_97, main_#t~post4=|v_main_#t~post4_29|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {1478#(and (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))) (<= main_~x~0 1000000))} is VALID [2022-04-28 03:50:23,468 INFO L290 TraceCheckUtils]: 5: Hoare triple {1393#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {1478#(and (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))) (<= main_~x~0 1000000))} is VALID [2022-04-28 03:50:23,469 INFO L272 TraceCheckUtils]: 4: Hoare triple {1393#true} call #t~ret7 := main(); {1393#true} is VALID [2022-04-28 03:50:23,469 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {1393#true} {1393#true} #48#return; {1393#true} is VALID [2022-04-28 03:50:23,469 INFO L290 TraceCheckUtils]: 2: Hoare triple {1393#true} assume true; {1393#true} is VALID [2022-04-28 03:50:23,469 INFO L290 TraceCheckUtils]: 1: Hoare triple {1393#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {1393#true} is VALID [2022-04-28 03:50:23,469 INFO L272 TraceCheckUtils]: 0: Hoare triple {1393#true} call ULTIMATE.init(); {1393#true} is VALID [2022-04-28 03:50:23,469 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:23,469 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1224033110] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:50:23,469 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:50:23,469 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 7] total 14 [2022-04-28 03:50:23,743 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:50:23,744 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1199306277] [2022-04-28 03:50:23,744 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1199306277] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:50:23,744 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:50:23,744 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-28 03:50:23,744 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349359688] [2022-04-28 03:50:23,744 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:50:23,744 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 2.4166666666666665) internal successors, (29), 11 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 33 [2022-04-28 03:50:23,744 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:50:23,745 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 13 states, 12 states have (on average 2.4166666666666665) internal successors, (29), 11 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:23,769 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:23,770 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-04-28 03:50:23,770 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:23,770 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-04-28 03:50:23,770 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=86, Invalid=334, Unknown=0, NotChecked=0, Total=420 [2022-04-28 03:50:23,771 INFO L87 Difference]: Start difference. First operand 36 states and 40 transitions. Second operand has 13 states, 12 states have (on average 2.4166666666666665) internal successors, (29), 11 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:24,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:24,379 INFO L93 Difference]: Finished difference Result 63 states and 72 transitions. [2022-04-28 03:50:24,379 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-04-28 03:50:24,379 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 2.4166666666666665) internal successors, (29), 11 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 33 [2022-04-28 03:50:24,379 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:50:24,379 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 12 states have (on average 2.4166666666666665) internal successors, (29), 11 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:24,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 52 transitions. [2022-04-28 03:50:24,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 12 states have (on average 2.4166666666666665) internal successors, (29), 11 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:24,382 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 52 transitions. [2022-04-28 03:50:24,382 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 10 states and 52 transitions. [2022-04-28 03:50:24,433 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 52 edges. 52 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:24,435 INFO L225 Difference]: With dead ends: 63 [2022-04-28 03:50:24,435 INFO L226 Difference]: Without dead ends: 45 [2022-04-28 03:50:24,435 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 44 SyntacticMatches, 3 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 180 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=144, Invalid=612, Unknown=0, NotChecked=0, Total=756 [2022-04-28 03:50:24,436 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 26 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 259 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 63 SdHoareTripleChecker+Invalid, 269 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 259 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-04-28 03:50:24,436 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 63 Invalid, 269 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 259 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-04-28 03:50:24,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2022-04-28 03:50:24,500 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 40. [2022-04-28 03:50:24,500 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:50:24,500 INFO L82 GeneralOperation]: Start isEquivalent. First operand 45 states. Second operand has 40 states, 35 states have (on average 1.1428571428571428) internal successors, (40), 35 states have internal predecessors, (40), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:24,501 INFO L74 IsIncluded]: Start isIncluded. First operand 45 states. Second operand has 40 states, 35 states have (on average 1.1428571428571428) internal successors, (40), 35 states have internal predecessors, (40), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:24,501 INFO L87 Difference]: Start difference. First operand 45 states. Second operand has 40 states, 35 states have (on average 1.1428571428571428) internal successors, (40), 35 states have internal predecessors, (40), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:24,502 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:24,502 INFO L93 Difference]: Finished difference Result 45 states and 49 transitions. [2022-04-28 03:50:24,502 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 49 transitions. [2022-04-28 03:50:24,503 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:24,503 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:24,503 INFO L74 IsIncluded]: Start isIncluded. First operand has 40 states, 35 states have (on average 1.1428571428571428) internal successors, (40), 35 states have internal predecessors, (40), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 45 states. [2022-04-28 03:50:24,503 INFO L87 Difference]: Start difference. First operand has 40 states, 35 states have (on average 1.1428571428571428) internal successors, (40), 35 states have internal predecessors, (40), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 45 states. [2022-04-28 03:50:24,504 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:24,504 INFO L93 Difference]: Finished difference Result 45 states and 49 transitions. [2022-04-28 03:50:24,505 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 49 transitions. [2022-04-28 03:50:24,505 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:24,505 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:24,505 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:50:24,505 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:50:24,505 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40 states, 35 states have (on average 1.1428571428571428) internal successors, (40), 35 states have internal predecessors, (40), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:24,506 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 44 transitions. [2022-04-28 03:50:24,506 INFO L78 Accepts]: Start accepts. Automaton has 40 states and 44 transitions. Word has length 33 [2022-04-28 03:50:24,506 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:50:24,507 INFO L495 AbstractCegarLoop]: Abstraction has 40 states and 44 transitions. [2022-04-28 03:50:24,507 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 2.4166666666666665) internal successors, (29), 11 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:24,507 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 40 states and 44 transitions. [2022-04-28 03:50:24,550 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 44 edges. 44 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:24,551 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 44 transitions. [2022-04-28 03:50:24,551 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-04-28 03:50:24,551 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:50:24,551 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:50:24,568 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-04-28 03:50:24,755 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:24,755 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:50:24,756 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:50:24,756 INFO L85 PathProgramCache]: Analyzing trace with hash 238558291, now seen corresponding path program 4 times [2022-04-28 03:50:24,756 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:24,756 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1936417207] [2022-04-28 03:50:24,868 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:25,138 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:25,351 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:25,352 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:50:25,355 INFO L85 PathProgramCache]: Analyzing trace with hash 1250704295, now seen corresponding path program 1 times [2022-04-28 03:50:25,355 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:50:25,355 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [229745010] [2022-04-28 03:50:25,355 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:25,355 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:50:25,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:25,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:50:25,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:25,453 INFO L290 TraceCheckUtils]: 0: Hoare triple {1830#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {1822#true} is VALID [2022-04-28 03:50:25,453 INFO L290 TraceCheckUtils]: 1: Hoare triple {1822#true} assume true; {1822#true} is VALID [2022-04-28 03:50:25,453 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1822#true} {1822#true} #48#return; {1822#true} is VALID [2022-04-28 03:50:25,454 INFO L272 TraceCheckUtils]: 0: Hoare triple {1822#true} call ULTIMATE.init(); {1830#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:50:25,454 INFO L290 TraceCheckUtils]: 1: Hoare triple {1830#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {1822#true} is VALID [2022-04-28 03:50:25,454 INFO L290 TraceCheckUtils]: 2: Hoare triple {1822#true} assume true; {1822#true} is VALID [2022-04-28 03:50:25,454 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {1822#true} {1822#true} #48#return; {1822#true} is VALID [2022-04-28 03:50:25,454 INFO L272 TraceCheckUtils]: 4: Hoare triple {1822#true} call #t~ret7 := main(); {1822#true} is VALID [2022-04-28 03:50:25,455 INFO L290 TraceCheckUtils]: 5: Hoare triple {1822#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {1827#(= main_~x~0 0)} is VALID [2022-04-28 03:50:25,455 INFO L290 TraceCheckUtils]: 6: Hoare triple {1827#(= main_~x~0 0)} [78] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_128 v_main_~x~0_127)) (.cse1 (= |v_main_#t~post4_37| |v_main_#t~post4_36|))) (or (and .cse0 .cse1 (not (< v_main_~x~0_128 500000))) (and (< v_main_~x~0_127 500001) (< v_main_~x~0_128 v_main_~x~0_127)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_128, main_#t~post4=|v_main_#t~post4_37|} OutVars{main_~x~0=v_main_~x~0_127, main_#t~post4=|v_main_#t~post4_36|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {1828#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:25,456 INFO L290 TraceCheckUtils]: 7: Hoare triple {1828#(<= main_~x~0 500000)} [79] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {1828#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:25,457 INFO L290 TraceCheckUtils]: 8: Hoare triple {1828#(<= main_~x~0 500000)} [80] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_130))) (or (and .cse0 (= (+ v_main_~x~0_129 (* v_main_~y~0_72 2)) (+ v_main_~x~0_130 (* v_main_~y~0_71 2))) (< v_main_~y~0_71 (+ v_main_~y~0_72 (div (+ 999999 (* v_main_~x~0_130 (- 1))) 2) 2)) (< v_main_~y~0_72 v_main_~y~0_71)) (and (= |v_main_#t~post6_51| |v_main_#t~post6_49|) (= v_main_~x~0_130 v_main_~x~0_129) (= v_main_~y~0_72 v_main_~y~0_71)) (and (= v_main_~x~0_129 v_main_~x~0_130) (= v_main_~y~0_71 v_main_~y~0_72) (or (not .cse0) (not (< v_main_~x~0_130 1000000))) (= |v_main_#t~post6_49| |v_main_#t~post6_51|)))) InVars {main_~y~0=v_main_~y~0_72, main_~x~0=v_main_~x~0_130, main_#t~post6=|v_main_#t~post6_51|} OutVars{main_~y~0=v_main_~y~0_71, main_~x~0=v_main_~x~0_129, main_#t~post6=|v_main_#t~post6_49|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {1829#(<= main_~x~0 999999)} is VALID [2022-04-28 03:50:25,457 INFO L290 TraceCheckUtils]: 9: Hoare triple {1829#(<= main_~x~0 999999)} [81] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {1829#(<= main_~x~0 999999)} is VALID [2022-04-28 03:50:25,458 INFO L290 TraceCheckUtils]: 10: Hoare triple {1829#(<= main_~x~0 999999)} [82] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_132)) (.cse1 (= |v_main_#t~post6_54| |v_main_#t~post6_50|)) (.cse2 (= v_main_~y~0_74 v_main_~y~0_73)) (.cse3 (= v_main_~x~0_132 v_main_~x~0_131)) (.cse4 (= |v_main_#t~post5_29| |v_main_#t~post5_28|))) (or (and .cse0 (< v_main_~x~0_131 750001) (= (+ v_main_~x~0_132 v_main_~y~0_73) (+ v_main_~x~0_131 v_main_~y~0_74)) (< v_main_~x~0_132 v_main_~x~0_131)) (and .cse1 .cse2 .cse3 .cse4) (and (or (not (< v_main_~x~0_132 750000)) (not .cse0)) .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_74, main_#t~post5=|v_main_#t~post5_29|, main_~x~0=v_main_~x~0_132, main_#t~post6=|v_main_#t~post6_54|} OutVars{main_~y~0=v_main_~y~0_73, main_#t~post5=|v_main_#t~post5_28|, main_~x~0=v_main_~x~0_131, main_#t~post6=|v_main_#t~post6_50|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {1829#(<= main_~x~0 999999)} is VALID [2022-04-28 03:50:25,458 INFO L290 TraceCheckUtils]: 11: Hoare triple {1829#(<= main_~x~0 999999)} [77] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {1823#false} is VALID [2022-04-28 03:50:25,458 INFO L272 TraceCheckUtils]: 12: Hoare triple {1823#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {1823#false} is VALID [2022-04-28 03:50:25,459 INFO L290 TraceCheckUtils]: 13: Hoare triple {1823#false} ~cond := #in~cond; {1823#false} is VALID [2022-04-28 03:50:25,459 INFO L290 TraceCheckUtils]: 14: Hoare triple {1823#false} assume 0 == ~cond; {1823#false} is VALID [2022-04-28 03:50:25,459 INFO L290 TraceCheckUtils]: 15: Hoare triple {1823#false} assume !false; {1823#false} is VALID [2022-04-28 03:50:25,460 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:50:25,460 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:50:25,460 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [229745010] [2022-04-28 03:50:25,460 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [229745010] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:50:25,460 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [79218093] [2022-04-28 03:50:25,460 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:25,460 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:25,460 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:50:25,464 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:50:25,470 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-04-28 03:50:25,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:25,497 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:50:25,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:25,511 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:50:25,774 INFO L272 TraceCheckUtils]: 0: Hoare triple {1822#true} call ULTIMATE.init(); {1822#true} is VALID [2022-04-28 03:50:25,774 INFO L290 TraceCheckUtils]: 1: Hoare triple {1822#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {1822#true} is VALID [2022-04-28 03:50:25,774 INFO L290 TraceCheckUtils]: 2: Hoare triple {1822#true} assume true; {1822#true} is VALID [2022-04-28 03:50:25,775 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {1822#true} {1822#true} #48#return; {1822#true} is VALID [2022-04-28 03:50:25,775 INFO L272 TraceCheckUtils]: 4: Hoare triple {1822#true} call #t~ret7 := main(); {1822#true} is VALID [2022-04-28 03:50:25,775 INFO L290 TraceCheckUtils]: 5: Hoare triple {1822#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {1849#(<= main_~x~0 0)} is VALID [2022-04-28 03:50:25,776 INFO L290 TraceCheckUtils]: 6: Hoare triple {1849#(<= main_~x~0 0)} [78] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_128 v_main_~x~0_127)) (.cse1 (= |v_main_#t~post4_37| |v_main_#t~post4_36|))) (or (and .cse0 .cse1 (not (< v_main_~x~0_128 500000))) (and (< v_main_~x~0_127 500001) (< v_main_~x~0_128 v_main_~x~0_127)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_128, main_#t~post4=|v_main_#t~post4_37|} OutVars{main_~x~0=v_main_~x~0_127, main_#t~post4=|v_main_#t~post4_36|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {1828#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:25,777 INFO L290 TraceCheckUtils]: 7: Hoare triple {1828#(<= main_~x~0 500000)} [79] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {1828#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:25,778 INFO L290 TraceCheckUtils]: 8: Hoare triple {1828#(<= main_~x~0 500000)} [80] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_130))) (or (and .cse0 (= (+ v_main_~x~0_129 (* v_main_~y~0_72 2)) (+ v_main_~x~0_130 (* v_main_~y~0_71 2))) (< v_main_~y~0_71 (+ v_main_~y~0_72 (div (+ 999999 (* v_main_~x~0_130 (- 1))) 2) 2)) (< v_main_~y~0_72 v_main_~y~0_71)) (and (= |v_main_#t~post6_51| |v_main_#t~post6_49|) (= v_main_~x~0_130 v_main_~x~0_129) (= v_main_~y~0_72 v_main_~y~0_71)) (and (= v_main_~x~0_129 v_main_~x~0_130) (= v_main_~y~0_71 v_main_~y~0_72) (or (not .cse0) (not (< v_main_~x~0_130 1000000))) (= |v_main_#t~post6_49| |v_main_#t~post6_51|)))) InVars {main_~y~0=v_main_~y~0_72, main_~x~0=v_main_~x~0_130, main_#t~post6=|v_main_#t~post6_51|} OutVars{main_~y~0=v_main_~y~0_71, main_~x~0=v_main_~x~0_129, main_#t~post6=|v_main_#t~post6_49|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {1828#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:25,778 INFO L290 TraceCheckUtils]: 9: Hoare triple {1828#(<= main_~x~0 500000)} [81] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {1828#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:25,779 INFO L290 TraceCheckUtils]: 10: Hoare triple {1828#(<= main_~x~0 500000)} [82] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_132)) (.cse1 (= |v_main_#t~post6_54| |v_main_#t~post6_50|)) (.cse2 (= v_main_~y~0_74 v_main_~y~0_73)) (.cse3 (= v_main_~x~0_132 v_main_~x~0_131)) (.cse4 (= |v_main_#t~post5_29| |v_main_#t~post5_28|))) (or (and .cse0 (< v_main_~x~0_131 750001) (= (+ v_main_~x~0_132 v_main_~y~0_73) (+ v_main_~x~0_131 v_main_~y~0_74)) (< v_main_~x~0_132 v_main_~x~0_131)) (and .cse1 .cse2 .cse3 .cse4) (and (or (not (< v_main_~x~0_132 750000)) (not .cse0)) .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_74, main_#t~post5=|v_main_#t~post5_29|, main_~x~0=v_main_~x~0_132, main_#t~post6=|v_main_#t~post6_54|} OutVars{main_~y~0=v_main_~y~0_73, main_#t~post5=|v_main_#t~post5_28|, main_~x~0=v_main_~x~0_131, main_#t~post6=|v_main_#t~post6_50|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {1865#(< main_~x~0 750001)} is VALID [2022-04-28 03:50:25,780 INFO L290 TraceCheckUtils]: 11: Hoare triple {1865#(< main_~x~0 750001)} [77] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {1823#false} is VALID [2022-04-28 03:50:25,780 INFO L272 TraceCheckUtils]: 12: Hoare triple {1823#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {1823#false} is VALID [2022-04-28 03:50:25,780 INFO L290 TraceCheckUtils]: 13: Hoare triple {1823#false} ~cond := #in~cond; {1823#false} is VALID [2022-04-28 03:50:25,780 INFO L290 TraceCheckUtils]: 14: Hoare triple {1823#false} assume 0 == ~cond; {1823#false} is VALID [2022-04-28 03:50:25,780 INFO L290 TraceCheckUtils]: 15: Hoare triple {1823#false} assume !false; {1823#false} is VALID [2022-04-28 03:50:25,780 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:25,780 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:50:26,247 INFO L290 TraceCheckUtils]: 15: Hoare triple {1823#false} assume !false; {1823#false} is VALID [2022-04-28 03:50:26,248 INFO L290 TraceCheckUtils]: 14: Hoare triple {1884#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {1823#false} is VALID [2022-04-28 03:50:26,248 INFO L290 TraceCheckUtils]: 13: Hoare triple {1888#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {1884#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:50:26,249 INFO L272 TraceCheckUtils]: 12: Hoare triple {1892#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {1888#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:50:26,249 INFO L290 TraceCheckUtils]: 11: Hoare triple {1896#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [77] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {1892#(= main_~x~0 1000000)} is VALID [2022-04-28 03:50:26,250 INFO L290 TraceCheckUtils]: 10: Hoare triple {1896#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [82] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_132)) (.cse1 (= |v_main_#t~post6_54| |v_main_#t~post6_50|)) (.cse2 (= v_main_~y~0_74 v_main_~y~0_73)) (.cse3 (= v_main_~x~0_132 v_main_~x~0_131)) (.cse4 (= |v_main_#t~post5_29| |v_main_#t~post5_28|))) (or (and .cse0 (< v_main_~x~0_131 750001) (= (+ v_main_~x~0_132 v_main_~y~0_73) (+ v_main_~x~0_131 v_main_~y~0_74)) (< v_main_~x~0_132 v_main_~x~0_131)) (and .cse1 .cse2 .cse3 .cse4) (and (or (not (< v_main_~x~0_132 750000)) (not .cse0)) .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_74, main_#t~post5=|v_main_#t~post5_29|, main_~x~0=v_main_~x~0_132, main_#t~post6=|v_main_#t~post6_54|} OutVars{main_~y~0=v_main_~y~0_73, main_#t~post5=|v_main_#t~post5_28|, main_~x~0=v_main_~x~0_131, main_#t~post6=|v_main_#t~post6_50|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {1896#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:26,250 INFO L290 TraceCheckUtils]: 9: Hoare triple {1896#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [81] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {1896#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:26,251 INFO L290 TraceCheckUtils]: 8: Hoare triple {1906#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [80] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_130))) (or (and .cse0 (= (+ v_main_~x~0_129 (* v_main_~y~0_72 2)) (+ v_main_~x~0_130 (* v_main_~y~0_71 2))) (< v_main_~y~0_71 (+ v_main_~y~0_72 (div (+ 999999 (* v_main_~x~0_130 (- 1))) 2) 2)) (< v_main_~y~0_72 v_main_~y~0_71)) (and (= |v_main_#t~post6_51| |v_main_#t~post6_49|) (= v_main_~x~0_130 v_main_~x~0_129) (= v_main_~y~0_72 v_main_~y~0_71)) (and (= v_main_~x~0_129 v_main_~x~0_130) (= v_main_~y~0_71 v_main_~y~0_72) (or (not .cse0) (not (< v_main_~x~0_130 1000000))) (= |v_main_#t~post6_49| |v_main_#t~post6_51|)))) InVars {main_~y~0=v_main_~y~0_72, main_~x~0=v_main_~x~0_130, main_#t~post6=|v_main_#t~post6_51|} OutVars{main_~y~0=v_main_~y~0_71, main_~x~0=v_main_~x~0_129, main_#t~post6=|v_main_#t~post6_49|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {1896#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:26,252 INFO L290 TraceCheckUtils]: 7: Hoare triple {1906#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [79] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {1906#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:50:26,253 INFO L290 TraceCheckUtils]: 6: Hoare triple {1906#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [78] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_128 v_main_~x~0_127)) (.cse1 (= |v_main_#t~post4_37| |v_main_#t~post4_36|))) (or (and .cse0 .cse1 (not (< v_main_~x~0_128 500000))) (and (< v_main_~x~0_127 500001) (< v_main_~x~0_128 v_main_~x~0_127)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_128, main_#t~post4=|v_main_#t~post4_37|} OutVars{main_~x~0=v_main_~x~0_127, main_#t~post4=|v_main_#t~post4_36|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {1906#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:50:26,253 INFO L290 TraceCheckUtils]: 5: Hoare triple {1822#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {1906#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:50:26,253 INFO L272 TraceCheckUtils]: 4: Hoare triple {1822#true} call #t~ret7 := main(); {1822#true} is VALID [2022-04-28 03:50:26,253 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {1822#true} {1822#true} #48#return; {1822#true} is VALID [2022-04-28 03:50:26,254 INFO L290 TraceCheckUtils]: 2: Hoare triple {1822#true} assume true; {1822#true} is VALID [2022-04-28 03:50:26,254 INFO L290 TraceCheckUtils]: 1: Hoare triple {1822#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {1822#true} is VALID [2022-04-28 03:50:26,254 INFO L272 TraceCheckUtils]: 0: Hoare triple {1822#true} call ULTIMATE.init(); {1822#true} is VALID [2022-04-28 03:50:26,254 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:26,254 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [79218093] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:50:26,254 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:50:26,254 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:50:26,511 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:50:26,511 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1936417207] [2022-04-28 03:50:26,511 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1936417207] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:50:26,511 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:50:26,511 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-04-28 03:50:26,511 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1077421688] [2022-04-28 03:50:26,511 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:50:26,512 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.0) internal successors, (33), 10 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 37 [2022-04-28 03:50:26,512 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:50:26,512 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 3.0) internal successors, (33), 10 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:26,538 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 37 edges. 37 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:26,538 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-04-28 03:50:26,538 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:26,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-04-28 03:50:26,539 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=100, Invalid=320, Unknown=0, NotChecked=0, Total=420 [2022-04-28 03:50:26,539 INFO L87 Difference]: Start difference. First operand 40 states and 44 transitions. Second operand has 11 states, 11 states have (on average 3.0) internal successors, (33), 10 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:27,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:27,119 INFO L93 Difference]: Finished difference Result 67 states and 76 transitions. [2022-04-28 03:50:27,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-04-28 03:50:27,119 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 3.0) internal successors, (33), 10 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 37 [2022-04-28 03:50:27,119 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:50:27,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.0) internal successors, (33), 10 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:27,121 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 56 transitions. [2022-04-28 03:50:27,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 3.0) internal successors, (33), 10 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:27,122 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 56 transitions. [2022-04-28 03:50:27,122 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 11 states and 56 transitions. [2022-04-28 03:50:27,166 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:27,167 INFO L225 Difference]: With dead ends: 67 [2022-04-28 03:50:27,167 INFO L226 Difference]: Without dead ends: 49 [2022-04-28 03:50:27,167 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 49 SyntacticMatches, 2 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 183 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=173, Invalid=639, Unknown=0, NotChecked=0, Total=812 [2022-04-28 03:50:27,168 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 29 mSDsluCounter, 37 mSDsCounter, 0 mSdLazyCounter, 228 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 54 SdHoareTripleChecker+Invalid, 239 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 228 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-04-28 03:50:27,168 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 54 Invalid, 239 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 228 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-04-28 03:50:27,168 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2022-04-28 03:50:27,282 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 44. [2022-04-28 03:50:27,282 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:50:27,282 INFO L82 GeneralOperation]: Start isEquivalent. First operand 49 states. Second operand has 44 states, 39 states have (on average 1.1282051282051282) internal successors, (44), 39 states have internal predecessors, (44), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:27,282 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand has 44 states, 39 states have (on average 1.1282051282051282) internal successors, (44), 39 states have internal predecessors, (44), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:27,282 INFO L87 Difference]: Start difference. First operand 49 states. Second operand has 44 states, 39 states have (on average 1.1282051282051282) internal successors, (44), 39 states have internal predecessors, (44), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:27,284 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:27,284 INFO L93 Difference]: Finished difference Result 49 states and 53 transitions. [2022-04-28 03:50:27,284 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 53 transitions. [2022-04-28 03:50:27,284 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:27,284 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:27,284 INFO L74 IsIncluded]: Start isIncluded. First operand has 44 states, 39 states have (on average 1.1282051282051282) internal successors, (44), 39 states have internal predecessors, (44), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 49 states. [2022-04-28 03:50:27,285 INFO L87 Difference]: Start difference. First operand has 44 states, 39 states have (on average 1.1282051282051282) internal successors, (44), 39 states have internal predecessors, (44), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 49 states. [2022-04-28 03:50:27,286 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:27,286 INFO L93 Difference]: Finished difference Result 49 states and 53 transitions. [2022-04-28 03:50:27,286 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 53 transitions. [2022-04-28 03:50:27,286 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:27,286 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:27,286 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:50:27,286 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:50:27,287 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 44 states, 39 states have (on average 1.1282051282051282) internal successors, (44), 39 states have internal predecessors, (44), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:27,288 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 44 states to 44 states and 48 transitions. [2022-04-28 03:50:27,288 INFO L78 Accepts]: Start accepts. Automaton has 44 states and 48 transitions. Word has length 37 [2022-04-28 03:50:27,288 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:50:27,288 INFO L495 AbstractCegarLoop]: Abstraction has 44 states and 48 transitions. [2022-04-28 03:50:27,288 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 3.0) internal successors, (33), 10 states have internal predecessors, (33), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:27,288 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 44 states and 48 transitions. [2022-04-28 03:50:27,373 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 48 edges. 48 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:27,373 INFO L276 IsEmpty]: Start isEmpty. Operand 44 states and 48 transitions. [2022-04-28 03:50:27,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-04-28 03:50:27,374 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:50:27,374 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:50:27,406 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-04-28 03:50:27,574 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:27,575 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:50:27,575 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:50:27,575 INFO L85 PathProgramCache]: Analyzing trace with hash 1854902826, now seen corresponding path program 5 times [2022-04-28 03:50:27,575 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:27,575 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [877549933] [2022-04-28 03:50:27,680 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:30,638 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:50:30,776 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:31,034 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:31,036 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:50:31,041 INFO L85 PathProgramCache]: Analyzing trace with hash 891129319, now seen corresponding path program 1 times [2022-04-28 03:50:31,041 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:50:31,041 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2054205792] [2022-04-28 03:50:31,041 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:31,041 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:50:31,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:31,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:50:31,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:31,099 INFO L290 TraceCheckUtils]: 0: Hoare triple {2285#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {2277#true} is VALID [2022-04-28 03:50:31,100 INFO L290 TraceCheckUtils]: 1: Hoare triple {2277#true} assume true; {2277#true} is VALID [2022-04-28 03:50:31,100 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2277#true} {2277#true} #48#return; {2277#true} is VALID [2022-04-28 03:50:31,100 INFO L272 TraceCheckUtils]: 0: Hoare triple {2277#true} call ULTIMATE.init(); {2285#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:50:31,100 INFO L290 TraceCheckUtils]: 1: Hoare triple {2285#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {2277#true} is VALID [2022-04-28 03:50:31,101 INFO L290 TraceCheckUtils]: 2: Hoare triple {2277#true} assume true; {2277#true} is VALID [2022-04-28 03:50:31,101 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {2277#true} {2277#true} #48#return; {2277#true} is VALID [2022-04-28 03:50:31,101 INFO L272 TraceCheckUtils]: 4: Hoare triple {2277#true} call #t~ret7 := main(); {2277#true} is VALID [2022-04-28 03:50:31,101 INFO L290 TraceCheckUtils]: 5: Hoare triple {2277#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {2282#(= main_~x~0 0)} is VALID [2022-04-28 03:50:31,102 INFO L290 TraceCheckUtils]: 6: Hoare triple {2282#(= main_~x~0 0)} [84] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_44| |v_main_#t~post4_43|)) (.cse1 (= v_main_~x~0_159 v_main_~x~0_158))) (or (and (< v_main_~x~0_159 v_main_~x~0_158) (< v_main_~x~0_158 500001)) (and .cse0 (not (< v_main_~x~0_159 500000)) .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_159, main_#t~post4=|v_main_#t~post4_44|} OutVars{main_~x~0=v_main_~x~0_158, main_#t~post4=|v_main_#t~post4_43|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {2283#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:31,102 INFO L290 TraceCheckUtils]: 7: Hoare triple {2283#(<= main_~x~0 500000)} [85] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {2283#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:31,103 INFO L290 TraceCheckUtils]: 8: Hoare triple {2283#(<= main_~x~0 500000)} [86] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_161)) (.cse1 (= v_main_~y~0_93 v_main_~y~0_92)) (.cse2 (= v_main_~x~0_161 v_main_~x~0_160)) (.cse3 (= |v_main_#t~post6_64| |v_main_#t~post6_62|))) (or (and (< v_main_~y~0_92 (+ v_main_~y~0_93 (div (+ 999999 (* v_main_~x~0_161 (- 1))) 2) 2)) (< v_main_~y~0_93 v_main_~y~0_92) (= (+ v_main_~x~0_161 (* v_main_~y~0_92 2)) (+ v_main_~x~0_160 (* v_main_~y~0_93 2))) .cse0) (and (or (not .cse0) (not (< v_main_~x~0_161 1000000))) .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_93, main_~x~0=v_main_~x~0_161, main_#t~post6=|v_main_#t~post6_64|} OutVars{main_~y~0=v_main_~y~0_92, main_~x~0=v_main_~x~0_160, main_#t~post6=|v_main_#t~post6_62|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {2283#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:31,104 INFO L290 TraceCheckUtils]: 9: Hoare triple {2283#(<= main_~x~0 500000)} [87] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {2283#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:31,105 INFO L290 TraceCheckUtils]: 10: Hoare triple {2283#(<= main_~x~0 500000)} [88] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_163)) (.cse2 (= |v_main_#t~post5_35| |v_main_#t~post5_34|)) (.cse3 (= v_main_~y~0_95 v_main_~y~0_94)) (.cse4 (= v_main_~x~0_163 v_main_~x~0_162)) (.cse5 (= |v_main_#t~post6_67| |v_main_#t~post6_63|))) (or (let ((.cse0 (+ v_main_~x~0_163 v_main_~y~0_94))) (and (= (+ v_main_~x~0_162 v_main_~y~0_95) .cse0) (< .cse0 (+ 750001 v_main_~y~0_95)) (< v_main_~y~0_95 v_main_~y~0_94) .cse1)) (and .cse2 .cse3 .cse4 .cse5 (or (not (< v_main_~x~0_163 750000)) (not .cse1))) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_95, main_#t~post5=|v_main_#t~post5_35|, main_~x~0=v_main_~x~0_163, main_#t~post6=|v_main_#t~post6_67|} OutVars{main_~y~0=v_main_~y~0_94, main_#t~post5=|v_main_#t~post5_34|, main_~x~0=v_main_~x~0_162, main_#t~post6=|v_main_#t~post6_63|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {2284#(<= main_~x~0 750000)} is VALID [2022-04-28 03:50:31,105 INFO L290 TraceCheckUtils]: 11: Hoare triple {2284#(<= main_~x~0 750000)} [83] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {2278#false} is VALID [2022-04-28 03:50:31,105 INFO L272 TraceCheckUtils]: 12: Hoare triple {2278#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {2278#false} is VALID [2022-04-28 03:50:31,105 INFO L290 TraceCheckUtils]: 13: Hoare triple {2278#false} ~cond := #in~cond; {2278#false} is VALID [2022-04-28 03:50:31,105 INFO L290 TraceCheckUtils]: 14: Hoare triple {2278#false} assume 0 == ~cond; {2278#false} is VALID [2022-04-28 03:50:31,105 INFO L290 TraceCheckUtils]: 15: Hoare triple {2278#false} assume !false; {2278#false} is VALID [2022-04-28 03:50:31,106 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:31,106 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:50:31,106 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2054205792] [2022-04-28 03:50:31,106 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2054205792] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:50:31,106 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [626633675] [2022-04-28 03:50:31,106 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:31,106 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:31,106 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:50:31,108 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:50:31,131 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-04-28 03:50:31,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:31,147 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:50:31,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:31,159 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:50:31,379 INFO L272 TraceCheckUtils]: 0: Hoare triple {2277#true} call ULTIMATE.init(); {2277#true} is VALID [2022-04-28 03:50:31,380 INFO L290 TraceCheckUtils]: 1: Hoare triple {2277#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {2277#true} is VALID [2022-04-28 03:50:31,380 INFO L290 TraceCheckUtils]: 2: Hoare triple {2277#true} assume true; {2277#true} is VALID [2022-04-28 03:50:31,380 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {2277#true} {2277#true} #48#return; {2277#true} is VALID [2022-04-28 03:50:31,380 INFO L272 TraceCheckUtils]: 4: Hoare triple {2277#true} call #t~ret7 := main(); {2277#true} is VALID [2022-04-28 03:50:31,380 INFO L290 TraceCheckUtils]: 5: Hoare triple {2277#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {2304#(<= main_~x~0 0)} is VALID [2022-04-28 03:50:31,381 INFO L290 TraceCheckUtils]: 6: Hoare triple {2304#(<= main_~x~0 0)} [84] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_44| |v_main_#t~post4_43|)) (.cse1 (= v_main_~x~0_159 v_main_~x~0_158))) (or (and (< v_main_~x~0_159 v_main_~x~0_158) (< v_main_~x~0_158 500001)) (and .cse0 (not (< v_main_~x~0_159 500000)) .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_159, main_#t~post4=|v_main_#t~post4_44|} OutVars{main_~x~0=v_main_~x~0_158, main_#t~post4=|v_main_#t~post4_43|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {2283#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:31,394 INFO L290 TraceCheckUtils]: 7: Hoare triple {2283#(<= main_~x~0 500000)} [85] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {2283#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:31,396 INFO L290 TraceCheckUtils]: 8: Hoare triple {2283#(<= main_~x~0 500000)} [86] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_161)) (.cse1 (= v_main_~y~0_93 v_main_~y~0_92)) (.cse2 (= v_main_~x~0_161 v_main_~x~0_160)) (.cse3 (= |v_main_#t~post6_64| |v_main_#t~post6_62|))) (or (and (< v_main_~y~0_92 (+ v_main_~y~0_93 (div (+ 999999 (* v_main_~x~0_161 (- 1))) 2) 2)) (< v_main_~y~0_93 v_main_~y~0_92) (= (+ v_main_~x~0_161 (* v_main_~y~0_92 2)) (+ v_main_~x~0_160 (* v_main_~y~0_93 2))) .cse0) (and (or (not .cse0) (not (< v_main_~x~0_161 1000000))) .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_93, main_~x~0=v_main_~x~0_161, main_#t~post6=|v_main_#t~post6_64|} OutVars{main_~y~0=v_main_~y~0_92, main_~x~0=v_main_~x~0_160, main_#t~post6=|v_main_#t~post6_62|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {2283#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:31,396 INFO L290 TraceCheckUtils]: 9: Hoare triple {2283#(<= main_~x~0 500000)} [87] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {2283#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:31,398 INFO L290 TraceCheckUtils]: 10: Hoare triple {2283#(<= main_~x~0 500000)} [88] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_163)) (.cse2 (= |v_main_#t~post5_35| |v_main_#t~post5_34|)) (.cse3 (= v_main_~y~0_95 v_main_~y~0_94)) (.cse4 (= v_main_~x~0_163 v_main_~x~0_162)) (.cse5 (= |v_main_#t~post6_67| |v_main_#t~post6_63|))) (or (let ((.cse0 (+ v_main_~x~0_163 v_main_~y~0_94))) (and (= (+ v_main_~x~0_162 v_main_~y~0_95) .cse0) (< .cse0 (+ 750001 v_main_~y~0_95)) (< v_main_~y~0_95 v_main_~y~0_94) .cse1)) (and .cse2 .cse3 .cse4 .cse5 (or (not (< v_main_~x~0_163 750000)) (not .cse1))) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_95, main_#t~post5=|v_main_#t~post5_35|, main_~x~0=v_main_~x~0_163, main_#t~post6=|v_main_#t~post6_67|} OutVars{main_~y~0=v_main_~y~0_94, main_#t~post5=|v_main_#t~post5_34|, main_~x~0=v_main_~x~0_162, main_#t~post6=|v_main_#t~post6_63|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {2284#(<= main_~x~0 750000)} is VALID [2022-04-28 03:50:31,398 INFO L290 TraceCheckUtils]: 11: Hoare triple {2284#(<= main_~x~0 750000)} [83] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {2278#false} is VALID [2022-04-28 03:50:31,398 INFO L272 TraceCheckUtils]: 12: Hoare triple {2278#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {2278#false} is VALID [2022-04-28 03:50:31,398 INFO L290 TraceCheckUtils]: 13: Hoare triple {2278#false} ~cond := #in~cond; {2278#false} is VALID [2022-04-28 03:50:31,398 INFO L290 TraceCheckUtils]: 14: Hoare triple {2278#false} assume 0 == ~cond; {2278#false} is VALID [2022-04-28 03:50:31,398 INFO L290 TraceCheckUtils]: 15: Hoare triple {2278#false} assume !false; {2278#false} is VALID [2022-04-28 03:50:31,399 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:31,399 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:50:31,814 INFO L290 TraceCheckUtils]: 15: Hoare triple {2278#false} assume !false; {2278#false} is VALID [2022-04-28 03:50:31,814 INFO L290 TraceCheckUtils]: 14: Hoare triple {2338#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {2278#false} is VALID [2022-04-28 03:50:31,814 INFO L290 TraceCheckUtils]: 13: Hoare triple {2342#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {2338#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:50:31,815 INFO L272 TraceCheckUtils]: 12: Hoare triple {2346#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {2342#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:50:31,815 INFO L290 TraceCheckUtils]: 11: Hoare triple {2350#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [83] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {2346#(= main_~x~0 1000000)} is VALID [2022-04-28 03:50:31,816 INFO L290 TraceCheckUtils]: 10: Hoare triple {2350#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [88] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_163)) (.cse2 (= |v_main_#t~post5_35| |v_main_#t~post5_34|)) (.cse3 (= v_main_~y~0_95 v_main_~y~0_94)) (.cse4 (= v_main_~x~0_163 v_main_~x~0_162)) (.cse5 (= |v_main_#t~post6_67| |v_main_#t~post6_63|))) (or (let ((.cse0 (+ v_main_~x~0_163 v_main_~y~0_94))) (and (= (+ v_main_~x~0_162 v_main_~y~0_95) .cse0) (< .cse0 (+ 750001 v_main_~y~0_95)) (< v_main_~y~0_95 v_main_~y~0_94) .cse1)) (and .cse2 .cse3 .cse4 .cse5 (or (not (< v_main_~x~0_163 750000)) (not .cse1))) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_95, main_#t~post5=|v_main_#t~post5_35|, main_~x~0=v_main_~x~0_163, main_#t~post6=|v_main_#t~post6_67|} OutVars{main_~y~0=v_main_~y~0_94, main_#t~post5=|v_main_#t~post5_34|, main_~x~0=v_main_~x~0_162, main_#t~post6=|v_main_#t~post6_63|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {2350#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:31,816 INFO L290 TraceCheckUtils]: 9: Hoare triple {2350#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [87] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {2350#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:31,817 INFO L290 TraceCheckUtils]: 8: Hoare triple {2360#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [86] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_161)) (.cse1 (= v_main_~y~0_93 v_main_~y~0_92)) (.cse2 (= v_main_~x~0_161 v_main_~x~0_160)) (.cse3 (= |v_main_#t~post6_64| |v_main_#t~post6_62|))) (or (and (< v_main_~y~0_92 (+ v_main_~y~0_93 (div (+ 999999 (* v_main_~x~0_161 (- 1))) 2) 2)) (< v_main_~y~0_93 v_main_~y~0_92) (= (+ v_main_~x~0_161 (* v_main_~y~0_92 2)) (+ v_main_~x~0_160 (* v_main_~y~0_93 2))) .cse0) (and (or (not .cse0) (not (< v_main_~x~0_161 1000000))) .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_93, main_~x~0=v_main_~x~0_161, main_#t~post6=|v_main_#t~post6_64|} OutVars{main_~y~0=v_main_~y~0_92, main_~x~0=v_main_~x~0_160, main_#t~post6=|v_main_#t~post6_62|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {2350#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:31,818 INFO L290 TraceCheckUtils]: 7: Hoare triple {2360#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [85] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {2360#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 03:50:31,819 INFO L290 TraceCheckUtils]: 6: Hoare triple {2360#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [84] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_44| |v_main_#t~post4_43|)) (.cse1 (= v_main_~x~0_159 v_main_~x~0_158))) (or (and (< v_main_~x~0_159 v_main_~x~0_158) (< v_main_~x~0_158 500001)) (and .cse0 (not (< v_main_~x~0_159 500000)) .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_159, main_#t~post4=|v_main_#t~post4_44|} OutVars{main_~x~0=v_main_~x~0_158, main_#t~post4=|v_main_#t~post4_43|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {2360#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 03:50:31,820 INFO L290 TraceCheckUtils]: 5: Hoare triple {2277#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {2360#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 03:50:31,820 INFO L272 TraceCheckUtils]: 4: Hoare triple {2277#true} call #t~ret7 := main(); {2277#true} is VALID [2022-04-28 03:50:31,820 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {2277#true} {2277#true} #48#return; {2277#true} is VALID [2022-04-28 03:50:31,820 INFO L290 TraceCheckUtils]: 2: Hoare triple {2277#true} assume true; {2277#true} is VALID [2022-04-28 03:50:31,821 INFO L290 TraceCheckUtils]: 1: Hoare triple {2277#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {2277#true} is VALID [2022-04-28 03:50:31,821 INFO L272 TraceCheckUtils]: 0: Hoare triple {2277#true} call ULTIMATE.init(); {2277#true} is VALID [2022-04-28 03:50:31,821 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:31,821 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [626633675] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:50:31,821 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:50:31,821 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:50:32,079 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:50:32,079 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [877549933] [2022-04-28 03:50:32,079 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [877549933] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:50:32,079 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:50:32,079 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-04-28 03:50:32,079 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [888739190] [2022-04-28 03:50:32,079 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:50:32,080 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.0833333333333335) internal successors, (37), 11 states have internal predecessors, (37), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 41 [2022-04-28 03:50:32,080 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:50:32,080 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 3.0833333333333335) internal successors, (37), 11 states have internal predecessors, (37), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:32,113 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:32,113 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-04-28 03:50:32,113 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:32,114 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-04-28 03:50:32,114 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=90, Invalid=330, Unknown=0, NotChecked=0, Total=420 [2022-04-28 03:50:32,114 INFO L87 Difference]: Start difference. First operand 44 states and 48 transitions. Second operand has 12 states, 12 states have (on average 3.0833333333333335) internal successors, (37), 11 states have internal predecessors, (37), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:32,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:32,835 INFO L93 Difference]: Finished difference Result 71 states and 80 transitions. [2022-04-28 03:50:32,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-04-28 03:50:32,836 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.0833333333333335) internal successors, (37), 11 states have internal predecessors, (37), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 41 [2022-04-28 03:50:32,836 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:50:32,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.0833333333333335) internal successors, (37), 11 states have internal predecessors, (37), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:32,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 60 transitions. [2022-04-28 03:50:32,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 3.0833333333333335) internal successors, (37), 11 states have internal predecessors, (37), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:32,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 60 transitions. [2022-04-28 03:50:32,839 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 12 states and 60 transitions. [2022-04-28 03:50:32,889 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:32,890 INFO L225 Difference]: With dead ends: 71 [2022-04-28 03:50:32,890 INFO L226 Difference]: Without dead ends: 53 [2022-04-28 03:50:32,890 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 83 GetRequests, 52 SyntacticMatches, 3 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 184 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=162, Invalid=708, Unknown=0, NotChecked=0, Total=870 [2022-04-28 03:50:32,891 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 32 mSDsluCounter, 42 mSDsCounter, 0 mSdLazyCounter, 292 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 60 SdHoareTripleChecker+Invalid, 304 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 292 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-04-28 03:50:32,891 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 60 Invalid, 304 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 292 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-04-28 03:50:32,891 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2022-04-28 03:50:33,001 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 48. [2022-04-28 03:50:33,001 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:50:33,002 INFO L82 GeneralOperation]: Start isEquivalent. First operand 53 states. Second operand has 48 states, 43 states have (on average 1.1162790697674418) internal successors, (48), 43 states have internal predecessors, (48), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:33,002 INFO L74 IsIncluded]: Start isIncluded. First operand 53 states. Second operand has 48 states, 43 states have (on average 1.1162790697674418) internal successors, (48), 43 states have internal predecessors, (48), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:33,002 INFO L87 Difference]: Start difference. First operand 53 states. Second operand has 48 states, 43 states have (on average 1.1162790697674418) internal successors, (48), 43 states have internal predecessors, (48), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:33,004 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:33,004 INFO L93 Difference]: Finished difference Result 53 states and 57 transitions. [2022-04-28 03:50:33,004 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 57 transitions. [2022-04-28 03:50:33,004 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:33,004 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:33,004 INFO L74 IsIncluded]: Start isIncluded. First operand has 48 states, 43 states have (on average 1.1162790697674418) internal successors, (48), 43 states have internal predecessors, (48), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 53 states. [2022-04-28 03:50:33,004 INFO L87 Difference]: Start difference. First operand has 48 states, 43 states have (on average 1.1162790697674418) internal successors, (48), 43 states have internal predecessors, (48), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 53 states. [2022-04-28 03:50:33,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:33,006 INFO L93 Difference]: Finished difference Result 53 states and 57 transitions. [2022-04-28 03:50:33,006 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 57 transitions. [2022-04-28 03:50:33,006 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:33,006 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:33,006 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:50:33,006 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:50:33,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 43 states have (on average 1.1162790697674418) internal successors, (48), 43 states have internal predecessors, (48), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:33,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 52 transitions. [2022-04-28 03:50:33,008 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 52 transitions. Word has length 41 [2022-04-28 03:50:33,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:50:33,008 INFO L495 AbstractCegarLoop]: Abstraction has 48 states and 52 transitions. [2022-04-28 03:50:33,008 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.0833333333333335) internal successors, (37), 11 states have internal predecessors, (37), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:33,008 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 48 states and 52 transitions. [2022-04-28 03:50:33,060 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 52 edges. 52 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:33,060 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 52 transitions. [2022-04-28 03:50:33,061 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-04-28 03:50:33,061 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:50:33,061 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:50:33,077 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-04-28 03:50:33,263 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:33,263 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:50:33,264 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:50:33,264 INFO L85 PathProgramCache]: Analyzing trace with hash 1207583873, now seen corresponding path program 6 times [2022-04-28 03:50:33,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:33,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [854089388] [2022-04-28 03:50:33,368 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:36,390 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:50:36,522 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:36,812 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:36,814 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:50:36,817 INFO L85 PathProgramCache]: Analyzing trace with hash 531554343, now seen corresponding path program 1 times [2022-04-28 03:50:36,817 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:50:36,818 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [770520726] [2022-04-28 03:50:36,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:36,818 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:50:36,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:36,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:50:36,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:36,892 INFO L290 TraceCheckUtils]: 0: Hoare triple {2767#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {2758#true} is VALID [2022-04-28 03:50:36,892 INFO L290 TraceCheckUtils]: 1: Hoare triple {2758#true} assume true; {2758#true} is VALID [2022-04-28 03:50:36,892 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2758#true} {2758#true} #48#return; {2758#true} is VALID [2022-04-28 03:50:36,893 INFO L272 TraceCheckUtils]: 0: Hoare triple {2758#true} call ULTIMATE.init(); {2767#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:50:36,893 INFO L290 TraceCheckUtils]: 1: Hoare triple {2767#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {2758#true} is VALID [2022-04-28 03:50:36,893 INFO L290 TraceCheckUtils]: 2: Hoare triple {2758#true} assume true; {2758#true} is VALID [2022-04-28 03:50:36,893 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {2758#true} {2758#true} #48#return; {2758#true} is VALID [2022-04-28 03:50:36,893 INFO L272 TraceCheckUtils]: 4: Hoare triple {2758#true} call #t~ret7 := main(); {2758#true} is VALID [2022-04-28 03:50:36,893 INFO L290 TraceCheckUtils]: 5: Hoare triple {2758#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {2763#(= main_~x~0 0)} is VALID [2022-04-28 03:50:36,894 INFO L290 TraceCheckUtils]: 6: Hoare triple {2763#(= main_~x~0 0)} [90] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_51| |v_main_#t~post4_50|)) (.cse1 (= v_main_~x~0_191 v_main_~x~0_190))) (or (and .cse0 .cse1) (and (< v_main_~x~0_190 500001) (< v_main_~x~0_191 v_main_~x~0_190)) (and .cse0 .cse1 (not (< v_main_~x~0_191 500000))))) InVars {main_~x~0=v_main_~x~0_191, main_#t~post4=|v_main_#t~post4_51|} OutVars{main_~x~0=v_main_~x~0_190, main_#t~post4=|v_main_#t~post4_50|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {2764#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:36,894 INFO L290 TraceCheckUtils]: 7: Hoare triple {2764#(<= main_~x~0 500000)} [91] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {2764#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:36,895 INFO L290 TraceCheckUtils]: 8: Hoare triple {2764#(<= main_~x~0 500000)} [92] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_77| |v_main_#t~post6_75|)) (.cse3 (<= 750000 v_main_~x~0_193)) (.cse1 (= v_main_~x~0_193 v_main_~x~0_192)) (.cse2 (= v_main_~y~0_115 v_main_~y~0_114))) (or (and .cse0 .cse1 .cse2) (and (= (+ v_main_~x~0_193 (* v_main_~y~0_114 2)) (+ v_main_~x~0_192 (* v_main_~y~0_115 2))) (< v_main_~y~0_114 (+ (div (+ (* v_main_~x~0_193 (- 1)) 999999) 2) v_main_~y~0_115 2)) .cse3 (< v_main_~y~0_115 v_main_~y~0_114)) (and .cse0 (or (not .cse3) (not (< v_main_~x~0_193 1000000))) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_115, main_~x~0=v_main_~x~0_193, main_#t~post6=|v_main_#t~post6_77|} OutVars{main_~y~0=v_main_~y~0_114, main_~x~0=v_main_~x~0_192, main_#t~post6=|v_main_#t~post6_75|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {2765#(<= main_~x~0 749999)} is VALID [2022-04-28 03:50:36,896 INFO L290 TraceCheckUtils]: 9: Hoare triple {2765#(<= main_~x~0 749999)} [93] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {2765#(<= main_~x~0 749999)} is VALID [2022-04-28 03:50:36,896 INFO L290 TraceCheckUtils]: 10: Hoare triple {2765#(<= main_~x~0 749999)} [94] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_80| |v_main_#t~post6_76|)) (.cse1 (= v_main_~y~0_117 v_main_~y~0_116)) (.cse2 (= v_main_~x~0_195 v_main_~x~0_194)) (.cse3 (= |v_main_#t~post5_41| |v_main_#t~post5_40|)) (.cse4 (<= 500000 v_main_~x~0_195))) (or (and .cse0 .cse1 .cse2 .cse3) (and (< v_main_~x~0_194 750001) .cse4 (< v_main_~x~0_195 v_main_~x~0_194) (= (+ v_main_~x~0_195 v_main_~y~0_116) (+ v_main_~x~0_194 v_main_~y~0_117))) (and .cse0 .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_195 750000)) (not .cse4))))) InVars {main_~y~0=v_main_~y~0_117, main_#t~post5=|v_main_#t~post5_41|, main_~x~0=v_main_~x~0_195, main_#t~post6=|v_main_#t~post6_80|} OutVars{main_~y~0=v_main_~y~0_116, main_#t~post5=|v_main_#t~post5_40|, main_~x~0=v_main_~x~0_194, main_#t~post6=|v_main_#t~post6_76|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {2766#(<= main_~x~0 750000)} is VALID [2022-04-28 03:50:36,897 INFO L290 TraceCheckUtils]: 11: Hoare triple {2766#(<= main_~x~0 750000)} [89] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {2759#false} is VALID [2022-04-28 03:50:36,897 INFO L272 TraceCheckUtils]: 12: Hoare triple {2759#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {2759#false} is VALID [2022-04-28 03:50:36,897 INFO L290 TraceCheckUtils]: 13: Hoare triple {2759#false} ~cond := #in~cond; {2759#false} is VALID [2022-04-28 03:50:36,897 INFO L290 TraceCheckUtils]: 14: Hoare triple {2759#false} assume 0 == ~cond; {2759#false} is VALID [2022-04-28 03:50:36,897 INFO L290 TraceCheckUtils]: 15: Hoare triple {2759#false} assume !false; {2759#false} is VALID [2022-04-28 03:50:36,897 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 03:50:36,897 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:50:36,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [770520726] [2022-04-28 03:50:36,898 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [770520726] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:50:36,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1446112710] [2022-04-28 03:50:36,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:36,898 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:36,898 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:50:36,900 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:50:36,926 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-04-28 03:50:36,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:36,945 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:50:36,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:36,955 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:50:37,184 INFO L272 TraceCheckUtils]: 0: Hoare triple {2758#true} call ULTIMATE.init(); {2758#true} is VALID [2022-04-28 03:50:37,184 INFO L290 TraceCheckUtils]: 1: Hoare triple {2758#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {2758#true} is VALID [2022-04-28 03:50:37,185 INFO L290 TraceCheckUtils]: 2: Hoare triple {2758#true} assume true; {2758#true} is VALID [2022-04-28 03:50:37,185 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {2758#true} {2758#true} #48#return; {2758#true} is VALID [2022-04-28 03:50:37,185 INFO L272 TraceCheckUtils]: 4: Hoare triple {2758#true} call #t~ret7 := main(); {2758#true} is VALID [2022-04-28 03:50:37,185 INFO L290 TraceCheckUtils]: 5: Hoare triple {2758#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {2786#(<= main_~x~0 0)} is VALID [2022-04-28 03:50:37,186 INFO L290 TraceCheckUtils]: 6: Hoare triple {2786#(<= main_~x~0 0)} [90] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_51| |v_main_#t~post4_50|)) (.cse1 (= v_main_~x~0_191 v_main_~x~0_190))) (or (and .cse0 .cse1) (and (< v_main_~x~0_190 500001) (< v_main_~x~0_191 v_main_~x~0_190)) (and .cse0 .cse1 (not (< v_main_~x~0_191 500000))))) InVars {main_~x~0=v_main_~x~0_191, main_#t~post4=|v_main_#t~post4_51|} OutVars{main_~x~0=v_main_~x~0_190, main_#t~post4=|v_main_#t~post4_50|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {2764#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:37,186 INFO L290 TraceCheckUtils]: 7: Hoare triple {2764#(<= main_~x~0 500000)} [91] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {2764#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:37,187 INFO L290 TraceCheckUtils]: 8: Hoare triple {2764#(<= main_~x~0 500000)} [92] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_77| |v_main_#t~post6_75|)) (.cse3 (<= 750000 v_main_~x~0_193)) (.cse1 (= v_main_~x~0_193 v_main_~x~0_192)) (.cse2 (= v_main_~y~0_115 v_main_~y~0_114))) (or (and .cse0 .cse1 .cse2) (and (= (+ v_main_~x~0_193 (* v_main_~y~0_114 2)) (+ v_main_~x~0_192 (* v_main_~y~0_115 2))) (< v_main_~y~0_114 (+ (div (+ (* v_main_~x~0_193 (- 1)) 999999) 2) v_main_~y~0_115 2)) .cse3 (< v_main_~y~0_115 v_main_~y~0_114)) (and .cse0 (or (not .cse3) (not (< v_main_~x~0_193 1000000))) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_115, main_~x~0=v_main_~x~0_193, main_#t~post6=|v_main_#t~post6_77|} OutVars{main_~y~0=v_main_~y~0_114, main_~x~0=v_main_~x~0_192, main_#t~post6=|v_main_#t~post6_75|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {2764#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:37,187 INFO L290 TraceCheckUtils]: 9: Hoare triple {2764#(<= main_~x~0 500000)} [93] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {2764#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:37,188 INFO L290 TraceCheckUtils]: 10: Hoare triple {2764#(<= main_~x~0 500000)} [94] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_80| |v_main_#t~post6_76|)) (.cse1 (= v_main_~y~0_117 v_main_~y~0_116)) (.cse2 (= v_main_~x~0_195 v_main_~x~0_194)) (.cse3 (= |v_main_#t~post5_41| |v_main_#t~post5_40|)) (.cse4 (<= 500000 v_main_~x~0_195))) (or (and .cse0 .cse1 .cse2 .cse3) (and (< v_main_~x~0_194 750001) .cse4 (< v_main_~x~0_195 v_main_~x~0_194) (= (+ v_main_~x~0_195 v_main_~y~0_116) (+ v_main_~x~0_194 v_main_~y~0_117))) (and .cse0 .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_195 750000)) (not .cse4))))) InVars {main_~y~0=v_main_~y~0_117, main_#t~post5=|v_main_#t~post5_41|, main_~x~0=v_main_~x~0_195, main_#t~post6=|v_main_#t~post6_80|} OutVars{main_~y~0=v_main_~y~0_116, main_#t~post5=|v_main_#t~post5_40|, main_~x~0=v_main_~x~0_194, main_#t~post6=|v_main_#t~post6_76|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {2766#(<= main_~x~0 750000)} is VALID [2022-04-28 03:50:37,188 INFO L290 TraceCheckUtils]: 11: Hoare triple {2766#(<= main_~x~0 750000)} [89] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {2759#false} is VALID [2022-04-28 03:50:37,188 INFO L272 TraceCheckUtils]: 12: Hoare triple {2759#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {2759#false} is VALID [2022-04-28 03:50:37,188 INFO L290 TraceCheckUtils]: 13: Hoare triple {2759#false} ~cond := #in~cond; {2759#false} is VALID [2022-04-28 03:50:37,188 INFO L290 TraceCheckUtils]: 14: Hoare triple {2759#false} assume 0 == ~cond; {2759#false} is VALID [2022-04-28 03:50:37,188 INFO L290 TraceCheckUtils]: 15: Hoare triple {2759#false} assume !false; {2759#false} is VALID [2022-04-28 03:50:37,189 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:37,189 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:50:37,714 INFO L290 TraceCheckUtils]: 15: Hoare triple {2759#false} assume !false; {2759#false} is VALID [2022-04-28 03:50:37,715 INFO L290 TraceCheckUtils]: 14: Hoare triple {2820#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {2759#false} is VALID [2022-04-28 03:50:37,715 INFO L290 TraceCheckUtils]: 13: Hoare triple {2824#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {2820#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:50:37,716 INFO L272 TraceCheckUtils]: 12: Hoare triple {2828#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {2824#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:50:37,716 INFO L290 TraceCheckUtils]: 11: Hoare triple {2832#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [89] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {2828#(= main_~x~0 1000000)} is VALID [2022-04-28 03:50:37,717 INFO L290 TraceCheckUtils]: 10: Hoare triple {2832#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [94] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_80| |v_main_#t~post6_76|)) (.cse1 (= v_main_~y~0_117 v_main_~y~0_116)) (.cse2 (= v_main_~x~0_195 v_main_~x~0_194)) (.cse3 (= |v_main_#t~post5_41| |v_main_#t~post5_40|)) (.cse4 (<= 500000 v_main_~x~0_195))) (or (and .cse0 .cse1 .cse2 .cse3) (and (< v_main_~x~0_194 750001) .cse4 (< v_main_~x~0_195 v_main_~x~0_194) (= (+ v_main_~x~0_195 v_main_~y~0_116) (+ v_main_~x~0_194 v_main_~y~0_117))) (and .cse0 .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_195 750000)) (not .cse4))))) InVars {main_~y~0=v_main_~y~0_117, main_#t~post5=|v_main_#t~post5_41|, main_~x~0=v_main_~x~0_195, main_#t~post6=|v_main_#t~post6_80|} OutVars{main_~y~0=v_main_~y~0_116, main_#t~post5=|v_main_#t~post5_40|, main_~x~0=v_main_~x~0_194, main_#t~post6=|v_main_#t~post6_76|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {2832#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:37,717 INFO L290 TraceCheckUtils]: 9: Hoare triple {2832#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [93] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {2832#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:37,718 INFO L290 TraceCheckUtils]: 8: Hoare triple {2842#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [92] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_77| |v_main_#t~post6_75|)) (.cse3 (<= 750000 v_main_~x~0_193)) (.cse1 (= v_main_~x~0_193 v_main_~x~0_192)) (.cse2 (= v_main_~y~0_115 v_main_~y~0_114))) (or (and .cse0 .cse1 .cse2) (and (= (+ v_main_~x~0_193 (* v_main_~y~0_114 2)) (+ v_main_~x~0_192 (* v_main_~y~0_115 2))) (< v_main_~y~0_114 (+ (div (+ (* v_main_~x~0_193 (- 1)) 999999) 2) v_main_~y~0_115 2)) .cse3 (< v_main_~y~0_115 v_main_~y~0_114)) (and .cse0 (or (not .cse3) (not (< v_main_~x~0_193 1000000))) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_115, main_~x~0=v_main_~x~0_193, main_#t~post6=|v_main_#t~post6_77|} OutVars{main_~y~0=v_main_~y~0_114, main_~x~0=v_main_~x~0_192, main_#t~post6=|v_main_#t~post6_75|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {2832#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:37,719 INFO L290 TraceCheckUtils]: 7: Hoare triple {2842#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [91] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {2842#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:50:37,721 INFO L290 TraceCheckUtils]: 6: Hoare triple {2842#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [90] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_51| |v_main_#t~post4_50|)) (.cse1 (= v_main_~x~0_191 v_main_~x~0_190))) (or (and .cse0 .cse1) (and (< v_main_~x~0_190 500001) (< v_main_~x~0_191 v_main_~x~0_190)) (and .cse0 .cse1 (not (< v_main_~x~0_191 500000))))) InVars {main_~x~0=v_main_~x~0_191, main_#t~post4=|v_main_#t~post4_51|} OutVars{main_~x~0=v_main_~x~0_190, main_#t~post4=|v_main_#t~post4_50|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {2842#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:50:37,723 INFO L290 TraceCheckUtils]: 5: Hoare triple {2758#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {2842#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:50:37,723 INFO L272 TraceCheckUtils]: 4: Hoare triple {2758#true} call #t~ret7 := main(); {2758#true} is VALID [2022-04-28 03:50:37,723 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {2758#true} {2758#true} #48#return; {2758#true} is VALID [2022-04-28 03:50:37,723 INFO L290 TraceCheckUtils]: 2: Hoare triple {2758#true} assume true; {2758#true} is VALID [2022-04-28 03:50:37,723 INFO L290 TraceCheckUtils]: 1: Hoare triple {2758#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {2758#true} is VALID [2022-04-28 03:50:37,723 INFO L272 TraceCheckUtils]: 0: Hoare triple {2758#true} call ULTIMATE.init(); {2758#true} is VALID [2022-04-28 03:50:37,724 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:37,724 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1446112710] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:50:37,724 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:50:37,724 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 7] total 13 [2022-04-28 03:50:37,985 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:50:37,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [854089388] [2022-04-28 03:50:37,985 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [854089388] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:50:37,985 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:50:37,985 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-04-28 03:50:37,985 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1487590788] [2022-04-28 03:50:37,986 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:50:37,987 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.1538461538461537) internal successors, (41), 12 states have internal predecessors, (41), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2022-04-28 03:50:37,987 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:50:37,987 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 13 states, 13 states have (on average 3.1538461538461537) internal successors, (41), 12 states have internal predecessors, (41), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:38,021 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:38,021 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-04-28 03:50:38,021 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:38,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-04-28 03:50:38,021 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=113, Invalid=393, Unknown=0, NotChecked=0, Total=506 [2022-04-28 03:50:38,022 INFO L87 Difference]: Start difference. First operand 48 states and 52 transitions. Second operand has 13 states, 13 states have (on average 3.1538461538461537) internal successors, (41), 12 states have internal predecessors, (41), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:38,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:38,804 INFO L93 Difference]: Finished difference Result 75 states and 84 transitions. [2022-04-28 03:50:38,804 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-04-28 03:50:38,804 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.1538461538461537) internal successors, (41), 12 states have internal predecessors, (41), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2022-04-28 03:50:38,804 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:50:38,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 3.1538461538461537) internal successors, (41), 12 states have internal predecessors, (41), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:38,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 64 transitions. [2022-04-28 03:50:38,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 13 states have (on average 3.1538461538461537) internal successors, (41), 12 states have internal predecessors, (41), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:38,807 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 64 transitions. [2022-04-28 03:50:38,807 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 13 states and 64 transitions. [2022-04-28 03:50:38,858 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:38,859 INFO L225 Difference]: With dead ends: 75 [2022-04-28 03:50:38,859 INFO L226 Difference]: Without dead ends: 57 [2022-04-28 03:50:38,860 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 54 SyntacticMatches, 3 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 238 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=202, Invalid=854, Unknown=0, NotChecked=0, Total=1056 [2022-04-28 03:50:38,860 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 36 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 365 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 378 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 365 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-28 03:50:38,861 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 66 Invalid, 378 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 365 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-28 03:50:38,861 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-04-28 03:50:39,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 52. [2022-04-28 03:50:39,010 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:50:39,011 INFO L82 GeneralOperation]: Start isEquivalent. First operand 57 states. Second operand has 52 states, 47 states have (on average 1.1063829787234043) internal successors, (52), 47 states have internal predecessors, (52), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:39,011 INFO L74 IsIncluded]: Start isIncluded. First operand 57 states. Second operand has 52 states, 47 states have (on average 1.1063829787234043) internal successors, (52), 47 states have internal predecessors, (52), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:39,011 INFO L87 Difference]: Start difference. First operand 57 states. Second operand has 52 states, 47 states have (on average 1.1063829787234043) internal successors, (52), 47 states have internal predecessors, (52), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:39,014 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:39,014 INFO L93 Difference]: Finished difference Result 57 states and 61 transitions. [2022-04-28 03:50:39,014 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 61 transitions. [2022-04-28 03:50:39,014 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:39,014 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:39,015 INFO L74 IsIncluded]: Start isIncluded. First operand has 52 states, 47 states have (on average 1.1063829787234043) internal successors, (52), 47 states have internal predecessors, (52), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 57 states. [2022-04-28 03:50:39,015 INFO L87 Difference]: Start difference. First operand has 52 states, 47 states have (on average 1.1063829787234043) internal successors, (52), 47 states have internal predecessors, (52), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 57 states. [2022-04-28 03:50:39,016 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:39,016 INFO L93 Difference]: Finished difference Result 57 states and 61 transitions. [2022-04-28 03:50:39,016 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 61 transitions. [2022-04-28 03:50:39,016 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:39,016 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:39,017 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:50:39,017 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:50:39,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 47 states have (on average 1.1063829787234043) internal successors, (52), 47 states have internal predecessors, (52), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:39,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 56 transitions. [2022-04-28 03:50:39,018 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 56 transitions. Word has length 45 [2022-04-28 03:50:39,018 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:50:39,018 INFO L495 AbstractCegarLoop]: Abstraction has 52 states and 56 transitions. [2022-04-28 03:50:39,018 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 3.1538461538461537) internal successors, (41), 12 states have internal predecessors, (41), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:39,019 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 52 states and 56 transitions. [2022-04-28 03:50:39,089 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:39,089 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 56 transitions. [2022-04-28 03:50:39,090 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-04-28 03:50:39,090 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:50:39,090 INFO L195 NwaCegarLoop]: trace histogram [10, 9, 9, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:50:39,106 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2022-04-28 03:50:39,291 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:39,291 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:50:39,292 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:50:39,292 INFO L85 PathProgramCache]: Analyzing trace with hash 763753304, now seen corresponding path program 7 times [2022-04-28 03:50:39,292 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:39,292 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [712368504] [2022-04-28 03:50:41,370 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:50:41,422 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:41,675 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:41,906 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:41,907 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:50:41,910 INFO L85 PathProgramCache]: Analyzing trace with hash 171979367, now seen corresponding path program 1 times [2022-04-28 03:50:41,910 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:50:41,911 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [452812189] [2022-04-28 03:50:41,911 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:41,911 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:50:41,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:41,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:50:41,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:41,969 INFO L290 TraceCheckUtils]: 0: Hoare triple {3275#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {3267#true} is VALID [2022-04-28 03:50:41,969 INFO L290 TraceCheckUtils]: 1: Hoare triple {3267#true} assume true; {3267#true} is VALID [2022-04-28 03:50:41,969 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3267#true} {3267#true} #48#return; {3267#true} is VALID [2022-04-28 03:50:41,970 INFO L272 TraceCheckUtils]: 0: Hoare triple {3267#true} call ULTIMATE.init(); {3275#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:50:41,970 INFO L290 TraceCheckUtils]: 1: Hoare triple {3275#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {3267#true} is VALID [2022-04-28 03:50:41,970 INFO L290 TraceCheckUtils]: 2: Hoare triple {3267#true} assume true; {3267#true} is VALID [2022-04-28 03:50:41,970 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {3267#true} {3267#true} #48#return; {3267#true} is VALID [2022-04-28 03:50:41,970 INFO L272 TraceCheckUtils]: 4: Hoare triple {3267#true} call #t~ret7 := main(); {3267#true} is VALID [2022-04-28 03:50:41,970 INFO L290 TraceCheckUtils]: 5: Hoare triple {3267#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {3272#(= main_~x~0 0)} is VALID [2022-04-28 03:50:41,971 INFO L290 TraceCheckUtils]: 6: Hoare triple {3272#(= main_~x~0 0)} [96] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_58| |v_main_#t~post4_57|)) (.cse1 (= v_main_~x~0_224 v_main_~x~0_223))) (or (and .cse0 .cse1) (and .cse0 .cse1 (not (< v_main_~x~0_224 500000))) (and (< v_main_~x~0_224 v_main_~x~0_223) (< v_main_~x~0_223 500001)))) InVars {main_~x~0=v_main_~x~0_224, main_#t~post4=|v_main_#t~post4_58|} OutVars{main_~x~0=v_main_~x~0_223, main_#t~post4=|v_main_#t~post4_57|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {3273#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:41,971 INFO L290 TraceCheckUtils]: 7: Hoare triple {3273#(<= main_~x~0 500000)} [97] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {3273#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:41,972 INFO L290 TraceCheckUtils]: 8: Hoare triple {3273#(<= main_~x~0 500000)} [98] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_226)) (.cse1 (= v_main_~y~0_138 v_main_~y~0_137))) (or (and (< v_main_~y~0_138 v_main_~y~0_137) .cse0 (< v_main_~y~0_137 (+ v_main_~y~0_138 2 (div (+ 999999 (* v_main_~x~0_226 (- 1))) 2))) (= (+ v_main_~x~0_225 (* v_main_~y~0_138 2)) (+ v_main_~x~0_226 (* v_main_~y~0_137 2)))) (and (= v_main_~x~0_226 v_main_~x~0_225) (= |v_main_#t~post6_90| |v_main_#t~post6_88|) .cse1) (and (= v_main_~x~0_225 v_main_~x~0_226) (or (not (< v_main_~x~0_226 1000000)) (not .cse0)) (= |v_main_#t~post6_88| |v_main_#t~post6_90|) .cse1))) InVars {main_~y~0=v_main_~y~0_138, main_~x~0=v_main_~x~0_226, main_#t~post6=|v_main_#t~post6_90|} OutVars{main_~y~0=v_main_~y~0_137, main_~x~0=v_main_~x~0_225, main_#t~post6=|v_main_#t~post6_88|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {3274#(<= main_~x~0 999999)} is VALID [2022-04-28 03:50:41,973 INFO L290 TraceCheckUtils]: 9: Hoare triple {3274#(<= main_~x~0 999999)} [99] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {3274#(<= main_~x~0 999999)} is VALID [2022-04-28 03:50:41,973 INFO L290 TraceCheckUtils]: 10: Hoare triple {3274#(<= main_~x~0 999999)} [100] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_228 v_main_~x~0_227)) (.cse1 (= |v_main_#t~post5_47| |v_main_#t~post5_46|)) (.cse2 (<= 500000 v_main_~x~0_228))) (or (and .cse0 .cse1 (= v_main_~y~0_140 v_main_~y~0_139) (= |v_main_#t~post6_93| |v_main_#t~post6_89|)) (and .cse0 (or (not .cse2) (not (< v_main_~x~0_228 750000))) (= v_main_~y~0_139 v_main_~y~0_140) .cse1 (= |v_main_#t~post6_89| |v_main_#t~post6_93|)) (and (= (+ v_main_~x~0_228 v_main_~y~0_139) (+ v_main_~x~0_227 v_main_~y~0_140)) (< v_main_~x~0_227 750001) (< v_main_~x~0_228 v_main_~x~0_227) .cse2))) InVars {main_~y~0=v_main_~y~0_140, main_#t~post5=|v_main_#t~post5_47|, main_~x~0=v_main_~x~0_228, main_#t~post6=|v_main_#t~post6_93|} OutVars{main_~y~0=v_main_~y~0_139, main_#t~post5=|v_main_#t~post5_46|, main_~x~0=v_main_~x~0_227, main_#t~post6=|v_main_#t~post6_89|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {3274#(<= main_~x~0 999999)} is VALID [2022-04-28 03:50:41,974 INFO L290 TraceCheckUtils]: 11: Hoare triple {3274#(<= main_~x~0 999999)} [95] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {3268#false} is VALID [2022-04-28 03:50:41,974 INFO L272 TraceCheckUtils]: 12: Hoare triple {3268#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {3268#false} is VALID [2022-04-28 03:50:41,974 INFO L290 TraceCheckUtils]: 13: Hoare triple {3268#false} ~cond := #in~cond; {3268#false} is VALID [2022-04-28 03:50:41,974 INFO L290 TraceCheckUtils]: 14: Hoare triple {3268#false} assume 0 == ~cond; {3268#false} is VALID [2022-04-28 03:50:41,974 INFO L290 TraceCheckUtils]: 15: Hoare triple {3268#false} assume !false; {3268#false} is VALID [2022-04-28 03:50:41,974 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:50:41,975 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:50:41,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [452812189] [2022-04-28 03:50:41,975 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [452812189] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:50:41,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2093099173] [2022-04-28 03:50:41,975 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:41,975 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:41,975 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:50:41,976 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:50:41,987 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-04-28 03:50:42,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:42,013 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:50:42,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:42,022 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:50:42,239 INFO L272 TraceCheckUtils]: 0: Hoare triple {3267#true} call ULTIMATE.init(); {3267#true} is VALID [2022-04-28 03:50:42,240 INFO L290 TraceCheckUtils]: 1: Hoare triple {3267#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {3267#true} is VALID [2022-04-28 03:50:42,240 INFO L290 TraceCheckUtils]: 2: Hoare triple {3267#true} assume true; {3267#true} is VALID [2022-04-28 03:50:42,240 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {3267#true} {3267#true} #48#return; {3267#true} is VALID [2022-04-28 03:50:42,240 INFO L272 TraceCheckUtils]: 4: Hoare triple {3267#true} call #t~ret7 := main(); {3267#true} is VALID [2022-04-28 03:50:42,241 INFO L290 TraceCheckUtils]: 5: Hoare triple {3267#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {3294#(<= main_~x~0 0)} is VALID [2022-04-28 03:50:42,241 INFO L290 TraceCheckUtils]: 6: Hoare triple {3294#(<= main_~x~0 0)} [96] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_58| |v_main_#t~post4_57|)) (.cse1 (= v_main_~x~0_224 v_main_~x~0_223))) (or (and .cse0 .cse1) (and .cse0 .cse1 (not (< v_main_~x~0_224 500000))) (and (< v_main_~x~0_224 v_main_~x~0_223) (< v_main_~x~0_223 500001)))) InVars {main_~x~0=v_main_~x~0_224, main_#t~post4=|v_main_#t~post4_58|} OutVars{main_~x~0=v_main_~x~0_223, main_#t~post4=|v_main_#t~post4_57|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {3273#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:42,242 INFO L290 TraceCheckUtils]: 7: Hoare triple {3273#(<= main_~x~0 500000)} [97] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {3273#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:42,242 INFO L290 TraceCheckUtils]: 8: Hoare triple {3273#(<= main_~x~0 500000)} [98] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_226)) (.cse1 (= v_main_~y~0_138 v_main_~y~0_137))) (or (and (< v_main_~y~0_138 v_main_~y~0_137) .cse0 (< v_main_~y~0_137 (+ v_main_~y~0_138 2 (div (+ 999999 (* v_main_~x~0_226 (- 1))) 2))) (= (+ v_main_~x~0_225 (* v_main_~y~0_138 2)) (+ v_main_~x~0_226 (* v_main_~y~0_137 2)))) (and (= v_main_~x~0_226 v_main_~x~0_225) (= |v_main_#t~post6_90| |v_main_#t~post6_88|) .cse1) (and (= v_main_~x~0_225 v_main_~x~0_226) (or (not (< v_main_~x~0_226 1000000)) (not .cse0)) (= |v_main_#t~post6_88| |v_main_#t~post6_90|) .cse1))) InVars {main_~y~0=v_main_~y~0_138, main_~x~0=v_main_~x~0_226, main_#t~post6=|v_main_#t~post6_90|} OutVars{main_~y~0=v_main_~y~0_137, main_~x~0=v_main_~x~0_225, main_#t~post6=|v_main_#t~post6_88|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {3273#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:42,243 INFO L290 TraceCheckUtils]: 9: Hoare triple {3273#(<= main_~x~0 500000)} [99] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {3273#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:42,243 INFO L290 TraceCheckUtils]: 10: Hoare triple {3273#(<= main_~x~0 500000)} [100] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_228 v_main_~x~0_227)) (.cse1 (= |v_main_#t~post5_47| |v_main_#t~post5_46|)) (.cse2 (<= 500000 v_main_~x~0_228))) (or (and .cse0 .cse1 (= v_main_~y~0_140 v_main_~y~0_139) (= |v_main_#t~post6_93| |v_main_#t~post6_89|)) (and .cse0 (or (not .cse2) (not (< v_main_~x~0_228 750000))) (= v_main_~y~0_139 v_main_~y~0_140) .cse1 (= |v_main_#t~post6_89| |v_main_#t~post6_93|)) (and (= (+ v_main_~x~0_228 v_main_~y~0_139) (+ v_main_~x~0_227 v_main_~y~0_140)) (< v_main_~x~0_227 750001) (< v_main_~x~0_228 v_main_~x~0_227) .cse2))) InVars {main_~y~0=v_main_~y~0_140, main_#t~post5=|v_main_#t~post5_47|, main_~x~0=v_main_~x~0_228, main_#t~post6=|v_main_#t~post6_93|} OutVars{main_~y~0=v_main_~y~0_139, main_#t~post5=|v_main_#t~post5_46|, main_~x~0=v_main_~x~0_227, main_#t~post6=|v_main_#t~post6_89|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {3310#(< main_~x~0 750001)} is VALID [2022-04-28 03:50:42,244 INFO L290 TraceCheckUtils]: 11: Hoare triple {3310#(< main_~x~0 750001)} [95] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {3268#false} is VALID [2022-04-28 03:50:42,244 INFO L272 TraceCheckUtils]: 12: Hoare triple {3268#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {3268#false} is VALID [2022-04-28 03:50:42,244 INFO L290 TraceCheckUtils]: 13: Hoare triple {3268#false} ~cond := #in~cond; {3268#false} is VALID [2022-04-28 03:50:42,244 INFO L290 TraceCheckUtils]: 14: Hoare triple {3268#false} assume 0 == ~cond; {3268#false} is VALID [2022-04-28 03:50:42,244 INFO L290 TraceCheckUtils]: 15: Hoare triple {3268#false} assume !false; {3268#false} is VALID [2022-04-28 03:50:42,244 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:42,244 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:50:42,767 INFO L290 TraceCheckUtils]: 15: Hoare triple {3268#false} assume !false; {3268#false} is VALID [2022-04-28 03:50:42,768 INFO L290 TraceCheckUtils]: 14: Hoare triple {3329#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {3268#false} is VALID [2022-04-28 03:50:42,768 INFO L290 TraceCheckUtils]: 13: Hoare triple {3333#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {3329#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:50:42,769 INFO L272 TraceCheckUtils]: 12: Hoare triple {3337#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {3333#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:50:42,769 INFO L290 TraceCheckUtils]: 11: Hoare triple {3341#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [95] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {3337#(= main_~x~0 1000000)} is VALID [2022-04-28 03:50:42,770 INFO L290 TraceCheckUtils]: 10: Hoare triple {3341#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [100] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_228 v_main_~x~0_227)) (.cse1 (= |v_main_#t~post5_47| |v_main_#t~post5_46|)) (.cse2 (<= 500000 v_main_~x~0_228))) (or (and .cse0 .cse1 (= v_main_~y~0_140 v_main_~y~0_139) (= |v_main_#t~post6_93| |v_main_#t~post6_89|)) (and .cse0 (or (not .cse2) (not (< v_main_~x~0_228 750000))) (= v_main_~y~0_139 v_main_~y~0_140) .cse1 (= |v_main_#t~post6_89| |v_main_#t~post6_93|)) (and (= (+ v_main_~x~0_228 v_main_~y~0_139) (+ v_main_~x~0_227 v_main_~y~0_140)) (< v_main_~x~0_227 750001) (< v_main_~x~0_228 v_main_~x~0_227) .cse2))) InVars {main_~y~0=v_main_~y~0_140, main_#t~post5=|v_main_#t~post5_47|, main_~x~0=v_main_~x~0_228, main_#t~post6=|v_main_#t~post6_93|} OutVars{main_~y~0=v_main_~y~0_139, main_#t~post5=|v_main_#t~post5_46|, main_~x~0=v_main_~x~0_227, main_#t~post6=|v_main_#t~post6_89|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {3341#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:42,771 INFO L290 TraceCheckUtils]: 9: Hoare triple {3341#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [99] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {3341#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:42,772 INFO L290 TraceCheckUtils]: 8: Hoare triple {3351#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [98] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_226)) (.cse1 (= v_main_~y~0_138 v_main_~y~0_137))) (or (and (< v_main_~y~0_138 v_main_~y~0_137) .cse0 (< v_main_~y~0_137 (+ v_main_~y~0_138 2 (div (+ 999999 (* v_main_~x~0_226 (- 1))) 2))) (= (+ v_main_~x~0_225 (* v_main_~y~0_138 2)) (+ v_main_~x~0_226 (* v_main_~y~0_137 2)))) (and (= v_main_~x~0_226 v_main_~x~0_225) (= |v_main_#t~post6_90| |v_main_#t~post6_88|) .cse1) (and (= v_main_~x~0_225 v_main_~x~0_226) (or (not (< v_main_~x~0_226 1000000)) (not .cse0)) (= |v_main_#t~post6_88| |v_main_#t~post6_90|) .cse1))) InVars {main_~y~0=v_main_~y~0_138, main_~x~0=v_main_~x~0_226, main_#t~post6=|v_main_#t~post6_90|} OutVars{main_~y~0=v_main_~y~0_137, main_~x~0=v_main_~x~0_225, main_#t~post6=|v_main_#t~post6_88|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {3341#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:42,773 INFO L290 TraceCheckUtils]: 7: Hoare triple {3351#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [97] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {3351#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:50:42,774 INFO L290 TraceCheckUtils]: 6: Hoare triple {3351#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [96] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_58| |v_main_#t~post4_57|)) (.cse1 (= v_main_~x~0_224 v_main_~x~0_223))) (or (and .cse0 .cse1) (and .cse0 .cse1 (not (< v_main_~x~0_224 500000))) (and (< v_main_~x~0_224 v_main_~x~0_223) (< v_main_~x~0_223 500001)))) InVars {main_~x~0=v_main_~x~0_224, main_#t~post4=|v_main_#t~post4_58|} OutVars{main_~x~0=v_main_~x~0_223, main_#t~post4=|v_main_#t~post4_57|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {3351#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:50:42,775 INFO L290 TraceCheckUtils]: 5: Hoare triple {3267#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {3351#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:50:42,775 INFO L272 TraceCheckUtils]: 4: Hoare triple {3267#true} call #t~ret7 := main(); {3267#true} is VALID [2022-04-28 03:50:42,775 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {3267#true} {3267#true} #48#return; {3267#true} is VALID [2022-04-28 03:50:42,775 INFO L290 TraceCheckUtils]: 2: Hoare triple {3267#true} assume true; {3267#true} is VALID [2022-04-28 03:50:42,775 INFO L290 TraceCheckUtils]: 1: Hoare triple {3267#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {3267#true} is VALID [2022-04-28 03:50:42,775 INFO L272 TraceCheckUtils]: 0: Hoare triple {3267#true} call ULTIMATE.init(); {3267#true} is VALID [2022-04-28 03:50:42,776 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:42,776 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2093099173] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:50:42,776 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:50:42,776 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:50:43,098 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:50:43,098 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [712368504] [2022-04-28 03:50:43,098 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [712368504] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:50:43,098 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:50:43,098 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-04-28 03:50:43,098 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1563204151] [2022-04-28 03:50:43,098 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:50:43,099 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.2142857142857144) internal successors, (45), 13 states have internal predecessors, (45), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 49 [2022-04-28 03:50:43,099 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:50:43,099 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 3.2142857142857144) internal successors, (45), 13 states have internal predecessors, (45), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:43,133 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:43,133 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-04-28 03:50:43,133 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:43,133 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-04-28 03:50:43,133 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=118, Invalid=434, Unknown=0, NotChecked=0, Total=552 [2022-04-28 03:50:43,134 INFO L87 Difference]: Start difference. First operand 52 states and 56 transitions. Second operand has 14 states, 14 states have (on average 3.2142857142857144) internal successors, (45), 13 states have internal predecessors, (45), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:44,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:44,041 INFO L93 Difference]: Finished difference Result 79 states and 88 transitions. [2022-04-28 03:50:44,041 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-04-28 03:50:44,041 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.2142857142857144) internal successors, (45), 13 states have internal predecessors, (45), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 49 [2022-04-28 03:50:44,041 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:50:44,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.2142857142857144) internal successors, (45), 13 states have internal predecessors, (45), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:44,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 68 transitions. [2022-04-28 03:50:44,043 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 3.2142857142857144) internal successors, (45), 13 states have internal predecessors, (45), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:44,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 68 transitions. [2022-04-28 03:50:44,044 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 14 states and 68 transitions. [2022-04-28 03:50:44,107 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 68 edges. 68 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:44,109 INFO L225 Difference]: With dead ends: 79 [2022-04-28 03:50:44,109 INFO L226 Difference]: Without dead ends: 61 [2022-04-28 03:50:44,109 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 93 GetRequests, 58 SyntacticMatches, 2 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 261 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=215, Invalid=975, Unknown=0, NotChecked=0, Total=1190 [2022-04-28 03:50:44,110 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 39 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 404 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 67 SdHoareTripleChecker+Invalid, 418 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 404 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-04-28 03:50:44,111 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 67 Invalid, 418 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 404 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-04-28 03:50:44,112 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2022-04-28 03:50:44,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 56. [2022-04-28 03:50:44,288 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:50:44,288 INFO L82 GeneralOperation]: Start isEquivalent. First operand 61 states. Second operand has 56 states, 51 states have (on average 1.0980392156862746) internal successors, (56), 51 states have internal predecessors, (56), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:44,288 INFO L74 IsIncluded]: Start isIncluded. First operand 61 states. Second operand has 56 states, 51 states have (on average 1.0980392156862746) internal successors, (56), 51 states have internal predecessors, (56), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:44,288 INFO L87 Difference]: Start difference. First operand 61 states. Second operand has 56 states, 51 states have (on average 1.0980392156862746) internal successors, (56), 51 states have internal predecessors, (56), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:44,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:44,290 INFO L93 Difference]: Finished difference Result 61 states and 65 transitions. [2022-04-28 03:50:44,290 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 65 transitions. [2022-04-28 03:50:44,290 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:44,291 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:44,291 INFO L74 IsIncluded]: Start isIncluded. First operand has 56 states, 51 states have (on average 1.0980392156862746) internal successors, (56), 51 states have internal predecessors, (56), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 61 states. [2022-04-28 03:50:44,291 INFO L87 Difference]: Start difference. First operand has 56 states, 51 states have (on average 1.0980392156862746) internal successors, (56), 51 states have internal predecessors, (56), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 61 states. [2022-04-28 03:50:44,292 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:44,292 INFO L93 Difference]: Finished difference Result 61 states and 65 transitions. [2022-04-28 03:50:44,292 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 65 transitions. [2022-04-28 03:50:44,293 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:44,293 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:44,293 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:50:44,293 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:50:44,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 51 states have (on average 1.0980392156862746) internal successors, (56), 51 states have internal predecessors, (56), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:44,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 60 transitions. [2022-04-28 03:50:44,294 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 60 transitions. Word has length 49 [2022-04-28 03:50:44,294 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:50:44,294 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 60 transitions. [2022-04-28 03:50:44,295 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.2142857142857144) internal successors, (45), 13 states have internal predecessors, (45), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:44,295 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 56 states and 60 transitions. [2022-04-28 03:50:44,380 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:44,380 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 60 transitions. [2022-04-28 03:50:44,381 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-04-28 03:50:44,381 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:50:44,381 INFO L195 NwaCegarLoop]: trace histogram [11, 10, 10, 9, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:50:44,397 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-04-28 03:50:44,581 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-04-28 03:50:44,581 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:50:44,582 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:50:44,582 INFO L85 PathProgramCache]: Analyzing trace with hash -178233681, now seen corresponding path program 8 times [2022-04-28 03:50:44,582 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:44,582 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [931505418] [2022-04-28 03:50:44,710 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:44,974 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:48,088 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:50:48,201 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:48,202 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:50:48,206 INFO L85 PathProgramCache]: Analyzing trace with hash -187595609, now seen corresponding path program 1 times [2022-04-28 03:50:48,206 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:50:48,206 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [64775010] [2022-04-28 03:50:48,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:48,206 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:50:48,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:48,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:50:48,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:48,263 INFO L290 TraceCheckUtils]: 0: Hoare triple {3811#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {3803#true} is VALID [2022-04-28 03:50:48,263 INFO L290 TraceCheckUtils]: 1: Hoare triple {3803#true} assume true; {3803#true} is VALID [2022-04-28 03:50:48,263 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3803#true} {3803#true} #48#return; {3803#true} is VALID [2022-04-28 03:50:48,263 INFO L272 TraceCheckUtils]: 0: Hoare triple {3803#true} call ULTIMATE.init(); {3811#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:50:48,263 INFO L290 TraceCheckUtils]: 1: Hoare triple {3811#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {3803#true} is VALID [2022-04-28 03:50:48,264 INFO L290 TraceCheckUtils]: 2: Hoare triple {3803#true} assume true; {3803#true} is VALID [2022-04-28 03:50:48,264 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {3803#true} {3803#true} #48#return; {3803#true} is VALID [2022-04-28 03:50:48,264 INFO L272 TraceCheckUtils]: 4: Hoare triple {3803#true} call #t~ret7 := main(); {3803#true} is VALID [2022-04-28 03:50:48,264 INFO L290 TraceCheckUtils]: 5: Hoare triple {3803#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {3808#(= main_~x~0 0)} is VALID [2022-04-28 03:50:48,265 INFO L290 TraceCheckUtils]: 6: Hoare triple {3808#(= main_~x~0 0)} [102] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_65| |v_main_#t~post4_64|)) (.cse1 (= v_main_~x~0_258 v_main_~x~0_257))) (or (and (< v_main_~x~0_257 500001) (< v_main_~x~0_258 v_main_~x~0_257)) (and .cse0 .cse1) (and (not (< v_main_~x~0_258 500000)) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_258, main_#t~post4=|v_main_#t~post4_65|} OutVars{main_~x~0=v_main_~x~0_257, main_#t~post4=|v_main_#t~post4_64|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {3809#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:48,265 INFO L290 TraceCheckUtils]: 7: Hoare triple {3809#(<= main_~x~0 500000)} [103] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {3809#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:48,266 INFO L290 TraceCheckUtils]: 8: Hoare triple {3809#(<= main_~x~0 500000)} [104] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_103| |v_main_#t~post6_101|)) (.cse2 (= v_main_~y~0_162 v_main_~y~0_161)) (.cse1 (<= 750000 v_main_~x~0_260))) (or (and (= v_main_~x~0_259 v_main_~x~0_260) .cse0 (or (not (< v_main_~x~0_260 1000000)) (not .cse1)) .cse2) (and .cse0 .cse2 (= v_main_~x~0_260 v_main_~x~0_259)) (and (< v_main_~y~0_161 (+ (div (+ 999999 (* v_main_~x~0_260 (- 1))) 2) v_main_~y~0_162 2)) (< v_main_~y~0_162 v_main_~y~0_161) (= (+ (* v_main_~y~0_161 2) v_main_~x~0_260) (+ v_main_~x~0_259 (* v_main_~y~0_162 2))) .cse1))) InVars {main_~y~0=v_main_~y~0_162, main_~x~0=v_main_~x~0_260, main_#t~post6=|v_main_#t~post6_103|} OutVars{main_~y~0=v_main_~y~0_161, main_~x~0=v_main_~x~0_259, main_#t~post6=|v_main_#t~post6_101|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {3809#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:48,267 INFO L290 TraceCheckUtils]: 9: Hoare triple {3809#(<= main_~x~0 500000)} [105] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {3809#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:48,267 INFO L290 TraceCheckUtils]: 10: Hoare triple {3809#(<= main_~x~0 500000)} [106] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_262)) (.cse2 (= v_main_~y~0_164 v_main_~y~0_163)) (.cse3 (= |v_main_#t~post5_53| |v_main_#t~post5_52|)) (.cse4 (= v_main_~x~0_262 v_main_~x~0_261)) (.cse5 (= |v_main_#t~post6_106| |v_main_#t~post6_102|))) (or (let ((.cse0 (+ v_main_~x~0_262 v_main_~y~0_163))) (and (= (+ v_main_~x~0_261 v_main_~y~0_164) .cse0) (< v_main_~y~0_164 v_main_~y~0_163) .cse1 (< .cse0 (+ 750001 v_main_~y~0_164)))) (and .cse2 .cse3 .cse4 .cse5) (and (or (not .cse1) (not (< v_main_~x~0_262 750000))) .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_164, main_#t~post5=|v_main_#t~post5_53|, main_~x~0=v_main_~x~0_262, main_#t~post6=|v_main_#t~post6_106|} OutVars{main_~y~0=v_main_~y~0_163, main_#t~post5=|v_main_#t~post5_52|, main_~x~0=v_main_~x~0_261, main_#t~post6=|v_main_#t~post6_102|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {3810#(<= main_~x~0 750000)} is VALID [2022-04-28 03:50:48,268 INFO L290 TraceCheckUtils]: 11: Hoare triple {3810#(<= main_~x~0 750000)} [101] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {3804#false} is VALID [2022-04-28 03:50:48,268 INFO L272 TraceCheckUtils]: 12: Hoare triple {3804#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {3804#false} is VALID [2022-04-28 03:50:48,268 INFO L290 TraceCheckUtils]: 13: Hoare triple {3804#false} ~cond := #in~cond; {3804#false} is VALID [2022-04-28 03:50:48,268 INFO L290 TraceCheckUtils]: 14: Hoare triple {3804#false} assume 0 == ~cond; {3804#false} is VALID [2022-04-28 03:50:48,268 INFO L290 TraceCheckUtils]: 15: Hoare triple {3804#false} assume !false; {3804#false} is VALID [2022-04-28 03:50:48,268 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:48,268 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:50:48,269 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [64775010] [2022-04-28 03:50:48,269 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [64775010] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:50:48,269 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [372771136] [2022-04-28 03:50:48,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:48,269 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:48,269 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:50:48,270 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:50:48,270 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-04-28 03:50:48,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:48,301 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:50:48,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:48,311 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:50:48,487 INFO L272 TraceCheckUtils]: 0: Hoare triple {3803#true} call ULTIMATE.init(); {3803#true} is VALID [2022-04-28 03:50:48,487 INFO L290 TraceCheckUtils]: 1: Hoare triple {3803#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {3803#true} is VALID [2022-04-28 03:50:48,487 INFO L290 TraceCheckUtils]: 2: Hoare triple {3803#true} assume true; {3803#true} is VALID [2022-04-28 03:50:48,487 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {3803#true} {3803#true} #48#return; {3803#true} is VALID [2022-04-28 03:50:48,487 INFO L272 TraceCheckUtils]: 4: Hoare triple {3803#true} call #t~ret7 := main(); {3803#true} is VALID [2022-04-28 03:50:48,488 INFO L290 TraceCheckUtils]: 5: Hoare triple {3803#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {3830#(<= main_~x~0 0)} is VALID [2022-04-28 03:50:48,488 INFO L290 TraceCheckUtils]: 6: Hoare triple {3830#(<= main_~x~0 0)} [102] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_65| |v_main_#t~post4_64|)) (.cse1 (= v_main_~x~0_258 v_main_~x~0_257))) (or (and (< v_main_~x~0_257 500001) (< v_main_~x~0_258 v_main_~x~0_257)) (and .cse0 .cse1) (and (not (< v_main_~x~0_258 500000)) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_258, main_#t~post4=|v_main_#t~post4_65|} OutVars{main_~x~0=v_main_~x~0_257, main_#t~post4=|v_main_#t~post4_64|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {3809#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:48,488 INFO L290 TraceCheckUtils]: 7: Hoare triple {3809#(<= main_~x~0 500000)} [103] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {3809#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:48,489 INFO L290 TraceCheckUtils]: 8: Hoare triple {3809#(<= main_~x~0 500000)} [104] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_103| |v_main_#t~post6_101|)) (.cse2 (= v_main_~y~0_162 v_main_~y~0_161)) (.cse1 (<= 750000 v_main_~x~0_260))) (or (and (= v_main_~x~0_259 v_main_~x~0_260) .cse0 (or (not (< v_main_~x~0_260 1000000)) (not .cse1)) .cse2) (and .cse0 .cse2 (= v_main_~x~0_260 v_main_~x~0_259)) (and (< v_main_~y~0_161 (+ (div (+ 999999 (* v_main_~x~0_260 (- 1))) 2) v_main_~y~0_162 2)) (< v_main_~y~0_162 v_main_~y~0_161) (= (+ (* v_main_~y~0_161 2) v_main_~x~0_260) (+ v_main_~x~0_259 (* v_main_~y~0_162 2))) .cse1))) InVars {main_~y~0=v_main_~y~0_162, main_~x~0=v_main_~x~0_260, main_#t~post6=|v_main_#t~post6_103|} OutVars{main_~y~0=v_main_~y~0_161, main_~x~0=v_main_~x~0_259, main_#t~post6=|v_main_#t~post6_101|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {3809#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:48,490 INFO L290 TraceCheckUtils]: 9: Hoare triple {3809#(<= main_~x~0 500000)} [105] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {3809#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:48,490 INFO L290 TraceCheckUtils]: 10: Hoare triple {3809#(<= main_~x~0 500000)} [106] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_262)) (.cse2 (= v_main_~y~0_164 v_main_~y~0_163)) (.cse3 (= |v_main_#t~post5_53| |v_main_#t~post5_52|)) (.cse4 (= v_main_~x~0_262 v_main_~x~0_261)) (.cse5 (= |v_main_#t~post6_106| |v_main_#t~post6_102|))) (or (let ((.cse0 (+ v_main_~x~0_262 v_main_~y~0_163))) (and (= (+ v_main_~x~0_261 v_main_~y~0_164) .cse0) (< v_main_~y~0_164 v_main_~y~0_163) .cse1 (< .cse0 (+ 750001 v_main_~y~0_164)))) (and .cse2 .cse3 .cse4 .cse5) (and (or (not .cse1) (not (< v_main_~x~0_262 750000))) .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_164, main_#t~post5=|v_main_#t~post5_53|, main_~x~0=v_main_~x~0_262, main_#t~post6=|v_main_#t~post6_106|} OutVars{main_~y~0=v_main_~y~0_163, main_#t~post5=|v_main_#t~post5_52|, main_~x~0=v_main_~x~0_261, main_#t~post6=|v_main_#t~post6_102|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {3810#(<= main_~x~0 750000)} is VALID [2022-04-28 03:50:48,491 INFO L290 TraceCheckUtils]: 11: Hoare triple {3810#(<= main_~x~0 750000)} [101] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {3804#false} is VALID [2022-04-28 03:50:48,491 INFO L272 TraceCheckUtils]: 12: Hoare triple {3804#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {3804#false} is VALID [2022-04-28 03:50:48,491 INFO L290 TraceCheckUtils]: 13: Hoare triple {3804#false} ~cond := #in~cond; {3804#false} is VALID [2022-04-28 03:50:48,491 INFO L290 TraceCheckUtils]: 14: Hoare triple {3804#false} assume 0 == ~cond; {3804#false} is VALID [2022-04-28 03:50:48,491 INFO L290 TraceCheckUtils]: 15: Hoare triple {3804#false} assume !false; {3804#false} is VALID [2022-04-28 03:50:48,491 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:48,491 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:50:48,922 INFO L290 TraceCheckUtils]: 15: Hoare triple {3804#false} assume !false; {3804#false} is VALID [2022-04-28 03:50:48,922 INFO L290 TraceCheckUtils]: 14: Hoare triple {3864#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {3804#false} is VALID [2022-04-28 03:50:48,923 INFO L290 TraceCheckUtils]: 13: Hoare triple {3868#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {3864#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:50:48,924 INFO L272 TraceCheckUtils]: 12: Hoare triple {3872#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {3868#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:50:48,924 INFO L290 TraceCheckUtils]: 11: Hoare triple {3876#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [101] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {3872#(= main_~x~0 1000000)} is VALID [2022-04-28 03:50:48,925 INFO L290 TraceCheckUtils]: 10: Hoare triple {3876#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [106] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_262)) (.cse2 (= v_main_~y~0_164 v_main_~y~0_163)) (.cse3 (= |v_main_#t~post5_53| |v_main_#t~post5_52|)) (.cse4 (= v_main_~x~0_262 v_main_~x~0_261)) (.cse5 (= |v_main_#t~post6_106| |v_main_#t~post6_102|))) (or (let ((.cse0 (+ v_main_~x~0_262 v_main_~y~0_163))) (and (= (+ v_main_~x~0_261 v_main_~y~0_164) .cse0) (< v_main_~y~0_164 v_main_~y~0_163) .cse1 (< .cse0 (+ 750001 v_main_~y~0_164)))) (and .cse2 .cse3 .cse4 .cse5) (and (or (not .cse1) (not (< v_main_~x~0_262 750000))) .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_164, main_#t~post5=|v_main_#t~post5_53|, main_~x~0=v_main_~x~0_262, main_#t~post6=|v_main_#t~post6_106|} OutVars{main_~y~0=v_main_~y~0_163, main_#t~post5=|v_main_#t~post5_52|, main_~x~0=v_main_~x~0_261, main_#t~post6=|v_main_#t~post6_102|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {3876#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:48,925 INFO L290 TraceCheckUtils]: 9: Hoare triple {3876#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [105] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {3876#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:48,926 INFO L290 TraceCheckUtils]: 8: Hoare triple {3886#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [104] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_103| |v_main_#t~post6_101|)) (.cse2 (= v_main_~y~0_162 v_main_~y~0_161)) (.cse1 (<= 750000 v_main_~x~0_260))) (or (and (= v_main_~x~0_259 v_main_~x~0_260) .cse0 (or (not (< v_main_~x~0_260 1000000)) (not .cse1)) .cse2) (and .cse0 .cse2 (= v_main_~x~0_260 v_main_~x~0_259)) (and (< v_main_~y~0_161 (+ (div (+ 999999 (* v_main_~x~0_260 (- 1))) 2) v_main_~y~0_162 2)) (< v_main_~y~0_162 v_main_~y~0_161) (= (+ (* v_main_~y~0_161 2) v_main_~x~0_260) (+ v_main_~x~0_259 (* v_main_~y~0_162 2))) .cse1))) InVars {main_~y~0=v_main_~y~0_162, main_~x~0=v_main_~x~0_260, main_#t~post6=|v_main_#t~post6_103|} OutVars{main_~y~0=v_main_~y~0_161, main_~x~0=v_main_~x~0_259, main_#t~post6=|v_main_#t~post6_101|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {3876#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:48,927 INFO L290 TraceCheckUtils]: 7: Hoare triple {3886#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [103] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {3886#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:50:48,928 INFO L290 TraceCheckUtils]: 6: Hoare triple {3886#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [102] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_65| |v_main_#t~post4_64|)) (.cse1 (= v_main_~x~0_258 v_main_~x~0_257))) (or (and (< v_main_~x~0_257 500001) (< v_main_~x~0_258 v_main_~x~0_257)) (and .cse0 .cse1) (and (not (< v_main_~x~0_258 500000)) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_258, main_#t~post4=|v_main_#t~post4_65|} OutVars{main_~x~0=v_main_~x~0_257, main_#t~post4=|v_main_#t~post4_64|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {3886#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:50:48,929 INFO L290 TraceCheckUtils]: 5: Hoare triple {3803#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {3886#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:50:48,929 INFO L272 TraceCheckUtils]: 4: Hoare triple {3803#true} call #t~ret7 := main(); {3803#true} is VALID [2022-04-28 03:50:48,929 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {3803#true} {3803#true} #48#return; {3803#true} is VALID [2022-04-28 03:50:48,929 INFO L290 TraceCheckUtils]: 2: Hoare triple {3803#true} assume true; {3803#true} is VALID [2022-04-28 03:50:48,929 INFO L290 TraceCheckUtils]: 1: Hoare triple {3803#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {3803#true} is VALID [2022-04-28 03:50:48,929 INFO L272 TraceCheckUtils]: 0: Hoare triple {3803#true} call ULTIMATE.init(); {3803#true} is VALID [2022-04-28 03:50:48,929 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:48,929 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [372771136] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:50:48,929 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:50:48,929 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:50:49,251 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:50:49,252 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [931505418] [2022-04-28 03:50:49,252 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [931505418] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:50:49,252 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:50:49,252 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2022-04-28 03:50:49,252 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [212918537] [2022-04-28 03:50:49,252 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:50:49,252 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.2666666666666666) internal successors, (49), 14 states have internal predecessors, (49), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 53 [2022-04-28 03:50:49,253 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:50:49,253 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 3.2666666666666666) internal successors, (49), 14 states have internal predecessors, (49), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:49,291 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:49,291 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-04-28 03:50:49,291 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:49,291 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-04-28 03:50:49,291 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=105, Invalid=447, Unknown=0, NotChecked=0, Total=552 [2022-04-28 03:50:49,292 INFO L87 Difference]: Start difference. First operand 56 states and 60 transitions. Second operand has 15 states, 15 states have (on average 3.2666666666666666) internal successors, (49), 14 states have internal predecessors, (49), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:50,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:50,358 INFO L93 Difference]: Finished difference Result 83 states and 92 transitions. [2022-04-28 03:50:50,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-04-28 03:50:50,359 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.2666666666666666) internal successors, (49), 14 states have internal predecessors, (49), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 53 [2022-04-28 03:50:50,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:50:50,359 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 3.2666666666666666) internal successors, (49), 14 states have internal predecessors, (49), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:50,360 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 72 transitions. [2022-04-28 03:50:50,360 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 3.2666666666666666) internal successors, (49), 14 states have internal predecessors, (49), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:50,361 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 72 transitions. [2022-04-28 03:50:50,362 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 15 states and 72 transitions. [2022-04-28 03:50:50,423 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:50,424 INFO L225 Difference]: With dead ends: 83 [2022-04-28 03:50:50,424 INFO L226 Difference]: Without dead ends: 65 [2022-04-28 03:50:50,425 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 61 SyntacticMatches, 3 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 262 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=198, Invalid=1062, Unknown=0, NotChecked=0, Total=1260 [2022-04-28 03:50:50,425 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 42 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 490 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 73 SdHoareTripleChecker+Invalid, 505 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 490 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-28 03:50:50,425 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 73 Invalid, 505 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 490 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-28 03:50:50,426 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-04-28 03:50:50,630 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 60. [2022-04-28 03:50:50,630 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:50:50,630 INFO L82 GeneralOperation]: Start isEquivalent. First operand 65 states. Second operand has 60 states, 55 states have (on average 1.0909090909090908) internal successors, (60), 55 states have internal predecessors, (60), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:50,630 INFO L74 IsIncluded]: Start isIncluded. First operand 65 states. Second operand has 60 states, 55 states have (on average 1.0909090909090908) internal successors, (60), 55 states have internal predecessors, (60), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:50,630 INFO L87 Difference]: Start difference. First operand 65 states. Second operand has 60 states, 55 states have (on average 1.0909090909090908) internal successors, (60), 55 states have internal predecessors, (60), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:50,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:50,632 INFO L93 Difference]: Finished difference Result 65 states and 69 transitions. [2022-04-28 03:50:50,632 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 69 transitions. [2022-04-28 03:50:50,632 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:50,632 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:50,632 INFO L74 IsIncluded]: Start isIncluded. First operand has 60 states, 55 states have (on average 1.0909090909090908) internal successors, (60), 55 states have internal predecessors, (60), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 65 states. [2022-04-28 03:50:50,632 INFO L87 Difference]: Start difference. First operand has 60 states, 55 states have (on average 1.0909090909090908) internal successors, (60), 55 states have internal predecessors, (60), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 65 states. [2022-04-28 03:50:50,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:50,633 INFO L93 Difference]: Finished difference Result 65 states and 69 transitions. [2022-04-28 03:50:50,633 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 69 transitions. [2022-04-28 03:50:50,634 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:50,634 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:50,634 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:50:50,634 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:50:50,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 55 states have (on average 1.0909090909090908) internal successors, (60), 55 states have internal predecessors, (60), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:50,635 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 64 transitions. [2022-04-28 03:50:50,635 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 64 transitions. Word has length 53 [2022-04-28 03:50:50,635 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:50:50,635 INFO L495 AbstractCegarLoop]: Abstraction has 60 states and 64 transitions. [2022-04-28 03:50:50,636 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 3.2666666666666666) internal successors, (49), 14 states have internal predecessors, (49), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:50,636 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 60 states and 64 transitions. [2022-04-28 03:50:50,706 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:50,706 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 64 transitions. [2022-04-28 03:50:50,707 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-04-28 03:50:50,707 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:50:50,707 INFO L195 NwaCegarLoop]: trace histogram [12, 11, 11, 10, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:50:50,723 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2022-04-28 03:50:50,907 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:50,908 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:50:50,908 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:50:50,908 INFO L85 PathProgramCache]: Analyzing trace with hash 685196934, now seen corresponding path program 9 times [2022-04-28 03:50:50,908 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:50,908 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [92298027] [2022-04-28 03:50:51,010 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:51,262 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:55,419 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:50:55,536 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:50:55,537 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:50:55,540 INFO L85 PathProgramCache]: Analyzing trace with hash -547170585, now seen corresponding path program 1 times [2022-04-28 03:50:55,540 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:50:55,540 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [698069659] [2022-04-28 03:50:55,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:55,540 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:50:55,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:55,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:50:55,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:55,609 INFO L290 TraceCheckUtils]: 0: Hoare triple {4373#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {4365#true} is VALID [2022-04-28 03:50:55,609 INFO L290 TraceCheckUtils]: 1: Hoare triple {4365#true} assume true; {4365#true} is VALID [2022-04-28 03:50:55,609 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4365#true} {4365#true} #48#return; {4365#true} is VALID [2022-04-28 03:50:55,611 INFO L272 TraceCheckUtils]: 0: Hoare triple {4365#true} call ULTIMATE.init(); {4373#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:50:55,611 INFO L290 TraceCheckUtils]: 1: Hoare triple {4373#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {4365#true} is VALID [2022-04-28 03:50:55,611 INFO L290 TraceCheckUtils]: 2: Hoare triple {4365#true} assume true; {4365#true} is VALID [2022-04-28 03:50:55,611 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {4365#true} {4365#true} #48#return; {4365#true} is VALID [2022-04-28 03:50:55,611 INFO L272 TraceCheckUtils]: 4: Hoare triple {4365#true} call #t~ret7 := main(); {4365#true} is VALID [2022-04-28 03:50:55,612 INFO L290 TraceCheckUtils]: 5: Hoare triple {4365#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {4370#(= main_~x~0 0)} is VALID [2022-04-28 03:50:55,612 INFO L290 TraceCheckUtils]: 6: Hoare triple {4370#(= main_~x~0 0)} [108] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_72| |v_main_#t~post4_71|)) (.cse1 (= v_main_~x~0_293 v_main_~x~0_292))) (or (and (< v_main_~x~0_293 v_main_~x~0_292) (< v_main_~x~0_292 500001)) (and .cse0 .cse1) (and (<= 500000 v_main_~x~0_293) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_293, main_#t~post4=|v_main_#t~post4_72|} OutVars{main_~x~0=v_main_~x~0_292, main_#t~post4=|v_main_#t~post4_71|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {4371#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:55,613 INFO L290 TraceCheckUtils]: 7: Hoare triple {4371#(<= main_~x~0 500000)} [109] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {4371#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:55,614 INFO L290 TraceCheckUtils]: 8: Hoare triple {4371#(<= main_~x~0 500000)} [110] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~y~0_187 v_main_~y~0_186)) (.cse2 (= v_main_~x~0_295 v_main_~x~0_294)) (.cse0 (<= 750000 v_main_~x~0_295)) (.cse3 (= |v_main_#t~post6_116| |v_main_#t~post6_114|))) (or (and (= (+ v_main_~x~0_294 (* v_main_~y~0_187 2)) (+ v_main_~x~0_295 (* v_main_~y~0_186 2))) (< v_main_~y~0_186 (+ v_main_~y~0_187 2 (div (+ (* v_main_~x~0_295 (- 1)) 999999) 2))) (< v_main_~y~0_187 v_main_~y~0_186) .cse0) (and .cse1 .cse2 .cse3) (and .cse1 .cse2 (or (not (< v_main_~x~0_295 1000000)) (not .cse0)) .cse3))) InVars {main_~y~0=v_main_~y~0_187, main_~x~0=v_main_~x~0_295, main_#t~post6=|v_main_#t~post6_116|} OutVars{main_~y~0=v_main_~y~0_186, main_~x~0=v_main_~x~0_294, main_#t~post6=|v_main_#t~post6_114|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {4371#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:55,614 INFO L290 TraceCheckUtils]: 9: Hoare triple {4371#(<= main_~x~0 500000)} [111] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {4371#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:55,615 INFO L290 TraceCheckUtils]: 10: Hoare triple {4371#(<= main_~x~0 500000)} [112] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_297)) (.cse1 (= v_main_~x~0_297 v_main_~x~0_296)) (.cse2 (= v_main_~y~0_189 v_main_~y~0_188)) (.cse3 (= |v_main_#t~post5_59| |v_main_#t~post5_58|))) (or (and (< v_main_~x~0_296 750001) (= (+ v_main_~x~0_297 v_main_~y~0_188) (+ v_main_~x~0_296 v_main_~y~0_189)) (< v_main_~x~0_297 v_main_~x~0_296) .cse0) (and .cse1 (= |v_main_#t~post6_115| |v_main_#t~post6_119|) (or (not .cse0) (not (< v_main_~x~0_297 750000))) .cse2 .cse3) (and .cse1 (= |v_main_#t~post6_119| |v_main_#t~post6_115|) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_189, main_#t~post5=|v_main_#t~post5_59|, main_~x~0=v_main_~x~0_297, main_#t~post6=|v_main_#t~post6_119|} OutVars{main_~y~0=v_main_~y~0_188, main_#t~post5=|v_main_#t~post5_58|, main_~x~0=v_main_~x~0_296, main_#t~post6=|v_main_#t~post6_115|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {4372#(<= main_~x~0 750000)} is VALID [2022-04-28 03:50:55,615 INFO L290 TraceCheckUtils]: 11: Hoare triple {4372#(<= main_~x~0 750000)} [107] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {4366#false} is VALID [2022-04-28 03:50:55,615 INFO L272 TraceCheckUtils]: 12: Hoare triple {4366#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {4366#false} is VALID [2022-04-28 03:50:55,615 INFO L290 TraceCheckUtils]: 13: Hoare triple {4366#false} ~cond := #in~cond; {4366#false} is VALID [2022-04-28 03:50:55,615 INFO L290 TraceCheckUtils]: 14: Hoare triple {4366#false} assume 0 == ~cond; {4366#false} is VALID [2022-04-28 03:50:55,615 INFO L290 TraceCheckUtils]: 15: Hoare triple {4366#false} assume !false; {4366#false} is VALID [2022-04-28 03:50:55,616 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:55,616 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:50:55,616 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [698069659] [2022-04-28 03:50:55,616 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [698069659] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:50:55,616 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [191871093] [2022-04-28 03:50:55,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:50:55,616 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:50:55,616 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:50:55,618 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:50:55,642 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-04-28 03:50:55,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:55,656 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:50:55,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:50:55,667 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:50:55,852 INFO L272 TraceCheckUtils]: 0: Hoare triple {4365#true} call ULTIMATE.init(); {4365#true} is VALID [2022-04-28 03:50:55,852 INFO L290 TraceCheckUtils]: 1: Hoare triple {4365#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {4365#true} is VALID [2022-04-28 03:50:55,852 INFO L290 TraceCheckUtils]: 2: Hoare triple {4365#true} assume true; {4365#true} is VALID [2022-04-28 03:50:55,852 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {4365#true} {4365#true} #48#return; {4365#true} is VALID [2022-04-28 03:50:55,853 INFO L272 TraceCheckUtils]: 4: Hoare triple {4365#true} call #t~ret7 := main(); {4365#true} is VALID [2022-04-28 03:50:55,853 INFO L290 TraceCheckUtils]: 5: Hoare triple {4365#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {4392#(<= main_~x~0 0)} is VALID [2022-04-28 03:50:55,854 INFO L290 TraceCheckUtils]: 6: Hoare triple {4392#(<= main_~x~0 0)} [108] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_72| |v_main_#t~post4_71|)) (.cse1 (= v_main_~x~0_293 v_main_~x~0_292))) (or (and (< v_main_~x~0_293 v_main_~x~0_292) (< v_main_~x~0_292 500001)) (and .cse0 .cse1) (and (<= 500000 v_main_~x~0_293) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_293, main_#t~post4=|v_main_#t~post4_72|} OutVars{main_~x~0=v_main_~x~0_292, main_#t~post4=|v_main_#t~post4_71|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {4371#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:55,855 INFO L290 TraceCheckUtils]: 7: Hoare triple {4371#(<= main_~x~0 500000)} [109] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {4371#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:55,856 INFO L290 TraceCheckUtils]: 8: Hoare triple {4371#(<= main_~x~0 500000)} [110] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~y~0_187 v_main_~y~0_186)) (.cse2 (= v_main_~x~0_295 v_main_~x~0_294)) (.cse0 (<= 750000 v_main_~x~0_295)) (.cse3 (= |v_main_#t~post6_116| |v_main_#t~post6_114|))) (or (and (= (+ v_main_~x~0_294 (* v_main_~y~0_187 2)) (+ v_main_~x~0_295 (* v_main_~y~0_186 2))) (< v_main_~y~0_186 (+ v_main_~y~0_187 2 (div (+ (* v_main_~x~0_295 (- 1)) 999999) 2))) (< v_main_~y~0_187 v_main_~y~0_186) .cse0) (and .cse1 .cse2 .cse3) (and .cse1 .cse2 (or (not (< v_main_~x~0_295 1000000)) (not .cse0)) .cse3))) InVars {main_~y~0=v_main_~y~0_187, main_~x~0=v_main_~x~0_295, main_#t~post6=|v_main_#t~post6_116|} OutVars{main_~y~0=v_main_~y~0_186, main_~x~0=v_main_~x~0_294, main_#t~post6=|v_main_#t~post6_114|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {4371#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:55,857 INFO L290 TraceCheckUtils]: 9: Hoare triple {4371#(<= main_~x~0 500000)} [111] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {4371#(<= main_~x~0 500000)} is VALID [2022-04-28 03:50:55,857 INFO L290 TraceCheckUtils]: 10: Hoare triple {4371#(<= main_~x~0 500000)} [112] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_297)) (.cse1 (= v_main_~x~0_297 v_main_~x~0_296)) (.cse2 (= v_main_~y~0_189 v_main_~y~0_188)) (.cse3 (= |v_main_#t~post5_59| |v_main_#t~post5_58|))) (or (and (< v_main_~x~0_296 750001) (= (+ v_main_~x~0_297 v_main_~y~0_188) (+ v_main_~x~0_296 v_main_~y~0_189)) (< v_main_~x~0_297 v_main_~x~0_296) .cse0) (and .cse1 (= |v_main_#t~post6_115| |v_main_#t~post6_119|) (or (not .cse0) (not (< v_main_~x~0_297 750000))) .cse2 .cse3) (and .cse1 (= |v_main_#t~post6_119| |v_main_#t~post6_115|) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_189, main_#t~post5=|v_main_#t~post5_59|, main_~x~0=v_main_~x~0_297, main_#t~post6=|v_main_#t~post6_119|} OutVars{main_~y~0=v_main_~y~0_188, main_#t~post5=|v_main_#t~post5_58|, main_~x~0=v_main_~x~0_296, main_#t~post6=|v_main_#t~post6_115|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {4372#(<= main_~x~0 750000)} is VALID [2022-04-28 03:50:55,858 INFO L290 TraceCheckUtils]: 11: Hoare triple {4372#(<= main_~x~0 750000)} [107] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {4366#false} is VALID [2022-04-28 03:50:55,858 INFO L272 TraceCheckUtils]: 12: Hoare triple {4366#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {4366#false} is VALID [2022-04-28 03:50:55,858 INFO L290 TraceCheckUtils]: 13: Hoare triple {4366#false} ~cond := #in~cond; {4366#false} is VALID [2022-04-28 03:50:55,858 INFO L290 TraceCheckUtils]: 14: Hoare triple {4366#false} assume 0 == ~cond; {4366#false} is VALID [2022-04-28 03:50:55,858 INFO L290 TraceCheckUtils]: 15: Hoare triple {4366#false} assume !false; {4366#false} is VALID [2022-04-28 03:50:55,858 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:55,858 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:50:56,288 INFO L290 TraceCheckUtils]: 15: Hoare triple {4366#false} assume !false; {4366#false} is VALID [2022-04-28 03:50:56,288 INFO L290 TraceCheckUtils]: 14: Hoare triple {4426#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {4366#false} is VALID [2022-04-28 03:50:56,289 INFO L290 TraceCheckUtils]: 13: Hoare triple {4430#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {4426#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:50:56,289 INFO L272 TraceCheckUtils]: 12: Hoare triple {4434#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {4430#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:50:56,290 INFO L290 TraceCheckUtils]: 11: Hoare triple {4438#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [107] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {4434#(= main_~x~0 1000000)} is VALID [2022-04-28 03:50:56,290 INFO L290 TraceCheckUtils]: 10: Hoare triple {4438#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [112] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_297)) (.cse1 (= v_main_~x~0_297 v_main_~x~0_296)) (.cse2 (= v_main_~y~0_189 v_main_~y~0_188)) (.cse3 (= |v_main_#t~post5_59| |v_main_#t~post5_58|))) (or (and (< v_main_~x~0_296 750001) (= (+ v_main_~x~0_297 v_main_~y~0_188) (+ v_main_~x~0_296 v_main_~y~0_189)) (< v_main_~x~0_297 v_main_~x~0_296) .cse0) (and .cse1 (= |v_main_#t~post6_115| |v_main_#t~post6_119|) (or (not .cse0) (not (< v_main_~x~0_297 750000))) .cse2 .cse3) (and .cse1 (= |v_main_#t~post6_119| |v_main_#t~post6_115|) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_189, main_#t~post5=|v_main_#t~post5_59|, main_~x~0=v_main_~x~0_297, main_#t~post6=|v_main_#t~post6_119|} OutVars{main_~y~0=v_main_~y~0_188, main_#t~post5=|v_main_#t~post5_58|, main_~x~0=v_main_~x~0_296, main_#t~post6=|v_main_#t~post6_115|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {4438#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:56,291 INFO L290 TraceCheckUtils]: 9: Hoare triple {4438#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [111] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {4438#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:56,292 INFO L290 TraceCheckUtils]: 8: Hoare triple {4448#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [110] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~y~0_187 v_main_~y~0_186)) (.cse2 (= v_main_~x~0_295 v_main_~x~0_294)) (.cse0 (<= 750000 v_main_~x~0_295)) (.cse3 (= |v_main_#t~post6_116| |v_main_#t~post6_114|))) (or (and (= (+ v_main_~x~0_294 (* v_main_~y~0_187 2)) (+ v_main_~x~0_295 (* v_main_~y~0_186 2))) (< v_main_~y~0_186 (+ v_main_~y~0_187 2 (div (+ (* v_main_~x~0_295 (- 1)) 999999) 2))) (< v_main_~y~0_187 v_main_~y~0_186) .cse0) (and .cse1 .cse2 .cse3) (and .cse1 .cse2 (or (not (< v_main_~x~0_295 1000000)) (not .cse0)) .cse3))) InVars {main_~y~0=v_main_~y~0_187, main_~x~0=v_main_~x~0_295, main_#t~post6=|v_main_#t~post6_116|} OutVars{main_~y~0=v_main_~y~0_186, main_~x~0=v_main_~x~0_294, main_#t~post6=|v_main_#t~post6_114|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {4438#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:50:56,292 INFO L290 TraceCheckUtils]: 7: Hoare triple {4448#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [109] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {4448#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:50:56,293 INFO L290 TraceCheckUtils]: 6: Hoare triple {4448#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [108] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_72| |v_main_#t~post4_71|)) (.cse1 (= v_main_~x~0_293 v_main_~x~0_292))) (or (and (< v_main_~x~0_293 v_main_~x~0_292) (< v_main_~x~0_292 500001)) (and .cse0 .cse1) (and (<= 500000 v_main_~x~0_293) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_293, main_#t~post4=|v_main_#t~post4_72|} OutVars{main_~x~0=v_main_~x~0_292, main_#t~post4=|v_main_#t~post4_71|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {4448#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:50:56,294 INFO L290 TraceCheckUtils]: 5: Hoare triple {4365#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {4448#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:50:56,294 INFO L272 TraceCheckUtils]: 4: Hoare triple {4365#true} call #t~ret7 := main(); {4365#true} is VALID [2022-04-28 03:50:56,294 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {4365#true} {4365#true} #48#return; {4365#true} is VALID [2022-04-28 03:50:56,294 INFO L290 TraceCheckUtils]: 2: Hoare triple {4365#true} assume true; {4365#true} is VALID [2022-04-28 03:50:56,294 INFO L290 TraceCheckUtils]: 1: Hoare triple {4365#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {4365#true} is VALID [2022-04-28 03:50:56,294 INFO L272 TraceCheckUtils]: 0: Hoare triple {4365#true} call ULTIMATE.init(); {4365#true} is VALID [2022-04-28 03:50:56,294 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:50:56,294 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [191871093] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:50:56,295 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:50:56,295 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:50:56,638 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:50:56,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [92298027] [2022-04-28 03:50:56,638 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [92298027] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:50:56,638 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:50:56,638 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [16] imperfect sequences [] total 16 [2022-04-28 03:50:56,638 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1214596743] [2022-04-28 03:50:56,638 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:50:56,639 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 3.3125) internal successors, (53), 15 states have internal predecessors, (53), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 57 [2022-04-28 03:50:56,639 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:50:56,639 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 16 states, 16 states have (on average 3.3125) internal successors, (53), 15 states have internal predecessors, (53), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:56,677 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:56,677 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-04-28 03:50:56,677 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:56,677 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-04-28 03:50:56,677 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=110, Invalid=490, Unknown=0, NotChecked=0, Total=600 [2022-04-28 03:50:56,678 INFO L87 Difference]: Start difference. First operand 60 states and 64 transitions. Second operand has 16 states, 16 states have (on average 3.3125) internal successors, (53), 15 states have internal predecessors, (53), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:57,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:57,990 INFO L93 Difference]: Finished difference Result 87 states and 96 transitions. [2022-04-28 03:50:57,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-04-28 03:50:57,991 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 3.3125) internal successors, (53), 15 states have internal predecessors, (53), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 57 [2022-04-28 03:50:57,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:50:57,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 16 states have (on average 3.3125) internal successors, (53), 15 states have internal predecessors, (53), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:57,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 76 transitions. [2022-04-28 03:50:57,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 16 states have (on average 3.3125) internal successors, (53), 15 states have internal predecessors, (53), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:57,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 76 transitions. [2022-04-28 03:50:57,994 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 16 states and 76 transitions. [2022-04-28 03:50:58,060 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:58,060 INFO L225 Difference]: With dead ends: 87 [2022-04-28 03:50:58,060 INFO L226 Difference]: Without dead ends: 69 [2022-04-28 03:50:58,061 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 64 SyntacticMatches, 3 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 290 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=210, Invalid=1196, Unknown=0, NotChecked=0, Total=1406 [2022-04-28 03:50:58,061 INFO L413 NwaCegarLoop]: 22 mSDtfsCounter, 45 mSDsluCounter, 57 mSDsCounter, 0 mSdLazyCounter, 580 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 79 SdHoareTripleChecker+Invalid, 596 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 580 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-04-28 03:50:58,061 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 79 Invalid, 596 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 580 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-04-28 03:50:58,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2022-04-28 03:50:58,306 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 64. [2022-04-28 03:50:58,306 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:50:58,306 INFO L82 GeneralOperation]: Start isEquivalent. First operand 69 states. Second operand has 64 states, 59 states have (on average 1.0847457627118644) internal successors, (64), 59 states have internal predecessors, (64), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:58,306 INFO L74 IsIncluded]: Start isIncluded. First operand 69 states. Second operand has 64 states, 59 states have (on average 1.0847457627118644) internal successors, (64), 59 states have internal predecessors, (64), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:58,306 INFO L87 Difference]: Start difference. First operand 69 states. Second operand has 64 states, 59 states have (on average 1.0847457627118644) internal successors, (64), 59 states have internal predecessors, (64), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:58,308 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:58,308 INFO L93 Difference]: Finished difference Result 69 states and 73 transitions. [2022-04-28 03:50:58,308 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 73 transitions. [2022-04-28 03:50:58,308 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:58,308 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:58,308 INFO L74 IsIncluded]: Start isIncluded. First operand has 64 states, 59 states have (on average 1.0847457627118644) internal successors, (64), 59 states have internal predecessors, (64), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 69 states. [2022-04-28 03:50:58,308 INFO L87 Difference]: Start difference. First operand has 64 states, 59 states have (on average 1.0847457627118644) internal successors, (64), 59 states have internal predecessors, (64), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 69 states. [2022-04-28 03:50:58,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:50:58,309 INFO L93 Difference]: Finished difference Result 69 states and 73 transitions. [2022-04-28 03:50:58,309 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 73 transitions. [2022-04-28 03:50:58,310 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:50:58,310 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:50:58,310 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:50:58,310 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:50:58,310 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 59 states have (on average 1.0847457627118644) internal successors, (64), 59 states have internal predecessors, (64), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:58,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 68 transitions. [2022-04-28 03:50:58,311 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 68 transitions. Word has length 57 [2022-04-28 03:50:58,311 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:50:58,311 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 68 transitions. [2022-04-28 03:50:58,311 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 3.3125) internal successors, (53), 15 states have internal predecessors, (53), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:50:58,311 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 64 states and 68 transitions. [2022-04-28 03:50:58,389 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 68 edges. 68 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:50:58,390 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 68 transitions. [2022-04-28 03:50:58,390 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-04-28 03:50:58,390 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:50:58,390 INFO L195 NwaCegarLoop]: trace histogram [13, 12, 12, 11, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:50:58,406 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2022-04-28 03:50:58,595 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-04-28 03:50:58,595 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:50:58,596 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:50:58,596 INFO L85 PathProgramCache]: Analyzing trace with hash 1951951581, now seen corresponding path program 10 times [2022-04-28 03:50:58,596 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:50:58,596 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1857106572] [2022-04-28 03:51:02,676 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:51:02,724 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:02,988 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:03,213 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:03,215 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:51:03,217 INFO L85 PathProgramCache]: Analyzing trace with hash -906745561, now seen corresponding path program 1 times [2022-04-28 03:51:03,218 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:51:03,218 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [451166967] [2022-04-28 03:51:03,218 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:03,218 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:51:03,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:03,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:51:03,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:03,270 INFO L290 TraceCheckUtils]: 0: Hoare triple {4963#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {4954#true} is VALID [2022-04-28 03:51:03,270 INFO L290 TraceCheckUtils]: 1: Hoare triple {4954#true} assume true; {4954#true} is VALID [2022-04-28 03:51:03,270 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4954#true} {4954#true} #48#return; {4954#true} is VALID [2022-04-28 03:51:03,271 INFO L272 TraceCheckUtils]: 0: Hoare triple {4954#true} call ULTIMATE.init(); {4963#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:51:03,271 INFO L290 TraceCheckUtils]: 1: Hoare triple {4963#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {4954#true} is VALID [2022-04-28 03:51:03,271 INFO L290 TraceCheckUtils]: 2: Hoare triple {4954#true} assume true; {4954#true} is VALID [2022-04-28 03:51:03,271 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {4954#true} {4954#true} #48#return; {4954#true} is VALID [2022-04-28 03:51:03,271 INFO L272 TraceCheckUtils]: 4: Hoare triple {4954#true} call #t~ret7 := main(); {4954#true} is VALID [2022-04-28 03:51:03,271 INFO L290 TraceCheckUtils]: 5: Hoare triple {4954#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {4959#(= main_~x~0 0)} is VALID [2022-04-28 03:51:03,272 INFO L290 TraceCheckUtils]: 6: Hoare triple {4959#(= main_~x~0 0)} [114] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_329 v_main_~x~0_328)) (.cse1 (= |v_main_#t~post4_79| |v_main_#t~post4_78|))) (or (and .cse0 .cse1) (and (not (< v_main_~x~0_329 500000)) .cse0 .cse1) (and (< v_main_~x~0_329 v_main_~x~0_328) (< v_main_~x~0_328 500001)))) InVars {main_~x~0=v_main_~x~0_329, main_#t~post4=|v_main_#t~post4_79|} OutVars{main_~x~0=v_main_~x~0_328, main_#t~post4=|v_main_#t~post4_78|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {4960#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:03,272 INFO L290 TraceCheckUtils]: 7: Hoare triple {4960#(<= main_~x~0 500000)} [115] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {4960#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:03,273 INFO L290 TraceCheckUtils]: 8: Hoare triple {4960#(<= main_~x~0 500000)} [116] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_129| |v_main_#t~post6_127|)) (.cse1 (= v_main_~x~0_331 v_main_~x~0_330)) (.cse3 (= v_main_~y~0_213 v_main_~y~0_212)) (.cse2 (<= 750000 v_main_~x~0_331))) (or (and .cse0 .cse1 (or (not .cse2) (not (< v_main_~x~0_331 1000000))) .cse3) (and .cse0 .cse1 .cse3) (and .cse2 (= (+ v_main_~x~0_331 (* v_main_~y~0_212 2)) (+ v_main_~x~0_330 (* v_main_~y~0_213 2))) (< v_main_~y~0_212 (+ v_main_~y~0_213 2 (div (+ 999999 (* v_main_~x~0_331 (- 1))) 2))) (< v_main_~y~0_213 v_main_~y~0_212)))) InVars {main_~y~0=v_main_~y~0_213, main_~x~0=v_main_~x~0_331, main_#t~post6=|v_main_#t~post6_129|} OutVars{main_~y~0=v_main_~y~0_212, main_~x~0=v_main_~x~0_330, main_#t~post6=|v_main_#t~post6_127|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {4961#(<= main_~x~0 749999)} is VALID [2022-04-28 03:51:03,274 INFO L290 TraceCheckUtils]: 9: Hoare triple {4961#(<= main_~x~0 749999)} [117] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {4961#(<= main_~x~0 749999)} is VALID [2022-04-28 03:51:03,275 INFO L290 TraceCheckUtils]: 10: Hoare triple {4961#(<= main_~x~0 749999)} [118] L11-2-->L10-2_primed: Formula: (let ((.cse2 (= v_main_~y~0_215 v_main_~y~0_214)) (.cse3 (= |v_main_#t~post6_132| |v_main_#t~post6_128|)) (.cse4 (= |v_main_#t~post5_65| |v_main_#t~post5_64|)) (.cse5 (= v_main_~x~0_333 v_main_~x~0_332)) (.cse0 (<= 500000 v_main_~x~0_333))) (or (let ((.cse1 (+ v_main_~x~0_333 v_main_~y~0_214))) (and (< v_main_~y~0_215 v_main_~y~0_214) .cse0 (= (+ v_main_~x~0_332 v_main_~y~0_215) .cse1) (< .cse1 (+ 750001 v_main_~y~0_215)))) (and .cse2 .cse3 .cse4 .cse5) (and .cse2 .cse3 .cse4 .cse5 (or (not .cse0) (not (< v_main_~x~0_333 750000)))))) InVars {main_~y~0=v_main_~y~0_215, main_#t~post5=|v_main_#t~post5_65|, main_~x~0=v_main_~x~0_333, main_#t~post6=|v_main_#t~post6_132|} OutVars{main_~y~0=v_main_~y~0_214, main_#t~post5=|v_main_#t~post5_64|, main_~x~0=v_main_~x~0_332, main_#t~post6=|v_main_#t~post6_128|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {4962#(<= main_~x~0 750000)} is VALID [2022-04-28 03:51:03,275 INFO L290 TraceCheckUtils]: 11: Hoare triple {4962#(<= main_~x~0 750000)} [113] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {4955#false} is VALID [2022-04-28 03:51:03,275 INFO L272 TraceCheckUtils]: 12: Hoare triple {4955#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {4955#false} is VALID [2022-04-28 03:51:03,275 INFO L290 TraceCheckUtils]: 13: Hoare triple {4955#false} ~cond := #in~cond; {4955#false} is VALID [2022-04-28 03:51:03,275 INFO L290 TraceCheckUtils]: 14: Hoare triple {4955#false} assume 0 == ~cond; {4955#false} is VALID [2022-04-28 03:51:03,275 INFO L290 TraceCheckUtils]: 15: Hoare triple {4955#false} assume !false; {4955#false} is VALID [2022-04-28 03:51:03,275 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 03:51:03,276 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:51:03,276 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [451166967] [2022-04-28 03:51:03,276 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [451166967] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:51:03,276 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [819318076] [2022-04-28 03:51:03,276 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:03,276 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:51:03,276 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:51:03,277 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:51:03,277 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-04-28 03:51:03,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:03,306 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:51:03,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:03,315 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:51:03,512 INFO L272 TraceCheckUtils]: 0: Hoare triple {4954#true} call ULTIMATE.init(); {4954#true} is VALID [2022-04-28 03:51:03,512 INFO L290 TraceCheckUtils]: 1: Hoare triple {4954#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {4954#true} is VALID [2022-04-28 03:51:03,512 INFO L290 TraceCheckUtils]: 2: Hoare triple {4954#true} assume true; {4954#true} is VALID [2022-04-28 03:51:03,512 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {4954#true} {4954#true} #48#return; {4954#true} is VALID [2022-04-28 03:51:03,512 INFO L272 TraceCheckUtils]: 4: Hoare triple {4954#true} call #t~ret7 := main(); {4954#true} is VALID [2022-04-28 03:51:03,512 INFO L290 TraceCheckUtils]: 5: Hoare triple {4954#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {4982#(<= main_~x~0 0)} is VALID [2022-04-28 03:51:03,513 INFO L290 TraceCheckUtils]: 6: Hoare triple {4982#(<= main_~x~0 0)} [114] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_329 v_main_~x~0_328)) (.cse1 (= |v_main_#t~post4_79| |v_main_#t~post4_78|))) (or (and .cse0 .cse1) (and (not (< v_main_~x~0_329 500000)) .cse0 .cse1) (and (< v_main_~x~0_329 v_main_~x~0_328) (< v_main_~x~0_328 500001)))) InVars {main_~x~0=v_main_~x~0_329, main_#t~post4=|v_main_#t~post4_79|} OutVars{main_~x~0=v_main_~x~0_328, main_#t~post4=|v_main_#t~post4_78|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {4960#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:03,513 INFO L290 TraceCheckUtils]: 7: Hoare triple {4960#(<= main_~x~0 500000)} [115] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {4960#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:03,514 INFO L290 TraceCheckUtils]: 8: Hoare triple {4960#(<= main_~x~0 500000)} [116] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_129| |v_main_#t~post6_127|)) (.cse1 (= v_main_~x~0_331 v_main_~x~0_330)) (.cse3 (= v_main_~y~0_213 v_main_~y~0_212)) (.cse2 (<= 750000 v_main_~x~0_331))) (or (and .cse0 .cse1 (or (not .cse2) (not (< v_main_~x~0_331 1000000))) .cse3) (and .cse0 .cse1 .cse3) (and .cse2 (= (+ v_main_~x~0_331 (* v_main_~y~0_212 2)) (+ v_main_~x~0_330 (* v_main_~y~0_213 2))) (< v_main_~y~0_212 (+ v_main_~y~0_213 2 (div (+ 999999 (* v_main_~x~0_331 (- 1))) 2))) (< v_main_~y~0_213 v_main_~y~0_212)))) InVars {main_~y~0=v_main_~y~0_213, main_~x~0=v_main_~x~0_331, main_#t~post6=|v_main_#t~post6_129|} OutVars{main_~y~0=v_main_~y~0_212, main_~x~0=v_main_~x~0_330, main_#t~post6=|v_main_#t~post6_127|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {4960#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:03,514 INFO L290 TraceCheckUtils]: 9: Hoare triple {4960#(<= main_~x~0 500000)} [117] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {4960#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:03,515 INFO L290 TraceCheckUtils]: 10: Hoare triple {4960#(<= main_~x~0 500000)} [118] L11-2-->L10-2_primed: Formula: (let ((.cse2 (= v_main_~y~0_215 v_main_~y~0_214)) (.cse3 (= |v_main_#t~post6_132| |v_main_#t~post6_128|)) (.cse4 (= |v_main_#t~post5_65| |v_main_#t~post5_64|)) (.cse5 (= v_main_~x~0_333 v_main_~x~0_332)) (.cse0 (<= 500000 v_main_~x~0_333))) (or (let ((.cse1 (+ v_main_~x~0_333 v_main_~y~0_214))) (and (< v_main_~y~0_215 v_main_~y~0_214) .cse0 (= (+ v_main_~x~0_332 v_main_~y~0_215) .cse1) (< .cse1 (+ 750001 v_main_~y~0_215)))) (and .cse2 .cse3 .cse4 .cse5) (and .cse2 .cse3 .cse4 .cse5 (or (not .cse0) (not (< v_main_~x~0_333 750000)))))) InVars {main_~y~0=v_main_~y~0_215, main_#t~post5=|v_main_#t~post5_65|, main_~x~0=v_main_~x~0_333, main_#t~post6=|v_main_#t~post6_132|} OutVars{main_~y~0=v_main_~y~0_214, main_#t~post5=|v_main_#t~post5_64|, main_~x~0=v_main_~x~0_332, main_#t~post6=|v_main_#t~post6_128|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {4962#(<= main_~x~0 750000)} is VALID [2022-04-28 03:51:03,515 INFO L290 TraceCheckUtils]: 11: Hoare triple {4962#(<= main_~x~0 750000)} [113] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {4955#false} is VALID [2022-04-28 03:51:03,515 INFO L272 TraceCheckUtils]: 12: Hoare triple {4955#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {4955#false} is VALID [2022-04-28 03:51:03,516 INFO L290 TraceCheckUtils]: 13: Hoare triple {4955#false} ~cond := #in~cond; {4955#false} is VALID [2022-04-28 03:51:03,516 INFO L290 TraceCheckUtils]: 14: Hoare triple {4955#false} assume 0 == ~cond; {4955#false} is VALID [2022-04-28 03:51:03,516 INFO L290 TraceCheckUtils]: 15: Hoare triple {4955#false} assume !false; {4955#false} is VALID [2022-04-28 03:51:03,516 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:03,516 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:51:04,019 INFO L290 TraceCheckUtils]: 15: Hoare triple {4955#false} assume !false; {4955#false} is VALID [2022-04-28 03:51:04,019 INFO L290 TraceCheckUtils]: 14: Hoare triple {5016#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {4955#false} is VALID [2022-04-28 03:51:04,019 INFO L290 TraceCheckUtils]: 13: Hoare triple {5020#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {5016#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:51:04,020 INFO L272 TraceCheckUtils]: 12: Hoare triple {5024#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {5020#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:51:04,020 INFO L290 TraceCheckUtils]: 11: Hoare triple {5028#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [113] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {5024#(= main_~x~0 1000000)} is VALID [2022-04-28 03:51:04,021 INFO L290 TraceCheckUtils]: 10: Hoare triple {5028#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [118] L11-2-->L10-2_primed: Formula: (let ((.cse2 (= v_main_~y~0_215 v_main_~y~0_214)) (.cse3 (= |v_main_#t~post6_132| |v_main_#t~post6_128|)) (.cse4 (= |v_main_#t~post5_65| |v_main_#t~post5_64|)) (.cse5 (= v_main_~x~0_333 v_main_~x~0_332)) (.cse0 (<= 500000 v_main_~x~0_333))) (or (let ((.cse1 (+ v_main_~x~0_333 v_main_~y~0_214))) (and (< v_main_~y~0_215 v_main_~y~0_214) .cse0 (= (+ v_main_~x~0_332 v_main_~y~0_215) .cse1) (< .cse1 (+ 750001 v_main_~y~0_215)))) (and .cse2 .cse3 .cse4 .cse5) (and .cse2 .cse3 .cse4 .cse5 (or (not .cse0) (not (< v_main_~x~0_333 750000)))))) InVars {main_~y~0=v_main_~y~0_215, main_#t~post5=|v_main_#t~post5_65|, main_~x~0=v_main_~x~0_333, main_#t~post6=|v_main_#t~post6_132|} OutVars{main_~y~0=v_main_~y~0_214, main_#t~post5=|v_main_#t~post5_64|, main_~x~0=v_main_~x~0_332, main_#t~post6=|v_main_#t~post6_128|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {5028#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:04,021 INFO L290 TraceCheckUtils]: 9: Hoare triple {5028#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [117] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {5028#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:04,022 INFO L290 TraceCheckUtils]: 8: Hoare triple {5038#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [116] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_129| |v_main_#t~post6_127|)) (.cse1 (= v_main_~x~0_331 v_main_~x~0_330)) (.cse3 (= v_main_~y~0_213 v_main_~y~0_212)) (.cse2 (<= 750000 v_main_~x~0_331))) (or (and .cse0 .cse1 (or (not .cse2) (not (< v_main_~x~0_331 1000000))) .cse3) (and .cse0 .cse1 .cse3) (and .cse2 (= (+ v_main_~x~0_331 (* v_main_~y~0_212 2)) (+ v_main_~x~0_330 (* v_main_~y~0_213 2))) (< v_main_~y~0_212 (+ v_main_~y~0_213 2 (div (+ 999999 (* v_main_~x~0_331 (- 1))) 2))) (< v_main_~y~0_213 v_main_~y~0_212)))) InVars {main_~y~0=v_main_~y~0_213, main_~x~0=v_main_~x~0_331, main_#t~post6=|v_main_#t~post6_129|} OutVars{main_~y~0=v_main_~y~0_212, main_~x~0=v_main_~x~0_330, main_#t~post6=|v_main_#t~post6_127|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {5028#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:04,023 INFO L290 TraceCheckUtils]: 7: Hoare triple {5038#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [115] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {5038#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:04,024 INFO L290 TraceCheckUtils]: 6: Hoare triple {5038#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [114] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_329 v_main_~x~0_328)) (.cse1 (= |v_main_#t~post4_79| |v_main_#t~post4_78|))) (or (and .cse0 .cse1) (and (not (< v_main_~x~0_329 500000)) .cse0 .cse1) (and (< v_main_~x~0_329 v_main_~x~0_328) (< v_main_~x~0_328 500001)))) InVars {main_~x~0=v_main_~x~0_329, main_#t~post4=|v_main_#t~post4_79|} OutVars{main_~x~0=v_main_~x~0_328, main_#t~post4=|v_main_#t~post4_78|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {5038#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:04,025 INFO L290 TraceCheckUtils]: 5: Hoare triple {4954#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {5038#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:04,025 INFO L272 TraceCheckUtils]: 4: Hoare triple {4954#true} call #t~ret7 := main(); {4954#true} is VALID [2022-04-28 03:51:04,025 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {4954#true} {4954#true} #48#return; {4954#true} is VALID [2022-04-28 03:51:04,025 INFO L290 TraceCheckUtils]: 2: Hoare triple {4954#true} assume true; {4954#true} is VALID [2022-04-28 03:51:04,025 INFO L290 TraceCheckUtils]: 1: Hoare triple {4954#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {4954#true} is VALID [2022-04-28 03:51:04,025 INFO L272 TraceCheckUtils]: 0: Hoare triple {4954#true} call ULTIMATE.init(); {4954#true} is VALID [2022-04-28 03:51:04,025 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:04,025 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [819318076] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:51:04,025 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:51:04,025 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 7] total 13 [2022-04-28 03:51:04,390 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:51:04,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1857106572] [2022-04-28 03:51:04,390 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1857106572] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:51:04,390 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:51:04,390 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [17] imperfect sequences [] total 17 [2022-04-28 03:51:04,390 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1210369391] [2022-04-28 03:51:04,390 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:51:04,391 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 3.3529411764705883) internal successors, (57), 16 states have internal predecessors, (57), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 61 [2022-04-28 03:51:04,391 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:51:04,391 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 17 states, 17 states have (on average 3.3529411764705883) internal successors, (57), 16 states have internal predecessors, (57), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:04,431 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:04,431 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-04-28 03:51:04,431 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:04,432 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-04-28 03:51:04,432 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=137, Invalid=565, Unknown=0, NotChecked=0, Total=702 [2022-04-28 03:51:04,432 INFO L87 Difference]: Start difference. First operand 64 states and 68 transitions. Second operand has 17 states, 17 states have (on average 3.3529411764705883) internal successors, (57), 16 states have internal predecessors, (57), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:06,005 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:06,006 INFO L93 Difference]: Finished difference Result 91 states and 100 transitions. [2022-04-28 03:51:06,006 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-04-28 03:51:06,006 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 3.3529411764705883) internal successors, (57), 16 states have internal predecessors, (57), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 61 [2022-04-28 03:51:06,006 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:51:06,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17 states, 17 states have (on average 3.3529411764705883) internal successors, (57), 16 states have internal predecessors, (57), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:06,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 80 transitions. [2022-04-28 03:51:06,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17 states, 17 states have (on average 3.3529411764705883) internal successors, (57), 16 states have internal predecessors, (57), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:06,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 80 transitions. [2022-04-28 03:51:06,010 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 17 states and 80 transitions. [2022-04-28 03:51:06,090 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:06,091 INFO L225 Difference]: With dead ends: 91 [2022-04-28 03:51:06,091 INFO L226 Difference]: Without dead ends: 73 [2022-04-28 03:51:06,092 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 66 SyntacticMatches, 3 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 356 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=258, Invalid=1382, Unknown=0, NotChecked=0, Total=1640 [2022-04-28 03:51:06,092 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 48 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 733 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 90 SdHoareTripleChecker+Invalid, 750 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 733 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-04-28 03:51:06,092 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 90 Invalid, 750 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 733 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-04-28 03:51:06,093 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2022-04-28 03:51:06,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 68. [2022-04-28 03:51:06,398 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:51:06,398 INFO L82 GeneralOperation]: Start isEquivalent. First operand 73 states. Second operand has 68 states, 63 states have (on average 1.0793650793650793) internal successors, (68), 63 states have internal predecessors, (68), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:06,398 INFO L74 IsIncluded]: Start isIncluded. First operand 73 states. Second operand has 68 states, 63 states have (on average 1.0793650793650793) internal successors, (68), 63 states have internal predecessors, (68), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:06,398 INFO L87 Difference]: Start difference. First operand 73 states. Second operand has 68 states, 63 states have (on average 1.0793650793650793) internal successors, (68), 63 states have internal predecessors, (68), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:06,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:06,399 INFO L93 Difference]: Finished difference Result 73 states and 77 transitions. [2022-04-28 03:51:06,399 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 77 transitions. [2022-04-28 03:51:06,399 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:51:06,400 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:51:06,400 INFO L74 IsIncluded]: Start isIncluded. First operand has 68 states, 63 states have (on average 1.0793650793650793) internal successors, (68), 63 states have internal predecessors, (68), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 73 states. [2022-04-28 03:51:06,400 INFO L87 Difference]: Start difference. First operand has 68 states, 63 states have (on average 1.0793650793650793) internal successors, (68), 63 states have internal predecessors, (68), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 73 states. [2022-04-28 03:51:06,401 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:06,401 INFO L93 Difference]: Finished difference Result 73 states and 77 transitions. [2022-04-28 03:51:06,401 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 77 transitions. [2022-04-28 03:51:06,401 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:51:06,401 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:51:06,401 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:51:06,401 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:51:06,401 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 63 states have (on average 1.0793650793650793) internal successors, (68), 63 states have internal predecessors, (68), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:06,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 72 transitions. [2022-04-28 03:51:06,403 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 72 transitions. Word has length 61 [2022-04-28 03:51:06,403 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:51:06,403 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 72 transitions. [2022-04-28 03:51:06,403 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 3.3529411764705883) internal successors, (57), 16 states have internal predecessors, (57), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:06,403 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 68 states and 72 transitions. [2022-04-28 03:51:06,488 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:06,488 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 72 transitions. [2022-04-28 03:51:06,488 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-04-28 03:51:06,488 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:51:06,489 INFO L195 NwaCegarLoop]: trace histogram [14, 13, 13, 12, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:51:06,505 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-04-28 03:51:06,695 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-04-28 03:51:06,695 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:51:06,696 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:51:06,696 INFO L85 PathProgramCache]: Analyzing trace with hash 393317300, now seen corresponding path program 11 times [2022-04-28 03:51:06,696 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:06,696 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1595077579] [2022-04-28 03:51:10,766 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:51:10,819 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:11,032 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:11,275 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:11,277 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:51:11,280 INFO L85 PathProgramCache]: Analyzing trace with hash -1266320537, now seen corresponding path program 1 times [2022-04-28 03:51:11,280 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:51:11,280 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [423532470] [2022-04-28 03:51:11,280 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:11,280 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:51:11,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:11,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:51:11,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:11,331 INFO L290 TraceCheckUtils]: 0: Hoare triple {5579#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {5571#true} is VALID [2022-04-28 03:51:11,331 INFO L290 TraceCheckUtils]: 1: Hoare triple {5571#true} assume true; {5571#true} is VALID [2022-04-28 03:51:11,331 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5571#true} {5571#true} #48#return; {5571#true} is VALID [2022-04-28 03:51:11,331 INFO L272 TraceCheckUtils]: 0: Hoare triple {5571#true} call ULTIMATE.init(); {5579#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:51:11,331 INFO L290 TraceCheckUtils]: 1: Hoare triple {5579#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {5571#true} is VALID [2022-04-28 03:51:11,331 INFO L290 TraceCheckUtils]: 2: Hoare triple {5571#true} assume true; {5571#true} is VALID [2022-04-28 03:51:11,331 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {5571#true} {5571#true} #48#return; {5571#true} is VALID [2022-04-28 03:51:11,332 INFO L272 TraceCheckUtils]: 4: Hoare triple {5571#true} call #t~ret7 := main(); {5571#true} is VALID [2022-04-28 03:51:11,332 INFO L290 TraceCheckUtils]: 5: Hoare triple {5571#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {5576#(= main_~x~0 0)} is VALID [2022-04-28 03:51:11,332 INFO L290 TraceCheckUtils]: 6: Hoare triple {5576#(= main_~x~0 0)} [120] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_86| |v_main_#t~post4_85|)) (.cse1 (= v_main_~x~0_366 v_main_~x~0_365))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_366)) (and .cse0 .cse1) (and (< v_main_~x~0_366 v_main_~x~0_365) (< v_main_~x~0_365 500001)))) InVars {main_~x~0=v_main_~x~0_366, main_#t~post4=|v_main_#t~post4_86|} OutVars{main_~x~0=v_main_~x~0_365, main_#t~post4=|v_main_#t~post4_85|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {5577#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:11,333 INFO L290 TraceCheckUtils]: 7: Hoare triple {5577#(<= main_~x~0 500000)} [121] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {5577#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:11,333 INFO L290 TraceCheckUtils]: 8: Hoare triple {5577#(<= main_~x~0 500000)} [122] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_368)) (.cse1 (= v_main_~x~0_368 v_main_~x~0_367)) (.cse2 (= |v_main_#t~post6_142| |v_main_#t~post6_140|))) (or (and (or (not (< v_main_~x~0_368 1000000)) (not .cse0)) (= v_main_~y~0_239 v_main_~y~0_240) .cse1 .cse2) (and .cse0 (= (+ v_main_~x~0_367 (* v_main_~y~0_240 2)) (+ v_main_~x~0_368 (* v_main_~y~0_239 2))) (< v_main_~y~0_240 v_main_~y~0_239) (< v_main_~y~0_239 (+ v_main_~y~0_240 2 (div (+ 999999 (* v_main_~x~0_368 (- 1))) 2)))) (and .cse1 (= v_main_~y~0_240 v_main_~y~0_239) .cse2))) InVars {main_~y~0=v_main_~y~0_240, main_~x~0=v_main_~x~0_368, main_#t~post6=|v_main_#t~post6_142|} OutVars{main_~y~0=v_main_~y~0_239, main_~x~0=v_main_~x~0_367, main_#t~post6=|v_main_#t~post6_140|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {5578#(<= main_~x~0 999999)} is VALID [2022-04-28 03:51:11,334 INFO L290 TraceCheckUtils]: 9: Hoare triple {5578#(<= main_~x~0 999999)} [123] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {5578#(<= main_~x~0 999999)} is VALID [2022-04-28 03:51:11,334 INFO L290 TraceCheckUtils]: 10: Hoare triple {5578#(<= main_~x~0 999999)} [124] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post5_71| |v_main_#t~post5_70|)) (.cse1 (= |v_main_#t~post6_145| |v_main_#t~post6_141|)) (.cse2 (= v_main_~y~0_242 v_main_~y~0_241)) (.cse3 (<= 500000 v_main_~x~0_370))) (or (and .cse0 .cse1 .cse2 (= v_main_~x~0_370 v_main_~x~0_369)) (and .cse0 .cse1 .cse2 (= v_main_~x~0_369 v_main_~x~0_370) (or (not .cse3) (not (< v_main_~x~0_370 750000)))) (and (= (+ v_main_~x~0_369 v_main_~y~0_242) (+ v_main_~x~0_370 v_main_~y~0_241)) (< v_main_~x~0_370 v_main_~x~0_369) (< v_main_~x~0_369 750001) .cse3))) InVars {main_~y~0=v_main_~y~0_242, main_#t~post5=|v_main_#t~post5_71|, main_~x~0=v_main_~x~0_370, main_#t~post6=|v_main_#t~post6_145|} OutVars{main_~y~0=v_main_~y~0_241, main_#t~post5=|v_main_#t~post5_70|, main_~x~0=v_main_~x~0_369, main_#t~post6=|v_main_#t~post6_141|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {5578#(<= main_~x~0 999999)} is VALID [2022-04-28 03:51:11,335 INFO L290 TraceCheckUtils]: 11: Hoare triple {5578#(<= main_~x~0 999999)} [119] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {5572#false} is VALID [2022-04-28 03:51:11,335 INFO L272 TraceCheckUtils]: 12: Hoare triple {5572#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {5572#false} is VALID [2022-04-28 03:51:11,335 INFO L290 TraceCheckUtils]: 13: Hoare triple {5572#false} ~cond := #in~cond; {5572#false} is VALID [2022-04-28 03:51:11,335 INFO L290 TraceCheckUtils]: 14: Hoare triple {5572#false} assume 0 == ~cond; {5572#false} is VALID [2022-04-28 03:51:11,335 INFO L290 TraceCheckUtils]: 15: Hoare triple {5572#false} assume !false; {5572#false} is VALID [2022-04-28 03:51:11,335 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:51:11,335 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:51:11,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [423532470] [2022-04-28 03:51:11,335 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [423532470] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:51:11,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1533506875] [2022-04-28 03:51:11,335 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:11,335 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:51:11,336 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:51:11,340 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:51:11,342 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-04-28 03:51:11,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:11,368 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:51:11,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:11,381 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:51:11,565 INFO L272 TraceCheckUtils]: 0: Hoare triple {5571#true} call ULTIMATE.init(); {5571#true} is VALID [2022-04-28 03:51:11,565 INFO L290 TraceCheckUtils]: 1: Hoare triple {5571#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {5571#true} is VALID [2022-04-28 03:51:11,565 INFO L290 TraceCheckUtils]: 2: Hoare triple {5571#true} assume true; {5571#true} is VALID [2022-04-28 03:51:11,565 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {5571#true} {5571#true} #48#return; {5571#true} is VALID [2022-04-28 03:51:11,565 INFO L272 TraceCheckUtils]: 4: Hoare triple {5571#true} call #t~ret7 := main(); {5571#true} is VALID [2022-04-28 03:51:11,565 INFO L290 TraceCheckUtils]: 5: Hoare triple {5571#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {5598#(<= main_~x~0 0)} is VALID [2022-04-28 03:51:11,566 INFO L290 TraceCheckUtils]: 6: Hoare triple {5598#(<= main_~x~0 0)} [120] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_86| |v_main_#t~post4_85|)) (.cse1 (= v_main_~x~0_366 v_main_~x~0_365))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_366)) (and .cse0 .cse1) (and (< v_main_~x~0_366 v_main_~x~0_365) (< v_main_~x~0_365 500001)))) InVars {main_~x~0=v_main_~x~0_366, main_#t~post4=|v_main_#t~post4_86|} OutVars{main_~x~0=v_main_~x~0_365, main_#t~post4=|v_main_#t~post4_85|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {5577#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:11,566 INFO L290 TraceCheckUtils]: 7: Hoare triple {5577#(<= main_~x~0 500000)} [121] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {5577#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:11,567 INFO L290 TraceCheckUtils]: 8: Hoare triple {5577#(<= main_~x~0 500000)} [122] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_368)) (.cse1 (= v_main_~x~0_368 v_main_~x~0_367)) (.cse2 (= |v_main_#t~post6_142| |v_main_#t~post6_140|))) (or (and (or (not (< v_main_~x~0_368 1000000)) (not .cse0)) (= v_main_~y~0_239 v_main_~y~0_240) .cse1 .cse2) (and .cse0 (= (+ v_main_~x~0_367 (* v_main_~y~0_240 2)) (+ v_main_~x~0_368 (* v_main_~y~0_239 2))) (< v_main_~y~0_240 v_main_~y~0_239) (< v_main_~y~0_239 (+ v_main_~y~0_240 2 (div (+ 999999 (* v_main_~x~0_368 (- 1))) 2)))) (and .cse1 (= v_main_~y~0_240 v_main_~y~0_239) .cse2))) InVars {main_~y~0=v_main_~y~0_240, main_~x~0=v_main_~x~0_368, main_#t~post6=|v_main_#t~post6_142|} OutVars{main_~y~0=v_main_~y~0_239, main_~x~0=v_main_~x~0_367, main_#t~post6=|v_main_#t~post6_140|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {5577#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:11,567 INFO L290 TraceCheckUtils]: 9: Hoare triple {5577#(<= main_~x~0 500000)} [123] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {5577#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:11,568 INFO L290 TraceCheckUtils]: 10: Hoare triple {5577#(<= main_~x~0 500000)} [124] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post5_71| |v_main_#t~post5_70|)) (.cse1 (= |v_main_#t~post6_145| |v_main_#t~post6_141|)) (.cse2 (= v_main_~y~0_242 v_main_~y~0_241)) (.cse3 (<= 500000 v_main_~x~0_370))) (or (and .cse0 .cse1 .cse2 (= v_main_~x~0_370 v_main_~x~0_369)) (and .cse0 .cse1 .cse2 (= v_main_~x~0_369 v_main_~x~0_370) (or (not .cse3) (not (< v_main_~x~0_370 750000)))) (and (= (+ v_main_~x~0_369 v_main_~y~0_242) (+ v_main_~x~0_370 v_main_~y~0_241)) (< v_main_~x~0_370 v_main_~x~0_369) (< v_main_~x~0_369 750001) .cse3))) InVars {main_~y~0=v_main_~y~0_242, main_#t~post5=|v_main_#t~post5_71|, main_~x~0=v_main_~x~0_370, main_#t~post6=|v_main_#t~post6_145|} OutVars{main_~y~0=v_main_~y~0_241, main_#t~post5=|v_main_#t~post5_70|, main_~x~0=v_main_~x~0_369, main_#t~post6=|v_main_#t~post6_141|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {5614#(< main_~x~0 750001)} is VALID [2022-04-28 03:51:11,568 INFO L290 TraceCheckUtils]: 11: Hoare triple {5614#(< main_~x~0 750001)} [119] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {5572#false} is VALID [2022-04-28 03:51:11,568 INFO L272 TraceCheckUtils]: 12: Hoare triple {5572#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {5572#false} is VALID [2022-04-28 03:51:11,568 INFO L290 TraceCheckUtils]: 13: Hoare triple {5572#false} ~cond := #in~cond; {5572#false} is VALID [2022-04-28 03:51:11,569 INFO L290 TraceCheckUtils]: 14: Hoare triple {5572#false} assume 0 == ~cond; {5572#false} is VALID [2022-04-28 03:51:11,569 INFO L290 TraceCheckUtils]: 15: Hoare triple {5572#false} assume !false; {5572#false} is VALID [2022-04-28 03:51:11,569 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:11,569 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:51:12,078 INFO L290 TraceCheckUtils]: 15: Hoare triple {5572#false} assume !false; {5572#false} is VALID [2022-04-28 03:51:12,078 INFO L290 TraceCheckUtils]: 14: Hoare triple {5633#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {5572#false} is VALID [2022-04-28 03:51:12,079 INFO L290 TraceCheckUtils]: 13: Hoare triple {5637#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {5633#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:51:12,079 INFO L272 TraceCheckUtils]: 12: Hoare triple {5641#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {5637#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:51:12,079 INFO L290 TraceCheckUtils]: 11: Hoare triple {5645#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [119] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {5641#(= main_~x~0 1000000)} is VALID [2022-04-28 03:51:12,080 INFO L290 TraceCheckUtils]: 10: Hoare triple {5645#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [124] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post5_71| |v_main_#t~post5_70|)) (.cse1 (= |v_main_#t~post6_145| |v_main_#t~post6_141|)) (.cse2 (= v_main_~y~0_242 v_main_~y~0_241)) (.cse3 (<= 500000 v_main_~x~0_370))) (or (and .cse0 .cse1 .cse2 (= v_main_~x~0_370 v_main_~x~0_369)) (and .cse0 .cse1 .cse2 (= v_main_~x~0_369 v_main_~x~0_370) (or (not .cse3) (not (< v_main_~x~0_370 750000)))) (and (= (+ v_main_~x~0_369 v_main_~y~0_242) (+ v_main_~x~0_370 v_main_~y~0_241)) (< v_main_~x~0_370 v_main_~x~0_369) (< v_main_~x~0_369 750001) .cse3))) InVars {main_~y~0=v_main_~y~0_242, main_#t~post5=|v_main_#t~post5_71|, main_~x~0=v_main_~x~0_370, main_#t~post6=|v_main_#t~post6_145|} OutVars{main_~y~0=v_main_~y~0_241, main_#t~post5=|v_main_#t~post5_70|, main_~x~0=v_main_~x~0_369, main_#t~post6=|v_main_#t~post6_141|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {5645#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:12,080 INFO L290 TraceCheckUtils]: 9: Hoare triple {5645#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [123] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {5645#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:12,081 INFO L290 TraceCheckUtils]: 8: Hoare triple {5655#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [122] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_368)) (.cse1 (= v_main_~x~0_368 v_main_~x~0_367)) (.cse2 (= |v_main_#t~post6_142| |v_main_#t~post6_140|))) (or (and (or (not (< v_main_~x~0_368 1000000)) (not .cse0)) (= v_main_~y~0_239 v_main_~y~0_240) .cse1 .cse2) (and .cse0 (= (+ v_main_~x~0_367 (* v_main_~y~0_240 2)) (+ v_main_~x~0_368 (* v_main_~y~0_239 2))) (< v_main_~y~0_240 v_main_~y~0_239) (< v_main_~y~0_239 (+ v_main_~y~0_240 2 (div (+ 999999 (* v_main_~x~0_368 (- 1))) 2)))) (and .cse1 (= v_main_~y~0_240 v_main_~y~0_239) .cse2))) InVars {main_~y~0=v_main_~y~0_240, main_~x~0=v_main_~x~0_368, main_#t~post6=|v_main_#t~post6_142|} OutVars{main_~y~0=v_main_~y~0_239, main_~x~0=v_main_~x~0_367, main_#t~post6=|v_main_#t~post6_140|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {5645#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:12,082 INFO L290 TraceCheckUtils]: 7: Hoare triple {5655#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [121] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {5655#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 03:51:12,083 INFO L290 TraceCheckUtils]: 6: Hoare triple {5655#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [120] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_86| |v_main_#t~post4_85|)) (.cse1 (= v_main_~x~0_366 v_main_~x~0_365))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_366)) (and .cse0 .cse1) (and (< v_main_~x~0_366 v_main_~x~0_365) (< v_main_~x~0_365 500001)))) InVars {main_~x~0=v_main_~x~0_366, main_#t~post4=|v_main_#t~post4_86|} OutVars{main_~x~0=v_main_~x~0_365, main_#t~post4=|v_main_#t~post4_85|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {5655#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 03:51:12,084 INFO L290 TraceCheckUtils]: 5: Hoare triple {5571#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {5655#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 03:51:12,084 INFO L272 TraceCheckUtils]: 4: Hoare triple {5571#true} call #t~ret7 := main(); {5571#true} is VALID [2022-04-28 03:51:12,084 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {5571#true} {5571#true} #48#return; {5571#true} is VALID [2022-04-28 03:51:12,084 INFO L290 TraceCheckUtils]: 2: Hoare triple {5571#true} assume true; {5571#true} is VALID [2022-04-28 03:51:12,084 INFO L290 TraceCheckUtils]: 1: Hoare triple {5571#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {5571#true} is VALID [2022-04-28 03:51:12,084 INFO L272 TraceCheckUtils]: 0: Hoare triple {5571#true} call ULTIMATE.init(); {5571#true} is VALID [2022-04-28 03:51:12,084 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:12,084 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1533506875] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:51:12,084 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:51:12,084 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:51:12,506 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:51:12,506 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1595077579] [2022-04-28 03:51:12,506 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1595077579] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:51:12,506 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:51:12,506 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [18] imperfect sequences [] total 18 [2022-04-28 03:51:12,506 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1661731067] [2022-04-28 03:51:12,506 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:51:12,506 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 3.388888888888889) internal successors, (61), 17 states have internal predecessors, (61), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 65 [2022-04-28 03:51:12,507 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:51:12,507 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 18 states, 18 states have (on average 3.388888888888889) internal successors, (61), 17 states have internal predecessors, (61), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:12,549 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:12,549 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-04-28 03:51:12,549 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:12,550 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-04-28 03:51:12,550 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=142, Invalid=614, Unknown=0, NotChecked=0, Total=756 [2022-04-28 03:51:12,550 INFO L87 Difference]: Start difference. First operand 68 states and 72 transitions. Second operand has 18 states, 18 states have (on average 3.388888888888889) internal successors, (61), 17 states have internal predecessors, (61), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:14,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:14,343 INFO L93 Difference]: Finished difference Result 95 states and 104 transitions. [2022-04-28 03:51:14,343 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-04-28 03:51:14,344 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 3.388888888888889) internal successors, (61), 17 states have internal predecessors, (61), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 65 [2022-04-28 03:51:14,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:51:14,344 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 18 states have (on average 3.388888888888889) internal successors, (61), 17 states have internal predecessors, (61), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:14,345 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 84 transitions. [2022-04-28 03:51:14,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 18 states have (on average 3.388888888888889) internal successors, (61), 17 states have internal predecessors, (61), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:14,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 84 transitions. [2022-04-28 03:51:14,347 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 18 states and 84 transitions. [2022-04-28 03:51:14,425 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:14,426 INFO L225 Difference]: With dead ends: 95 [2022-04-28 03:51:14,426 INFO L226 Difference]: Without dead ends: 77 [2022-04-28 03:51:14,427 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 113 GetRequests, 70 SyntacticMatches, 2 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 379 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=271, Invalid=1535, Unknown=0, NotChecked=0, Total=1806 [2022-04-28 03:51:14,427 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 50 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 844 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 862 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 844 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-04-28 03:51:14,427 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [50 Valid, 96 Invalid, 862 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 844 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-04-28 03:51:14,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2022-04-28 03:51:14,768 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 72. [2022-04-28 03:51:14,768 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:51:14,769 INFO L82 GeneralOperation]: Start isEquivalent. First operand 77 states. Second operand has 72 states, 67 states have (on average 1.0746268656716418) internal successors, (72), 67 states have internal predecessors, (72), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:14,769 INFO L74 IsIncluded]: Start isIncluded. First operand 77 states. Second operand has 72 states, 67 states have (on average 1.0746268656716418) internal successors, (72), 67 states have internal predecessors, (72), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:14,769 INFO L87 Difference]: Start difference. First operand 77 states. Second operand has 72 states, 67 states have (on average 1.0746268656716418) internal successors, (72), 67 states have internal predecessors, (72), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:14,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:14,770 INFO L93 Difference]: Finished difference Result 77 states and 81 transitions. [2022-04-28 03:51:14,770 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 81 transitions. [2022-04-28 03:51:14,770 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:51:14,771 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:51:14,771 INFO L74 IsIncluded]: Start isIncluded. First operand has 72 states, 67 states have (on average 1.0746268656716418) internal successors, (72), 67 states have internal predecessors, (72), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 77 states. [2022-04-28 03:51:14,771 INFO L87 Difference]: Start difference. First operand has 72 states, 67 states have (on average 1.0746268656716418) internal successors, (72), 67 states have internal predecessors, (72), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 77 states. [2022-04-28 03:51:14,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:14,772 INFO L93 Difference]: Finished difference Result 77 states and 81 transitions. [2022-04-28 03:51:14,772 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 81 transitions. [2022-04-28 03:51:14,772 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:51:14,772 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:51:14,773 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:51:14,773 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:51:14,773 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 67 states have (on average 1.0746268656716418) internal successors, (72), 67 states have internal predecessors, (72), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:14,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 76 transitions. [2022-04-28 03:51:14,774 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 76 transitions. Word has length 65 [2022-04-28 03:51:14,774 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:51:14,774 INFO L495 AbstractCegarLoop]: Abstraction has 72 states and 76 transitions. [2022-04-28 03:51:14,774 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 3.388888888888889) internal successors, (61), 17 states have internal predecessors, (61), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:14,774 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 72 states and 76 transitions. [2022-04-28 03:51:14,862 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:14,862 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 76 transitions. [2022-04-28 03:51:14,862 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-04-28 03:51:14,863 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:51:14,863 INFO L195 NwaCegarLoop]: trace histogram [15, 14, 14, 13, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:51:14,878 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2022-04-28 03:51:15,063 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-04-28 03:51:15,063 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:51:15,063 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:51:15,064 INFO L85 PathProgramCache]: Analyzing trace with hash 1422944523, now seen corresponding path program 12 times [2022-04-28 03:51:15,064 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:15,064 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1525737957] [2022-04-28 03:51:15,179 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:15,414 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:15,624 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:15,625 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:51:15,629 INFO L85 PathProgramCache]: Analyzing trace with hash -1625895513, now seen corresponding path program 1 times [2022-04-28 03:51:15,629 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:51:15,629 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [399307722] [2022-04-28 03:51:15,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:15,629 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:51:15,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:15,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:51:15,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:15,683 INFO L290 TraceCheckUtils]: 0: Hoare triple {6223#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {6215#true} is VALID [2022-04-28 03:51:15,683 INFO L290 TraceCheckUtils]: 1: Hoare triple {6215#true} assume true; {6215#true} is VALID [2022-04-28 03:51:15,683 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6215#true} {6215#true} #48#return; {6215#true} is VALID [2022-04-28 03:51:15,683 INFO L272 TraceCheckUtils]: 0: Hoare triple {6215#true} call ULTIMATE.init(); {6223#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:51:15,684 INFO L290 TraceCheckUtils]: 1: Hoare triple {6223#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {6215#true} is VALID [2022-04-28 03:51:15,684 INFO L290 TraceCheckUtils]: 2: Hoare triple {6215#true} assume true; {6215#true} is VALID [2022-04-28 03:51:15,684 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {6215#true} {6215#true} #48#return; {6215#true} is VALID [2022-04-28 03:51:15,684 INFO L272 TraceCheckUtils]: 4: Hoare triple {6215#true} call #t~ret7 := main(); {6215#true} is VALID [2022-04-28 03:51:15,684 INFO L290 TraceCheckUtils]: 5: Hoare triple {6215#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {6220#(= main_~x~0 0)} is VALID [2022-04-28 03:51:15,685 INFO L290 TraceCheckUtils]: 6: Hoare triple {6220#(= main_~x~0 0)} [126] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_93| |v_main_#t~post4_92|)) (.cse1 (= v_main_~x~0_404 v_main_~x~0_403))) (or (and (< v_main_~x~0_403 500001) (< v_main_~x~0_404 v_main_~x~0_403)) (and (<= 500000 v_main_~x~0_404) .cse0 .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_404, main_#t~post4=|v_main_#t~post4_93|} OutVars{main_~x~0=v_main_~x~0_403, main_#t~post4=|v_main_#t~post4_92|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {6221#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:15,685 INFO L290 TraceCheckUtils]: 7: Hoare triple {6221#(<= main_~x~0 500000)} [127] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {6221#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:15,686 INFO L290 TraceCheckUtils]: 8: Hoare triple {6221#(<= main_~x~0 500000)} [128] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_155| |v_main_#t~post6_153|)) (.cse1 (= v_main_~y~0_268 v_main_~y~0_267)) (.cse2 (= v_main_~x~0_406 v_main_~x~0_405)) (.cse3 (<= 750000 v_main_~x~0_406))) (or (and .cse0 .cse1 .cse2) (and (or (not (< v_main_~x~0_406 1000000)) (not .cse3)) .cse0 .cse1 .cse2) (and (< v_main_~y~0_267 (+ (div (+ 999999 (* v_main_~x~0_406 (- 1))) 2) v_main_~y~0_268 2)) .cse3 (< v_main_~y~0_268 v_main_~y~0_267) (= (+ v_main_~x~0_405 (* v_main_~y~0_268 2)) (+ v_main_~x~0_406 (* v_main_~y~0_267 2)))))) InVars {main_~y~0=v_main_~y~0_268, main_~x~0=v_main_~x~0_406, main_#t~post6=|v_main_#t~post6_155|} OutVars{main_~y~0=v_main_~y~0_267, main_~x~0=v_main_~x~0_405, main_#t~post6=|v_main_#t~post6_153|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {6221#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:15,687 INFO L290 TraceCheckUtils]: 9: Hoare triple {6221#(<= main_~x~0 500000)} [129] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {6221#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:15,688 INFO L290 TraceCheckUtils]: 10: Hoare triple {6221#(<= main_~x~0 500000)} [130] L11-2-->L10-2_primed: Formula: (let ((.cse4 (<= 500000 v_main_~x~0_408)) (.cse0 (= |v_main_#t~post6_158| |v_main_#t~post6_154|)) (.cse1 (= v_main_~x~0_408 v_main_~x~0_407)) (.cse2 (= |v_main_#t~post5_77| |v_main_#t~post5_76|))) (or (and .cse0 (= v_main_~y~0_270 v_main_~y~0_269) .cse1 .cse2) (let ((.cse3 (+ v_main_~x~0_408 v_main_~y~0_269))) (and (= .cse3 (+ v_main_~x~0_407 v_main_~y~0_270)) (< .cse3 (+ 750001 v_main_~y~0_270)) .cse4 (< v_main_~y~0_270 v_main_~y~0_269))) (and (= v_main_~y~0_269 v_main_~y~0_270) (or (not .cse4) (not (< v_main_~x~0_408 750000))) .cse0 .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_270, main_#t~post5=|v_main_#t~post5_77|, main_~x~0=v_main_~x~0_408, main_#t~post6=|v_main_#t~post6_158|} OutVars{main_~y~0=v_main_~y~0_269, main_#t~post5=|v_main_#t~post5_76|, main_~x~0=v_main_~x~0_407, main_#t~post6=|v_main_#t~post6_154|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {6222#(<= main_~x~0 750000)} is VALID [2022-04-28 03:51:15,688 INFO L290 TraceCheckUtils]: 11: Hoare triple {6222#(<= main_~x~0 750000)} [125] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {6216#false} is VALID [2022-04-28 03:51:15,688 INFO L272 TraceCheckUtils]: 12: Hoare triple {6216#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {6216#false} is VALID [2022-04-28 03:51:15,688 INFO L290 TraceCheckUtils]: 13: Hoare triple {6216#false} ~cond := #in~cond; {6216#false} is VALID [2022-04-28 03:51:15,688 INFO L290 TraceCheckUtils]: 14: Hoare triple {6216#false} assume 0 == ~cond; {6216#false} is VALID [2022-04-28 03:51:15,688 INFO L290 TraceCheckUtils]: 15: Hoare triple {6216#false} assume !false; {6216#false} is VALID [2022-04-28 03:51:15,689 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:15,689 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:51:15,689 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [399307722] [2022-04-28 03:51:15,689 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [399307722] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:51:15,689 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [859161029] [2022-04-28 03:51:15,689 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:15,689 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:51:15,689 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:51:15,690 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:51:15,712 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-04-28 03:51:15,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:15,727 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:51:15,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:15,737 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:51:15,929 INFO L272 TraceCheckUtils]: 0: Hoare triple {6215#true} call ULTIMATE.init(); {6215#true} is VALID [2022-04-28 03:51:15,930 INFO L290 TraceCheckUtils]: 1: Hoare triple {6215#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {6215#true} is VALID [2022-04-28 03:51:15,930 INFO L290 TraceCheckUtils]: 2: Hoare triple {6215#true} assume true; {6215#true} is VALID [2022-04-28 03:51:15,930 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {6215#true} {6215#true} #48#return; {6215#true} is VALID [2022-04-28 03:51:15,930 INFO L272 TraceCheckUtils]: 4: Hoare triple {6215#true} call #t~ret7 := main(); {6215#true} is VALID [2022-04-28 03:51:15,930 INFO L290 TraceCheckUtils]: 5: Hoare triple {6215#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {6242#(<= main_~x~0 0)} is VALID [2022-04-28 03:51:15,931 INFO L290 TraceCheckUtils]: 6: Hoare triple {6242#(<= main_~x~0 0)} [126] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_93| |v_main_#t~post4_92|)) (.cse1 (= v_main_~x~0_404 v_main_~x~0_403))) (or (and (< v_main_~x~0_403 500001) (< v_main_~x~0_404 v_main_~x~0_403)) (and (<= 500000 v_main_~x~0_404) .cse0 .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_404, main_#t~post4=|v_main_#t~post4_93|} OutVars{main_~x~0=v_main_~x~0_403, main_#t~post4=|v_main_#t~post4_92|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {6221#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:15,931 INFO L290 TraceCheckUtils]: 7: Hoare triple {6221#(<= main_~x~0 500000)} [127] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {6221#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:15,932 INFO L290 TraceCheckUtils]: 8: Hoare triple {6221#(<= main_~x~0 500000)} [128] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_155| |v_main_#t~post6_153|)) (.cse1 (= v_main_~y~0_268 v_main_~y~0_267)) (.cse2 (= v_main_~x~0_406 v_main_~x~0_405)) (.cse3 (<= 750000 v_main_~x~0_406))) (or (and .cse0 .cse1 .cse2) (and (or (not (< v_main_~x~0_406 1000000)) (not .cse3)) .cse0 .cse1 .cse2) (and (< v_main_~y~0_267 (+ (div (+ 999999 (* v_main_~x~0_406 (- 1))) 2) v_main_~y~0_268 2)) .cse3 (< v_main_~y~0_268 v_main_~y~0_267) (= (+ v_main_~x~0_405 (* v_main_~y~0_268 2)) (+ v_main_~x~0_406 (* v_main_~y~0_267 2)))))) InVars {main_~y~0=v_main_~y~0_268, main_~x~0=v_main_~x~0_406, main_#t~post6=|v_main_#t~post6_155|} OutVars{main_~y~0=v_main_~y~0_267, main_~x~0=v_main_~x~0_405, main_#t~post6=|v_main_#t~post6_153|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {6221#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:15,933 INFO L290 TraceCheckUtils]: 9: Hoare triple {6221#(<= main_~x~0 500000)} [129] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {6221#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:15,934 INFO L290 TraceCheckUtils]: 10: Hoare triple {6221#(<= main_~x~0 500000)} [130] L11-2-->L10-2_primed: Formula: (let ((.cse4 (<= 500000 v_main_~x~0_408)) (.cse0 (= |v_main_#t~post6_158| |v_main_#t~post6_154|)) (.cse1 (= v_main_~x~0_408 v_main_~x~0_407)) (.cse2 (= |v_main_#t~post5_77| |v_main_#t~post5_76|))) (or (and .cse0 (= v_main_~y~0_270 v_main_~y~0_269) .cse1 .cse2) (let ((.cse3 (+ v_main_~x~0_408 v_main_~y~0_269))) (and (= .cse3 (+ v_main_~x~0_407 v_main_~y~0_270)) (< .cse3 (+ 750001 v_main_~y~0_270)) .cse4 (< v_main_~y~0_270 v_main_~y~0_269))) (and (= v_main_~y~0_269 v_main_~y~0_270) (or (not .cse4) (not (< v_main_~x~0_408 750000))) .cse0 .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_270, main_#t~post5=|v_main_#t~post5_77|, main_~x~0=v_main_~x~0_408, main_#t~post6=|v_main_#t~post6_158|} OutVars{main_~y~0=v_main_~y~0_269, main_#t~post5=|v_main_#t~post5_76|, main_~x~0=v_main_~x~0_407, main_#t~post6=|v_main_#t~post6_154|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {6222#(<= main_~x~0 750000)} is VALID [2022-04-28 03:51:15,934 INFO L290 TraceCheckUtils]: 11: Hoare triple {6222#(<= main_~x~0 750000)} [125] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {6216#false} is VALID [2022-04-28 03:51:15,934 INFO L272 TraceCheckUtils]: 12: Hoare triple {6216#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {6216#false} is VALID [2022-04-28 03:51:15,934 INFO L290 TraceCheckUtils]: 13: Hoare triple {6216#false} ~cond := #in~cond; {6216#false} is VALID [2022-04-28 03:51:15,934 INFO L290 TraceCheckUtils]: 14: Hoare triple {6216#false} assume 0 == ~cond; {6216#false} is VALID [2022-04-28 03:51:15,934 INFO L290 TraceCheckUtils]: 15: Hoare triple {6216#false} assume !false; {6216#false} is VALID [2022-04-28 03:51:15,935 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:15,935 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:51:16,448 INFO L290 TraceCheckUtils]: 15: Hoare triple {6216#false} assume !false; {6216#false} is VALID [2022-04-28 03:51:16,449 INFO L290 TraceCheckUtils]: 14: Hoare triple {6276#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {6216#false} is VALID [2022-04-28 03:51:16,449 INFO L290 TraceCheckUtils]: 13: Hoare triple {6280#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {6276#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:51:16,450 INFO L272 TraceCheckUtils]: 12: Hoare triple {6284#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {6280#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:51:16,450 INFO L290 TraceCheckUtils]: 11: Hoare triple {6288#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [125] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {6284#(= main_~x~0 1000000)} is VALID [2022-04-28 03:51:16,452 INFO L290 TraceCheckUtils]: 10: Hoare triple {6288#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [130] L11-2-->L10-2_primed: Formula: (let ((.cse4 (<= 500000 v_main_~x~0_408)) (.cse0 (= |v_main_#t~post6_158| |v_main_#t~post6_154|)) (.cse1 (= v_main_~x~0_408 v_main_~x~0_407)) (.cse2 (= |v_main_#t~post5_77| |v_main_#t~post5_76|))) (or (and .cse0 (= v_main_~y~0_270 v_main_~y~0_269) .cse1 .cse2) (let ((.cse3 (+ v_main_~x~0_408 v_main_~y~0_269))) (and (= .cse3 (+ v_main_~x~0_407 v_main_~y~0_270)) (< .cse3 (+ 750001 v_main_~y~0_270)) .cse4 (< v_main_~y~0_270 v_main_~y~0_269))) (and (= v_main_~y~0_269 v_main_~y~0_270) (or (not .cse4) (not (< v_main_~x~0_408 750000))) .cse0 .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_270, main_#t~post5=|v_main_#t~post5_77|, main_~x~0=v_main_~x~0_408, main_#t~post6=|v_main_#t~post6_158|} OutVars{main_~y~0=v_main_~y~0_269, main_#t~post5=|v_main_#t~post5_76|, main_~x~0=v_main_~x~0_407, main_#t~post6=|v_main_#t~post6_154|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {6288#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:16,452 INFO L290 TraceCheckUtils]: 9: Hoare triple {6288#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [129] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {6288#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:16,453 INFO L290 TraceCheckUtils]: 8: Hoare triple {6298#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [128] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_155| |v_main_#t~post6_153|)) (.cse1 (= v_main_~y~0_268 v_main_~y~0_267)) (.cse2 (= v_main_~x~0_406 v_main_~x~0_405)) (.cse3 (<= 750000 v_main_~x~0_406))) (or (and .cse0 .cse1 .cse2) (and (or (not (< v_main_~x~0_406 1000000)) (not .cse3)) .cse0 .cse1 .cse2) (and (< v_main_~y~0_267 (+ (div (+ 999999 (* v_main_~x~0_406 (- 1))) 2) v_main_~y~0_268 2)) .cse3 (< v_main_~y~0_268 v_main_~y~0_267) (= (+ v_main_~x~0_405 (* v_main_~y~0_268 2)) (+ v_main_~x~0_406 (* v_main_~y~0_267 2)))))) InVars {main_~y~0=v_main_~y~0_268, main_~x~0=v_main_~x~0_406, main_#t~post6=|v_main_#t~post6_155|} OutVars{main_~y~0=v_main_~y~0_267, main_~x~0=v_main_~x~0_405, main_#t~post6=|v_main_#t~post6_153|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {6288#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:16,454 INFO L290 TraceCheckUtils]: 7: Hoare triple {6298#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [127] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {6298#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:16,456 INFO L290 TraceCheckUtils]: 6: Hoare triple {6298#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [126] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_93| |v_main_#t~post4_92|)) (.cse1 (= v_main_~x~0_404 v_main_~x~0_403))) (or (and (< v_main_~x~0_403 500001) (< v_main_~x~0_404 v_main_~x~0_403)) (and (<= 500000 v_main_~x~0_404) .cse0 .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_404, main_#t~post4=|v_main_#t~post4_93|} OutVars{main_~x~0=v_main_~x~0_403, main_#t~post4=|v_main_#t~post4_92|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {6298#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:16,456 INFO L290 TraceCheckUtils]: 5: Hoare triple {6215#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {6298#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:16,457 INFO L272 TraceCheckUtils]: 4: Hoare triple {6215#true} call #t~ret7 := main(); {6215#true} is VALID [2022-04-28 03:51:16,457 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {6215#true} {6215#true} #48#return; {6215#true} is VALID [2022-04-28 03:51:16,457 INFO L290 TraceCheckUtils]: 2: Hoare triple {6215#true} assume true; {6215#true} is VALID [2022-04-28 03:51:16,457 INFO L290 TraceCheckUtils]: 1: Hoare triple {6215#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {6215#true} is VALID [2022-04-28 03:51:16,457 INFO L272 TraceCheckUtils]: 0: Hoare triple {6215#true} call ULTIMATE.init(); {6215#true} is VALID [2022-04-28 03:51:16,457 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:16,457 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [859161029] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:51:16,457 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:51:16,457 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:51:16,893 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:51:16,893 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1525737957] [2022-04-28 03:51:16,893 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1525737957] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:51:16,893 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:51:16,893 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [19] imperfect sequences [] total 19 [2022-04-28 03:51:16,893 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1987462341] [2022-04-28 03:51:16,894 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:51:16,894 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 19 states have (on average 3.4210526315789473) internal successors, (65), 18 states have internal predecessors, (65), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 69 [2022-04-28 03:51:16,894 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:51:16,894 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 19 states, 19 states have (on average 3.4210526315789473) internal successors, (65), 18 states have internal predecessors, (65), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:16,940 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 69 edges. 69 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:16,940 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2022-04-28 03:51:16,941 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:16,941 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2022-04-28 03:51:16,941 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=125, Invalid=631, Unknown=0, NotChecked=0, Total=756 [2022-04-28 03:51:16,941 INFO L87 Difference]: Start difference. First operand 72 states and 76 transitions. Second operand has 19 states, 19 states have (on average 3.4210526315789473) internal successors, (65), 18 states have internal predecessors, (65), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:18,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:18,842 INFO L93 Difference]: Finished difference Result 99 states and 108 transitions. [2022-04-28 03:51:18,842 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-04-28 03:51:18,842 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 19 states have (on average 3.4210526315789473) internal successors, (65), 18 states have internal predecessors, (65), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 69 [2022-04-28 03:51:18,842 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:51:18,843 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 19 states have (on average 3.4210526315789473) internal successors, (65), 18 states have internal predecessors, (65), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:18,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 88 transitions. [2022-04-28 03:51:18,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 19 states have (on average 3.4210526315789473) internal successors, (65), 18 states have internal predecessors, (65), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:18,845 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 88 transitions. [2022-04-28 03:51:18,845 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 19 states and 88 transitions. [2022-04-28 03:51:18,931 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:18,932 INFO L225 Difference]: With dead ends: 99 [2022-04-28 03:51:18,932 INFO L226 Difference]: Without dead ends: 81 [2022-04-28 03:51:18,933 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 73 SyntacticMatches, 3 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 380 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=246, Invalid=1646, Unknown=0, NotChecked=0, Total=1892 [2022-04-28 03:51:18,933 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 54 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 904 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 923 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 904 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-28 03:51:18,934 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 97 Invalid, 923 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 904 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-28 03:51:18,934 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-04-28 03:51:19,307 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 76. [2022-04-28 03:51:19,307 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:51:19,307 INFO L82 GeneralOperation]: Start isEquivalent. First operand 81 states. Second operand has 76 states, 71 states have (on average 1.0704225352112675) internal successors, (76), 71 states have internal predecessors, (76), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:19,308 INFO L74 IsIncluded]: Start isIncluded. First operand 81 states. Second operand has 76 states, 71 states have (on average 1.0704225352112675) internal successors, (76), 71 states have internal predecessors, (76), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:19,308 INFO L87 Difference]: Start difference. First operand 81 states. Second operand has 76 states, 71 states have (on average 1.0704225352112675) internal successors, (76), 71 states have internal predecessors, (76), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:19,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:19,309 INFO L93 Difference]: Finished difference Result 81 states and 85 transitions. [2022-04-28 03:51:19,309 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 85 transitions. [2022-04-28 03:51:19,309 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:51:19,310 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:51:19,310 INFO L74 IsIncluded]: Start isIncluded. First operand has 76 states, 71 states have (on average 1.0704225352112675) internal successors, (76), 71 states have internal predecessors, (76), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 81 states. [2022-04-28 03:51:19,310 INFO L87 Difference]: Start difference. First operand has 76 states, 71 states have (on average 1.0704225352112675) internal successors, (76), 71 states have internal predecessors, (76), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 81 states. [2022-04-28 03:51:19,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:19,311 INFO L93 Difference]: Finished difference Result 81 states and 85 transitions. [2022-04-28 03:51:19,311 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 85 transitions. [2022-04-28 03:51:19,311 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:51:19,311 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:51:19,312 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:51:19,312 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:51:19,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 71 states have (on average 1.0704225352112675) internal successors, (76), 71 states have internal predecessors, (76), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:19,313 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 80 transitions. [2022-04-28 03:51:19,313 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 80 transitions. Word has length 69 [2022-04-28 03:51:19,313 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:51:19,313 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 80 transitions. [2022-04-28 03:51:19,313 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 19 states have (on average 3.4210526315789473) internal successors, (65), 18 states have internal predecessors, (65), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:19,313 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 76 states and 80 transitions. [2022-04-28 03:51:19,422 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:19,422 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 80 transitions. [2022-04-28 03:51:19,423 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-04-28 03:51:19,423 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:51:19,423 INFO L195 NwaCegarLoop]: trace histogram [16, 15, 15, 14, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:51:19,438 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-04-28 03:51:19,623 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-04-28 03:51:19,623 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:51:19,623 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:51:19,624 INFO L85 PathProgramCache]: Analyzing trace with hash -498941214, now seen corresponding path program 13 times [2022-04-28 03:51:19,624 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:19,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1509004234] [2022-04-28 03:51:19,735 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:22,625 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:51:22,760 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:23,011 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:23,012 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:51:23,015 INFO L85 PathProgramCache]: Analyzing trace with hash -1985470489, now seen corresponding path program 1 times [2022-04-28 03:51:23,015 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:51:23,015 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1850587840] [2022-04-28 03:51:23,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:23,015 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:51:23,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:23,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:51:23,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:23,064 INFO L290 TraceCheckUtils]: 0: Hoare triple {6893#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {6885#true} is VALID [2022-04-28 03:51:23,064 INFO L290 TraceCheckUtils]: 1: Hoare triple {6885#true} assume true; {6885#true} is VALID [2022-04-28 03:51:23,065 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6885#true} {6885#true} #48#return; {6885#true} is VALID [2022-04-28 03:51:23,065 INFO L272 TraceCheckUtils]: 0: Hoare triple {6885#true} call ULTIMATE.init(); {6893#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:51:23,065 INFO L290 TraceCheckUtils]: 1: Hoare triple {6893#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {6885#true} is VALID [2022-04-28 03:51:23,065 INFO L290 TraceCheckUtils]: 2: Hoare triple {6885#true} assume true; {6885#true} is VALID [2022-04-28 03:51:23,065 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {6885#true} {6885#true} #48#return; {6885#true} is VALID [2022-04-28 03:51:23,066 INFO L272 TraceCheckUtils]: 4: Hoare triple {6885#true} call #t~ret7 := main(); {6885#true} is VALID [2022-04-28 03:51:23,066 INFO L290 TraceCheckUtils]: 5: Hoare triple {6885#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {6890#(= main_~x~0 0)} is VALID [2022-04-28 03:51:23,067 INFO L290 TraceCheckUtils]: 6: Hoare triple {6890#(= main_~x~0 0)} [132] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_443 v_main_~x~0_442))) (or (and (< v_main_~x~0_443 v_main_~x~0_442) (< v_main_~x~0_442 500001)) (and .cse0 (<= 500000 v_main_~x~0_443) (= |v_main_#t~post4_99| |v_main_#t~post4_100|)) (and .cse0 (= |v_main_#t~post4_100| |v_main_#t~post4_99|)))) InVars {main_~x~0=v_main_~x~0_443, main_#t~post4=|v_main_#t~post4_100|} OutVars{main_~x~0=v_main_~x~0_442, main_#t~post4=|v_main_#t~post4_99|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {6891#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:23,067 INFO L290 TraceCheckUtils]: 7: Hoare triple {6891#(<= main_~x~0 500000)} [133] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {6891#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:23,068 INFO L290 TraceCheckUtils]: 8: Hoare triple {6891#(<= main_~x~0 500000)} [134] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_168| |v_main_#t~post6_166|)) (.cse1 (= v_main_~x~0_445 v_main_~x~0_444)) (.cse2 (= v_main_~y~0_297 v_main_~y~0_296)) (.cse3 (<= 750000 v_main_~x~0_445))) (or (and .cse0 .cse1 .cse2) (and (= (+ v_main_~x~0_444 (* v_main_~y~0_297 2)) (+ v_main_~x~0_445 (* v_main_~y~0_296 2))) .cse3 (< v_main_~y~0_297 v_main_~y~0_296) (< v_main_~y~0_296 (+ v_main_~y~0_297 (div (+ (* v_main_~x~0_445 (- 1)) 999999) 2) 2))) (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_445 1000000)) (not .cse3))))) InVars {main_~y~0=v_main_~y~0_297, main_~x~0=v_main_~x~0_445, main_#t~post6=|v_main_#t~post6_168|} OutVars{main_~y~0=v_main_~y~0_296, main_~x~0=v_main_~x~0_444, main_#t~post6=|v_main_#t~post6_166|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {6891#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:23,069 INFO L290 TraceCheckUtils]: 9: Hoare triple {6891#(<= main_~x~0 500000)} [135] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {6891#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:23,070 INFO L290 TraceCheckUtils]: 10: Hoare triple {6891#(<= main_~x~0 500000)} [136] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_447 v_main_~x~0_446)) (.cse1 (= |v_main_#t~post6_171| |v_main_#t~post6_167|)) (.cse2 (= |v_main_#t~post5_83| |v_main_#t~post5_82|)) (.cse3 (= v_main_~y~0_299 v_main_~y~0_298)) (.cse4 (<= 500000 v_main_~x~0_447))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 (or (not (< v_main_~x~0_447 750000)) (not .cse4)) .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_447 v_main_~y~0_298))) (and (< .cse5 (+ 750001 v_main_~y~0_299)) .cse4 (< v_main_~y~0_299 v_main_~y~0_298) (= .cse5 (+ v_main_~x~0_446 v_main_~y~0_299)))))) InVars {main_~y~0=v_main_~y~0_299, main_#t~post5=|v_main_#t~post5_83|, main_~x~0=v_main_~x~0_447, main_#t~post6=|v_main_#t~post6_171|} OutVars{main_~y~0=v_main_~y~0_298, main_#t~post5=|v_main_#t~post5_82|, main_~x~0=v_main_~x~0_446, main_#t~post6=|v_main_#t~post6_167|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {6892#(<= main_~x~0 750000)} is VALID [2022-04-28 03:51:23,070 INFO L290 TraceCheckUtils]: 11: Hoare triple {6892#(<= main_~x~0 750000)} [131] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {6886#false} is VALID [2022-04-28 03:51:23,070 INFO L272 TraceCheckUtils]: 12: Hoare triple {6886#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {6886#false} is VALID [2022-04-28 03:51:23,070 INFO L290 TraceCheckUtils]: 13: Hoare triple {6886#false} ~cond := #in~cond; {6886#false} is VALID [2022-04-28 03:51:23,070 INFO L290 TraceCheckUtils]: 14: Hoare triple {6886#false} assume 0 == ~cond; {6886#false} is VALID [2022-04-28 03:51:23,070 INFO L290 TraceCheckUtils]: 15: Hoare triple {6886#false} assume !false; {6886#false} is VALID [2022-04-28 03:51:23,071 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:23,071 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:51:23,071 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1850587840] [2022-04-28 03:51:23,071 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1850587840] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:51:23,071 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [447156649] [2022-04-28 03:51:23,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:23,071 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:51:23,071 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:51:23,076 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:51:23,077 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-04-28 03:51:23,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:23,101 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:51:23,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:23,109 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:51:23,296 INFO L272 TraceCheckUtils]: 0: Hoare triple {6885#true} call ULTIMATE.init(); {6885#true} is VALID [2022-04-28 03:51:23,296 INFO L290 TraceCheckUtils]: 1: Hoare triple {6885#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {6885#true} is VALID [2022-04-28 03:51:23,296 INFO L290 TraceCheckUtils]: 2: Hoare triple {6885#true} assume true; {6885#true} is VALID [2022-04-28 03:51:23,296 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {6885#true} {6885#true} #48#return; {6885#true} is VALID [2022-04-28 03:51:23,296 INFO L272 TraceCheckUtils]: 4: Hoare triple {6885#true} call #t~ret7 := main(); {6885#true} is VALID [2022-04-28 03:51:23,297 INFO L290 TraceCheckUtils]: 5: Hoare triple {6885#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {6912#(<= main_~x~0 0)} is VALID [2022-04-28 03:51:23,297 INFO L290 TraceCheckUtils]: 6: Hoare triple {6912#(<= main_~x~0 0)} [132] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_443 v_main_~x~0_442))) (or (and (< v_main_~x~0_443 v_main_~x~0_442) (< v_main_~x~0_442 500001)) (and .cse0 (<= 500000 v_main_~x~0_443) (= |v_main_#t~post4_99| |v_main_#t~post4_100|)) (and .cse0 (= |v_main_#t~post4_100| |v_main_#t~post4_99|)))) InVars {main_~x~0=v_main_~x~0_443, main_#t~post4=|v_main_#t~post4_100|} OutVars{main_~x~0=v_main_~x~0_442, main_#t~post4=|v_main_#t~post4_99|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {6891#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:23,298 INFO L290 TraceCheckUtils]: 7: Hoare triple {6891#(<= main_~x~0 500000)} [133] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {6891#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:23,298 INFO L290 TraceCheckUtils]: 8: Hoare triple {6891#(<= main_~x~0 500000)} [134] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_168| |v_main_#t~post6_166|)) (.cse1 (= v_main_~x~0_445 v_main_~x~0_444)) (.cse2 (= v_main_~y~0_297 v_main_~y~0_296)) (.cse3 (<= 750000 v_main_~x~0_445))) (or (and .cse0 .cse1 .cse2) (and (= (+ v_main_~x~0_444 (* v_main_~y~0_297 2)) (+ v_main_~x~0_445 (* v_main_~y~0_296 2))) .cse3 (< v_main_~y~0_297 v_main_~y~0_296) (< v_main_~y~0_296 (+ v_main_~y~0_297 (div (+ (* v_main_~x~0_445 (- 1)) 999999) 2) 2))) (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_445 1000000)) (not .cse3))))) InVars {main_~y~0=v_main_~y~0_297, main_~x~0=v_main_~x~0_445, main_#t~post6=|v_main_#t~post6_168|} OutVars{main_~y~0=v_main_~y~0_296, main_~x~0=v_main_~x~0_444, main_#t~post6=|v_main_#t~post6_166|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {6891#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:23,299 INFO L290 TraceCheckUtils]: 9: Hoare triple {6891#(<= main_~x~0 500000)} [135] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {6891#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:23,299 INFO L290 TraceCheckUtils]: 10: Hoare triple {6891#(<= main_~x~0 500000)} [136] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_447 v_main_~x~0_446)) (.cse1 (= |v_main_#t~post6_171| |v_main_#t~post6_167|)) (.cse2 (= |v_main_#t~post5_83| |v_main_#t~post5_82|)) (.cse3 (= v_main_~y~0_299 v_main_~y~0_298)) (.cse4 (<= 500000 v_main_~x~0_447))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 (or (not (< v_main_~x~0_447 750000)) (not .cse4)) .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_447 v_main_~y~0_298))) (and (< .cse5 (+ 750001 v_main_~y~0_299)) .cse4 (< v_main_~y~0_299 v_main_~y~0_298) (= .cse5 (+ v_main_~x~0_446 v_main_~y~0_299)))))) InVars {main_~y~0=v_main_~y~0_299, main_#t~post5=|v_main_#t~post5_83|, main_~x~0=v_main_~x~0_447, main_#t~post6=|v_main_#t~post6_171|} OutVars{main_~y~0=v_main_~y~0_298, main_#t~post5=|v_main_#t~post5_82|, main_~x~0=v_main_~x~0_446, main_#t~post6=|v_main_#t~post6_167|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {6892#(<= main_~x~0 750000)} is VALID [2022-04-28 03:51:23,300 INFO L290 TraceCheckUtils]: 11: Hoare triple {6892#(<= main_~x~0 750000)} [131] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {6886#false} is VALID [2022-04-28 03:51:23,300 INFO L272 TraceCheckUtils]: 12: Hoare triple {6886#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {6886#false} is VALID [2022-04-28 03:51:23,300 INFO L290 TraceCheckUtils]: 13: Hoare triple {6886#false} ~cond := #in~cond; {6886#false} is VALID [2022-04-28 03:51:23,300 INFO L290 TraceCheckUtils]: 14: Hoare triple {6886#false} assume 0 == ~cond; {6886#false} is VALID [2022-04-28 03:51:23,300 INFO L290 TraceCheckUtils]: 15: Hoare triple {6886#false} assume !false; {6886#false} is VALID [2022-04-28 03:51:23,300 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:23,300 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:51:23,822 INFO L290 TraceCheckUtils]: 15: Hoare triple {6886#false} assume !false; {6886#false} is VALID [2022-04-28 03:51:23,823 INFO L290 TraceCheckUtils]: 14: Hoare triple {6946#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {6886#false} is VALID [2022-04-28 03:51:23,823 INFO L290 TraceCheckUtils]: 13: Hoare triple {6950#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {6946#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:51:23,824 INFO L272 TraceCheckUtils]: 12: Hoare triple {6954#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {6950#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:51:23,824 INFO L290 TraceCheckUtils]: 11: Hoare triple {6958#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [131] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {6954#(= main_~x~0 1000000)} is VALID [2022-04-28 03:51:23,825 INFO L290 TraceCheckUtils]: 10: Hoare triple {6958#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [136] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_447 v_main_~x~0_446)) (.cse1 (= |v_main_#t~post6_171| |v_main_#t~post6_167|)) (.cse2 (= |v_main_#t~post5_83| |v_main_#t~post5_82|)) (.cse3 (= v_main_~y~0_299 v_main_~y~0_298)) (.cse4 (<= 500000 v_main_~x~0_447))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 (or (not (< v_main_~x~0_447 750000)) (not .cse4)) .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_447 v_main_~y~0_298))) (and (< .cse5 (+ 750001 v_main_~y~0_299)) .cse4 (< v_main_~y~0_299 v_main_~y~0_298) (= .cse5 (+ v_main_~x~0_446 v_main_~y~0_299)))))) InVars {main_~y~0=v_main_~y~0_299, main_#t~post5=|v_main_#t~post5_83|, main_~x~0=v_main_~x~0_447, main_#t~post6=|v_main_#t~post6_171|} OutVars{main_~y~0=v_main_~y~0_298, main_#t~post5=|v_main_#t~post5_82|, main_~x~0=v_main_~x~0_446, main_#t~post6=|v_main_#t~post6_167|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {6958#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:23,825 INFO L290 TraceCheckUtils]: 9: Hoare triple {6958#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [135] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {6958#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:23,826 INFO L290 TraceCheckUtils]: 8: Hoare triple {6968#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [134] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_168| |v_main_#t~post6_166|)) (.cse1 (= v_main_~x~0_445 v_main_~x~0_444)) (.cse2 (= v_main_~y~0_297 v_main_~y~0_296)) (.cse3 (<= 750000 v_main_~x~0_445))) (or (and .cse0 .cse1 .cse2) (and (= (+ v_main_~x~0_444 (* v_main_~y~0_297 2)) (+ v_main_~x~0_445 (* v_main_~y~0_296 2))) .cse3 (< v_main_~y~0_297 v_main_~y~0_296) (< v_main_~y~0_296 (+ v_main_~y~0_297 (div (+ (* v_main_~x~0_445 (- 1)) 999999) 2) 2))) (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_445 1000000)) (not .cse3))))) InVars {main_~y~0=v_main_~y~0_297, main_~x~0=v_main_~x~0_445, main_#t~post6=|v_main_#t~post6_168|} OutVars{main_~y~0=v_main_~y~0_296, main_~x~0=v_main_~x~0_444, main_#t~post6=|v_main_#t~post6_166|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {6958#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:23,827 INFO L290 TraceCheckUtils]: 7: Hoare triple {6968#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [133] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {6968#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:23,828 INFO L290 TraceCheckUtils]: 6: Hoare triple {6968#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [132] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_443 v_main_~x~0_442))) (or (and (< v_main_~x~0_443 v_main_~x~0_442) (< v_main_~x~0_442 500001)) (and .cse0 (<= 500000 v_main_~x~0_443) (= |v_main_#t~post4_99| |v_main_#t~post4_100|)) (and .cse0 (= |v_main_#t~post4_100| |v_main_#t~post4_99|)))) InVars {main_~x~0=v_main_~x~0_443, main_#t~post4=|v_main_#t~post4_100|} OutVars{main_~x~0=v_main_~x~0_442, main_#t~post4=|v_main_#t~post4_99|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {6968#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:23,829 INFO L290 TraceCheckUtils]: 5: Hoare triple {6885#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {6968#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:23,829 INFO L272 TraceCheckUtils]: 4: Hoare triple {6885#true} call #t~ret7 := main(); {6885#true} is VALID [2022-04-28 03:51:23,829 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {6885#true} {6885#true} #48#return; {6885#true} is VALID [2022-04-28 03:51:23,829 INFO L290 TraceCheckUtils]: 2: Hoare triple {6885#true} assume true; {6885#true} is VALID [2022-04-28 03:51:23,829 INFO L290 TraceCheckUtils]: 1: Hoare triple {6885#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {6885#true} is VALID [2022-04-28 03:51:23,829 INFO L272 TraceCheckUtils]: 0: Hoare triple {6885#true} call ULTIMATE.init(); {6885#true} is VALID [2022-04-28 03:51:23,829 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:23,829 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [447156649] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:51:23,829 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:51:23,829 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:51:24,332 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:51:24,332 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1509004234] [2022-04-28 03:51:24,332 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1509004234] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:51:24,332 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:51:24,332 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [20] imperfect sequences [] total 20 [2022-04-28 03:51:24,332 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [577883909] [2022-04-28 03:51:24,332 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:51:24,333 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 3.45) internal successors, (69), 19 states have internal predecessors, (69), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 73 [2022-04-28 03:51:24,333 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:51:24,333 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 20 states, 20 states have (on average 3.45) internal successors, (69), 19 states have internal predecessors, (69), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:24,382 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:24,382 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-04-28 03:51:24,382 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:24,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-04-28 03:51:24,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=130, Invalid=682, Unknown=0, NotChecked=0, Total=812 [2022-04-28 03:51:24,383 INFO L87 Difference]: Start difference. First operand 76 states and 80 transitions. Second operand has 20 states, 20 states have (on average 3.45) internal successors, (69), 19 states have internal predecessors, (69), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:26,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:26,455 INFO L93 Difference]: Finished difference Result 103 states and 112 transitions. [2022-04-28 03:51:26,455 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-04-28 03:51:26,455 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 3.45) internal successors, (69), 19 states have internal predecessors, (69), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 73 [2022-04-28 03:51:26,455 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:51:26,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 20 states have (on average 3.45) internal successors, (69), 19 states have internal predecessors, (69), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:26,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 92 transitions. [2022-04-28 03:51:26,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 20 states have (on average 3.45) internal successors, (69), 19 states have internal predecessors, (69), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:26,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 92 transitions. [2022-04-28 03:51:26,457 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 20 states and 92 transitions. [2022-04-28 03:51:26,536 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 92 edges. 92 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:26,538 INFO L225 Difference]: With dead ends: 103 [2022-04-28 03:51:26,538 INFO L226 Difference]: Without dead ends: 85 [2022-04-28 03:51:26,539 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 76 SyntacticMatches, 3 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 412 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=258, Invalid=1812, Unknown=0, NotChecked=0, Total=2070 [2022-04-28 03:51:26,539 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 57 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 1028 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 103 SdHoareTripleChecker+Invalid, 1048 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 1028 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-04-28 03:51:26,539 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 103 Invalid, 1048 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 1028 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-04-28 03:51:26,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-04-28 03:51:26,978 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 80. [2022-04-28 03:51:26,979 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:51:26,979 INFO L82 GeneralOperation]: Start isEquivalent. First operand 85 states. Second operand has 80 states, 75 states have (on average 1.0666666666666667) internal successors, (80), 75 states have internal predecessors, (80), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:26,979 INFO L74 IsIncluded]: Start isIncluded. First operand 85 states. Second operand has 80 states, 75 states have (on average 1.0666666666666667) internal successors, (80), 75 states have internal predecessors, (80), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:26,983 INFO L87 Difference]: Start difference. First operand 85 states. Second operand has 80 states, 75 states have (on average 1.0666666666666667) internal successors, (80), 75 states have internal predecessors, (80), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:26,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:26,984 INFO L93 Difference]: Finished difference Result 85 states and 89 transitions. [2022-04-28 03:51:26,984 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 89 transitions. [2022-04-28 03:51:26,985 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:51:26,985 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:51:26,985 INFO L74 IsIncluded]: Start isIncluded. First operand has 80 states, 75 states have (on average 1.0666666666666667) internal successors, (80), 75 states have internal predecessors, (80), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 85 states. [2022-04-28 03:51:26,985 INFO L87 Difference]: Start difference. First operand has 80 states, 75 states have (on average 1.0666666666666667) internal successors, (80), 75 states have internal predecessors, (80), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 85 states. [2022-04-28 03:51:26,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:26,986 INFO L93 Difference]: Finished difference Result 85 states and 89 transitions. [2022-04-28 03:51:26,986 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 89 transitions. [2022-04-28 03:51:26,987 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:51:26,987 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:51:26,987 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:51:26,987 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:51:26,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 75 states have (on average 1.0666666666666667) internal successors, (80), 75 states have internal predecessors, (80), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:26,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 84 transitions. [2022-04-28 03:51:26,988 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 84 transitions. Word has length 73 [2022-04-28 03:51:26,988 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:51:26,988 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 84 transitions. [2022-04-28 03:51:26,989 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 3.45) internal successors, (69), 19 states have internal predecessors, (69), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:26,989 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 80 states and 84 transitions. [2022-04-28 03:51:27,098 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:27,099 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 84 transitions. [2022-04-28 03:51:27,099 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2022-04-28 03:51:27,099 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:51:27,099 INFO L195 NwaCegarLoop]: trace histogram [17, 16, 16, 15, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:51:27,115 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-04-28 03:51:27,299 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15,15 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:51:27,300 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:51:27,300 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:51:27,300 INFO L85 PathProgramCache]: Analyzing trace with hash 1488345401, now seen corresponding path program 14 times [2022-04-28 03:51:27,300 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:27,300 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1102575830] [2022-04-28 03:51:27,417 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:27,661 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:27,899 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:27,900 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:51:27,903 INFO L85 PathProgramCache]: Analyzing trace with hash 1949921831, now seen corresponding path program 1 times [2022-04-28 03:51:27,903 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:51:27,903 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [533873395] [2022-04-28 03:51:27,903 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:27,903 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:51:27,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:27,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:51:27,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:27,965 INFO L290 TraceCheckUtils]: 0: Hoare triple {7590#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {7582#true} is VALID [2022-04-28 03:51:27,965 INFO L290 TraceCheckUtils]: 1: Hoare triple {7582#true} assume true; {7582#true} is VALID [2022-04-28 03:51:27,965 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7582#true} {7582#true} #48#return; {7582#true} is VALID [2022-04-28 03:51:27,965 INFO L272 TraceCheckUtils]: 0: Hoare triple {7582#true} call ULTIMATE.init(); {7590#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:51:27,965 INFO L290 TraceCheckUtils]: 1: Hoare triple {7590#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {7582#true} is VALID [2022-04-28 03:51:27,965 INFO L290 TraceCheckUtils]: 2: Hoare triple {7582#true} assume true; {7582#true} is VALID [2022-04-28 03:51:27,966 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {7582#true} {7582#true} #48#return; {7582#true} is VALID [2022-04-28 03:51:27,966 INFO L272 TraceCheckUtils]: 4: Hoare triple {7582#true} call #t~ret7 := main(); {7582#true} is VALID [2022-04-28 03:51:27,966 INFO L290 TraceCheckUtils]: 5: Hoare triple {7582#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {7587#(= main_~x~0 0)} is VALID [2022-04-28 03:51:27,966 INFO L290 TraceCheckUtils]: 6: Hoare triple {7587#(= main_~x~0 0)} [138] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_107| |v_main_#t~post4_106|)) (.cse1 (= v_main_~x~0_483 v_main_~x~0_482))) (or (and .cse0 (not (< v_main_~x~0_483 500000)) .cse1) (and (< v_main_~x~0_483 v_main_~x~0_482) (< v_main_~x~0_482 500001)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_483, main_#t~post4=|v_main_#t~post4_107|} OutVars{main_~x~0=v_main_~x~0_482, main_#t~post4=|v_main_#t~post4_106|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {7588#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:27,967 INFO L290 TraceCheckUtils]: 7: Hoare triple {7588#(<= main_~x~0 500000)} [139] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {7588#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:27,967 INFO L290 TraceCheckUtils]: 8: Hoare triple {7588#(<= main_~x~0 500000)} [140] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_327 v_main_~y~0_326)) (.cse1 (= v_main_~x~0_485 v_main_~x~0_484)) (.cse2 (<= 750000 v_main_~x~0_485))) (or (and (= |v_main_#t~post6_181| |v_main_#t~post6_179|) .cse0 .cse1) (and (or (not (< v_main_~x~0_485 1000000)) (not .cse2)) .cse0 .cse1 (= |v_main_#t~post6_179| |v_main_#t~post6_181|)) (and (< v_main_~y~0_326 (+ (div (+ (* v_main_~x~0_485 (- 1)) 999999) 2) v_main_~y~0_327 2)) .cse2 (= (+ v_main_~x~0_484 (* v_main_~y~0_327 2)) (+ v_main_~x~0_485 (* v_main_~y~0_326 2))) (< v_main_~y~0_327 v_main_~y~0_326)))) InVars {main_~y~0=v_main_~y~0_327, main_~x~0=v_main_~x~0_485, main_#t~post6=|v_main_#t~post6_181|} OutVars{main_~y~0=v_main_~y~0_326, main_~x~0=v_main_~x~0_484, main_#t~post6=|v_main_#t~post6_179|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {7588#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:27,968 INFO L290 TraceCheckUtils]: 9: Hoare triple {7588#(<= main_~x~0 500000)} [141] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {7588#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:27,968 INFO L290 TraceCheckUtils]: 10: Hoare triple {7588#(<= main_~x~0 500000)} [142] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_487)) (.cse1 (= |v_main_#t~post5_89| |v_main_#t~post5_88|)) (.cse2 (= v_main_~y~0_329 v_main_~y~0_328)) (.cse3 (= v_main_~x~0_487 v_main_~x~0_486)) (.cse4 (= |v_main_#t~post6_184| |v_main_#t~post6_180|))) (or (and (< v_main_~x~0_486 750001) (< v_main_~x~0_487 v_main_~x~0_486) (= (+ v_main_~x~0_487 v_main_~y~0_328) (+ v_main_~x~0_486 v_main_~y~0_329)) .cse0) (and (or (not .cse0) (not (< v_main_~x~0_487 750000))) .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_329, main_#t~post5=|v_main_#t~post5_89|, main_~x~0=v_main_~x~0_487, main_#t~post6=|v_main_#t~post6_184|} OutVars{main_~y~0=v_main_~y~0_328, main_#t~post5=|v_main_#t~post5_88|, main_~x~0=v_main_~x~0_486, main_#t~post6=|v_main_#t~post6_180|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {7589#(<= main_~x~0 750000)} is VALID [2022-04-28 03:51:27,969 INFO L290 TraceCheckUtils]: 11: Hoare triple {7589#(<= main_~x~0 750000)} [137] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {7583#false} is VALID [2022-04-28 03:51:27,969 INFO L272 TraceCheckUtils]: 12: Hoare triple {7583#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {7583#false} is VALID [2022-04-28 03:51:27,969 INFO L290 TraceCheckUtils]: 13: Hoare triple {7583#false} ~cond := #in~cond; {7583#false} is VALID [2022-04-28 03:51:27,969 INFO L290 TraceCheckUtils]: 14: Hoare triple {7583#false} assume 0 == ~cond; {7583#false} is VALID [2022-04-28 03:51:27,969 INFO L290 TraceCheckUtils]: 15: Hoare triple {7583#false} assume !false; {7583#false} is VALID [2022-04-28 03:51:27,969 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:27,969 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:51:27,969 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [533873395] [2022-04-28 03:51:27,969 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [533873395] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:51:27,969 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [760244489] [2022-04-28 03:51:27,970 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:27,970 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:51:27,970 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:51:27,971 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:51:27,971 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-04-28 03:51:27,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:27,999 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:51:28,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:28,008 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:51:28,192 INFO L272 TraceCheckUtils]: 0: Hoare triple {7582#true} call ULTIMATE.init(); {7582#true} is VALID [2022-04-28 03:51:28,192 INFO L290 TraceCheckUtils]: 1: Hoare triple {7582#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {7582#true} is VALID [2022-04-28 03:51:28,193 INFO L290 TraceCheckUtils]: 2: Hoare triple {7582#true} assume true; {7582#true} is VALID [2022-04-28 03:51:28,193 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {7582#true} {7582#true} #48#return; {7582#true} is VALID [2022-04-28 03:51:28,193 INFO L272 TraceCheckUtils]: 4: Hoare triple {7582#true} call #t~ret7 := main(); {7582#true} is VALID [2022-04-28 03:51:28,193 INFO L290 TraceCheckUtils]: 5: Hoare triple {7582#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {7609#(<= main_~x~0 0)} is VALID [2022-04-28 03:51:28,194 INFO L290 TraceCheckUtils]: 6: Hoare triple {7609#(<= main_~x~0 0)} [138] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_107| |v_main_#t~post4_106|)) (.cse1 (= v_main_~x~0_483 v_main_~x~0_482))) (or (and .cse0 (not (< v_main_~x~0_483 500000)) .cse1) (and (< v_main_~x~0_483 v_main_~x~0_482) (< v_main_~x~0_482 500001)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_483, main_#t~post4=|v_main_#t~post4_107|} OutVars{main_~x~0=v_main_~x~0_482, main_#t~post4=|v_main_#t~post4_106|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {7588#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:28,194 INFO L290 TraceCheckUtils]: 7: Hoare triple {7588#(<= main_~x~0 500000)} [139] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {7588#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:28,197 INFO L290 TraceCheckUtils]: 8: Hoare triple {7588#(<= main_~x~0 500000)} [140] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_327 v_main_~y~0_326)) (.cse1 (= v_main_~x~0_485 v_main_~x~0_484)) (.cse2 (<= 750000 v_main_~x~0_485))) (or (and (= |v_main_#t~post6_181| |v_main_#t~post6_179|) .cse0 .cse1) (and (or (not (< v_main_~x~0_485 1000000)) (not .cse2)) .cse0 .cse1 (= |v_main_#t~post6_179| |v_main_#t~post6_181|)) (and (< v_main_~y~0_326 (+ (div (+ (* v_main_~x~0_485 (- 1)) 999999) 2) v_main_~y~0_327 2)) .cse2 (= (+ v_main_~x~0_484 (* v_main_~y~0_327 2)) (+ v_main_~x~0_485 (* v_main_~y~0_326 2))) (< v_main_~y~0_327 v_main_~y~0_326)))) InVars {main_~y~0=v_main_~y~0_327, main_~x~0=v_main_~x~0_485, main_#t~post6=|v_main_#t~post6_181|} OutVars{main_~y~0=v_main_~y~0_326, main_~x~0=v_main_~x~0_484, main_#t~post6=|v_main_#t~post6_179|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {7588#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:28,197 INFO L290 TraceCheckUtils]: 9: Hoare triple {7588#(<= main_~x~0 500000)} [141] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {7588#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:28,198 INFO L290 TraceCheckUtils]: 10: Hoare triple {7588#(<= main_~x~0 500000)} [142] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_487)) (.cse1 (= |v_main_#t~post5_89| |v_main_#t~post5_88|)) (.cse2 (= v_main_~y~0_329 v_main_~y~0_328)) (.cse3 (= v_main_~x~0_487 v_main_~x~0_486)) (.cse4 (= |v_main_#t~post6_184| |v_main_#t~post6_180|))) (or (and (< v_main_~x~0_486 750001) (< v_main_~x~0_487 v_main_~x~0_486) (= (+ v_main_~x~0_487 v_main_~y~0_328) (+ v_main_~x~0_486 v_main_~y~0_329)) .cse0) (and (or (not .cse0) (not (< v_main_~x~0_487 750000))) .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_329, main_#t~post5=|v_main_#t~post5_89|, main_~x~0=v_main_~x~0_487, main_#t~post6=|v_main_#t~post6_184|} OutVars{main_~y~0=v_main_~y~0_328, main_#t~post5=|v_main_#t~post5_88|, main_~x~0=v_main_~x~0_486, main_#t~post6=|v_main_#t~post6_180|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {7589#(<= main_~x~0 750000)} is VALID [2022-04-28 03:51:28,198 INFO L290 TraceCheckUtils]: 11: Hoare triple {7589#(<= main_~x~0 750000)} [137] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {7583#false} is VALID [2022-04-28 03:51:28,198 INFO L272 TraceCheckUtils]: 12: Hoare triple {7583#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {7583#false} is VALID [2022-04-28 03:51:28,198 INFO L290 TraceCheckUtils]: 13: Hoare triple {7583#false} ~cond := #in~cond; {7583#false} is VALID [2022-04-28 03:51:28,198 INFO L290 TraceCheckUtils]: 14: Hoare triple {7583#false} assume 0 == ~cond; {7583#false} is VALID [2022-04-28 03:51:28,198 INFO L290 TraceCheckUtils]: 15: Hoare triple {7583#false} assume !false; {7583#false} is VALID [2022-04-28 03:51:28,198 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:28,199 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:51:28,695 INFO L290 TraceCheckUtils]: 15: Hoare triple {7583#false} assume !false; {7583#false} is VALID [2022-04-28 03:51:28,695 INFO L290 TraceCheckUtils]: 14: Hoare triple {7643#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {7583#false} is VALID [2022-04-28 03:51:28,696 INFO L290 TraceCheckUtils]: 13: Hoare triple {7647#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {7643#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:51:28,696 INFO L272 TraceCheckUtils]: 12: Hoare triple {7651#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {7647#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:51:28,696 INFO L290 TraceCheckUtils]: 11: Hoare triple {7655#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [137] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {7651#(= main_~x~0 1000000)} is VALID [2022-04-28 03:51:28,697 INFO L290 TraceCheckUtils]: 10: Hoare triple {7655#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [142] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_487)) (.cse1 (= |v_main_#t~post5_89| |v_main_#t~post5_88|)) (.cse2 (= v_main_~y~0_329 v_main_~y~0_328)) (.cse3 (= v_main_~x~0_487 v_main_~x~0_486)) (.cse4 (= |v_main_#t~post6_184| |v_main_#t~post6_180|))) (or (and (< v_main_~x~0_486 750001) (< v_main_~x~0_487 v_main_~x~0_486) (= (+ v_main_~x~0_487 v_main_~y~0_328) (+ v_main_~x~0_486 v_main_~y~0_329)) .cse0) (and (or (not .cse0) (not (< v_main_~x~0_487 750000))) .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_329, main_#t~post5=|v_main_#t~post5_89|, main_~x~0=v_main_~x~0_487, main_#t~post6=|v_main_#t~post6_184|} OutVars{main_~y~0=v_main_~y~0_328, main_#t~post5=|v_main_#t~post5_88|, main_~x~0=v_main_~x~0_486, main_#t~post6=|v_main_#t~post6_180|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {7655#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:28,698 INFO L290 TraceCheckUtils]: 9: Hoare triple {7655#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [141] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {7655#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:28,699 INFO L290 TraceCheckUtils]: 8: Hoare triple {7665#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [140] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_327 v_main_~y~0_326)) (.cse1 (= v_main_~x~0_485 v_main_~x~0_484)) (.cse2 (<= 750000 v_main_~x~0_485))) (or (and (= |v_main_#t~post6_181| |v_main_#t~post6_179|) .cse0 .cse1) (and (or (not (< v_main_~x~0_485 1000000)) (not .cse2)) .cse0 .cse1 (= |v_main_#t~post6_179| |v_main_#t~post6_181|)) (and (< v_main_~y~0_326 (+ (div (+ (* v_main_~x~0_485 (- 1)) 999999) 2) v_main_~y~0_327 2)) .cse2 (= (+ v_main_~x~0_484 (* v_main_~y~0_327 2)) (+ v_main_~x~0_485 (* v_main_~y~0_326 2))) (< v_main_~y~0_327 v_main_~y~0_326)))) InVars {main_~y~0=v_main_~y~0_327, main_~x~0=v_main_~x~0_485, main_#t~post6=|v_main_#t~post6_181|} OutVars{main_~y~0=v_main_~y~0_326, main_~x~0=v_main_~x~0_484, main_#t~post6=|v_main_#t~post6_179|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {7655#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:28,699 INFO L290 TraceCheckUtils]: 7: Hoare triple {7665#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [139] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {7665#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:28,700 INFO L290 TraceCheckUtils]: 6: Hoare triple {7665#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [138] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_107| |v_main_#t~post4_106|)) (.cse1 (= v_main_~x~0_483 v_main_~x~0_482))) (or (and .cse0 (not (< v_main_~x~0_483 500000)) .cse1) (and (< v_main_~x~0_483 v_main_~x~0_482) (< v_main_~x~0_482 500001)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_483, main_#t~post4=|v_main_#t~post4_107|} OutVars{main_~x~0=v_main_~x~0_482, main_#t~post4=|v_main_#t~post4_106|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {7665#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:28,701 INFO L290 TraceCheckUtils]: 5: Hoare triple {7582#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {7665#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:28,701 INFO L272 TraceCheckUtils]: 4: Hoare triple {7582#true} call #t~ret7 := main(); {7582#true} is VALID [2022-04-28 03:51:28,701 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {7582#true} {7582#true} #48#return; {7582#true} is VALID [2022-04-28 03:51:28,701 INFO L290 TraceCheckUtils]: 2: Hoare triple {7582#true} assume true; {7582#true} is VALID [2022-04-28 03:51:28,701 INFO L290 TraceCheckUtils]: 1: Hoare triple {7582#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {7582#true} is VALID [2022-04-28 03:51:28,701 INFO L272 TraceCheckUtils]: 0: Hoare triple {7582#true} call ULTIMATE.init(); {7582#true} is VALID [2022-04-28 03:51:28,701 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:28,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [760244489] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:51:28,702 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:51:28,702 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:51:29,197 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:51:29,197 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1102575830] [2022-04-28 03:51:29,197 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1102575830] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:51:29,197 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:51:29,197 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [21] imperfect sequences [] total 21 [2022-04-28 03:51:29,197 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2086209833] [2022-04-28 03:51:29,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:51:29,198 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 20 states have internal predecessors, (73), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 77 [2022-04-28 03:51:29,198 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:51:29,198 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 20 states have internal predecessors, (73), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:29,248 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:29,248 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2022-04-28 03:51:29,248 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:29,248 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2022-04-28 03:51:29,249 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=135, Invalid=735, Unknown=0, NotChecked=0, Total=870 [2022-04-28 03:51:29,249 INFO L87 Difference]: Start difference. First operand 80 states and 84 transitions. Second operand has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 20 states have internal predecessors, (73), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:31,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:31,604 INFO L93 Difference]: Finished difference Result 107 states and 116 transitions. [2022-04-28 03:51:31,604 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-04-28 03:51:31,604 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 20 states have internal predecessors, (73), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 77 [2022-04-28 03:51:31,604 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:51:31,604 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 20 states have internal predecessors, (73), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:31,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 96 transitions. [2022-04-28 03:51:31,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 20 states have internal predecessors, (73), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:31,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 96 transitions. [2022-04-28 03:51:31,607 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 21 states and 96 transitions. [2022-04-28 03:51:31,689 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 96 edges. 96 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:31,690 INFO L225 Difference]: With dead ends: 107 [2022-04-28 03:51:31,690 INFO L226 Difference]: Without dead ends: 89 [2022-04-28 03:51:31,690 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 79 SyntacticMatches, 3 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 445 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=270, Invalid=1986, Unknown=0, NotChecked=0, Total=2256 [2022-04-28 03:51:31,691 INFO L413 NwaCegarLoop]: 27 mSDtfsCounter, 59 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 1228 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 114 SdHoareTripleChecker+Invalid, 1249 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 1228 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-04-28 03:51:31,691 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 114 Invalid, 1249 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 1228 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-04-28 03:51:31,691 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2022-04-28 03:51:32,163 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 84. [2022-04-28 03:51:32,163 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:51:32,163 INFO L82 GeneralOperation]: Start isEquivalent. First operand 89 states. Second operand has 84 states, 79 states have (on average 1.0632911392405062) internal successors, (84), 79 states have internal predecessors, (84), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:32,163 INFO L74 IsIncluded]: Start isIncluded. First operand 89 states. Second operand has 84 states, 79 states have (on average 1.0632911392405062) internal successors, (84), 79 states have internal predecessors, (84), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:32,163 INFO L87 Difference]: Start difference. First operand 89 states. Second operand has 84 states, 79 states have (on average 1.0632911392405062) internal successors, (84), 79 states have internal predecessors, (84), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:32,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:32,164 INFO L93 Difference]: Finished difference Result 89 states and 93 transitions. [2022-04-28 03:51:32,164 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 93 transitions. [2022-04-28 03:51:32,165 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:51:32,165 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:51:32,165 INFO L74 IsIncluded]: Start isIncluded. First operand has 84 states, 79 states have (on average 1.0632911392405062) internal successors, (84), 79 states have internal predecessors, (84), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 89 states. [2022-04-28 03:51:32,165 INFO L87 Difference]: Start difference. First operand has 84 states, 79 states have (on average 1.0632911392405062) internal successors, (84), 79 states have internal predecessors, (84), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 89 states. [2022-04-28 03:51:32,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:32,166 INFO L93 Difference]: Finished difference Result 89 states and 93 transitions. [2022-04-28 03:51:32,166 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 93 transitions. [2022-04-28 03:51:32,167 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:51:32,167 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:51:32,167 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:51:32,167 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:51:32,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 79 states have (on average 1.0632911392405062) internal successors, (84), 79 states have internal predecessors, (84), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:32,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 88 transitions. [2022-04-28 03:51:32,168 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 88 transitions. Word has length 77 [2022-04-28 03:51:32,168 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:51:32,168 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 88 transitions. [2022-04-28 03:51:32,169 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 20 states have internal predecessors, (73), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:32,169 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 84 states and 88 transitions. [2022-04-28 03:51:32,287 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:32,287 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 88 transitions. [2022-04-28 03:51:32,287 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2022-04-28 03:51:32,287 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:51:32,288 INFO L195 NwaCegarLoop]: trace histogram [18, 17, 17, 16, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:51:32,303 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2022-04-28 03:51:32,488 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-04-28 03:51:32,488 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:51:32,488 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:51:32,489 INFO L85 PathProgramCache]: Analyzing trace with hash -1539773424, now seen corresponding path program 15 times [2022-04-28 03:51:32,489 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:32,489 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1055364193] [2022-04-28 03:51:32,586 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:32,828 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:33,080 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:33,081 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:51:33,085 INFO L85 PathProgramCache]: Analyzing trace with hash 1590346855, now seen corresponding path program 1 times [2022-04-28 03:51:33,085 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:51:33,085 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1591640869] [2022-04-28 03:51:33,085 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:33,085 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:51:33,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:33,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:51:33,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:33,135 INFO L290 TraceCheckUtils]: 0: Hoare triple {8314#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {8306#true} is VALID [2022-04-28 03:51:33,135 INFO L290 TraceCheckUtils]: 1: Hoare triple {8306#true} assume true; {8306#true} is VALID [2022-04-28 03:51:33,135 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8306#true} {8306#true} #48#return; {8306#true} is VALID [2022-04-28 03:51:33,136 INFO L272 TraceCheckUtils]: 0: Hoare triple {8306#true} call ULTIMATE.init(); {8314#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:51:33,136 INFO L290 TraceCheckUtils]: 1: Hoare triple {8314#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {8306#true} is VALID [2022-04-28 03:51:33,136 INFO L290 TraceCheckUtils]: 2: Hoare triple {8306#true} assume true; {8306#true} is VALID [2022-04-28 03:51:33,136 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {8306#true} {8306#true} #48#return; {8306#true} is VALID [2022-04-28 03:51:33,136 INFO L272 TraceCheckUtils]: 4: Hoare triple {8306#true} call #t~ret7 := main(); {8306#true} is VALID [2022-04-28 03:51:33,137 INFO L290 TraceCheckUtils]: 5: Hoare triple {8306#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {8311#(= main_~x~0 0)} is VALID [2022-04-28 03:51:33,137 INFO L290 TraceCheckUtils]: 6: Hoare triple {8311#(= main_~x~0 0)} [144] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_114| |v_main_#t~post4_113|)) (.cse1 (= v_main_~x~0_524 v_main_~x~0_523))) (or (and .cse0 .cse1) (and (< v_main_~x~0_523 500001) (< v_main_~x~0_524 v_main_~x~0_523)) (and (not (< v_main_~x~0_524 500000)) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_524, main_#t~post4=|v_main_#t~post4_114|} OutVars{main_~x~0=v_main_~x~0_523, main_#t~post4=|v_main_#t~post4_113|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {8312#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:33,138 INFO L290 TraceCheckUtils]: 7: Hoare triple {8312#(<= main_~x~0 500000)} [145] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {8312#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:33,139 INFO L290 TraceCheckUtils]: 8: Hoare triple {8312#(<= main_~x~0 500000)} [146] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~x~0_526 v_main_~x~0_525)) (.cse0 (<= 750000 v_main_~x~0_526)) (.cse2 (= |v_main_#t~post6_194| |v_main_#t~post6_192|)) (.cse3 (= v_main_~y~0_358 v_main_~y~0_357))) (or (and (< v_main_~y~0_358 v_main_~y~0_357) (= (+ v_main_~x~0_526 (* v_main_~y~0_357 2)) (+ v_main_~x~0_525 (* v_main_~y~0_358 2))) .cse0 (< v_main_~y~0_357 (+ (div (+ 999999 (* v_main_~x~0_526 (- 1))) 2) v_main_~y~0_358 2))) (and .cse1 .cse2 .cse3) (and .cse1 (or (not (< v_main_~x~0_526 1000000)) (not .cse0)) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_358, main_~x~0=v_main_~x~0_526, main_#t~post6=|v_main_#t~post6_194|} OutVars{main_~y~0=v_main_~y~0_357, main_~x~0=v_main_~x~0_525, main_#t~post6=|v_main_#t~post6_192|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {8313#(<= main_~x~0 999999)} is VALID [2022-04-28 03:51:33,139 INFO L290 TraceCheckUtils]: 9: Hoare triple {8313#(<= main_~x~0 999999)} [147] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {8313#(<= main_~x~0 999999)} is VALID [2022-04-28 03:51:33,140 INFO L290 TraceCheckUtils]: 10: Hoare triple {8313#(<= main_~x~0 999999)} [148] L11-2-->L10-2_primed: Formula: (let ((.cse2 (<= 500000 v_main_~x~0_528)) (.cse0 (= |v_main_#t~post5_95| |v_main_#t~post5_94|)) (.cse1 (= |v_main_#t~post6_197| |v_main_#t~post6_193|)) (.cse3 (= v_main_~x~0_528 v_main_~x~0_527))) (or (and .cse0 .cse1 (= v_main_~y~0_359 v_main_~y~0_360) (or (not (< v_main_~x~0_528 750000)) (not .cse2)) .cse3) (and (< v_main_~x~0_528 v_main_~x~0_527) .cse2 (= (+ v_main_~x~0_528 v_main_~y~0_359) (+ v_main_~x~0_527 v_main_~y~0_360)) (< v_main_~x~0_527 750001)) (and .cse0 .cse1 (= v_main_~y~0_360 v_main_~y~0_359) .cse3))) InVars {main_~y~0=v_main_~y~0_360, main_#t~post5=|v_main_#t~post5_95|, main_~x~0=v_main_~x~0_528, main_#t~post6=|v_main_#t~post6_197|} OutVars{main_~y~0=v_main_~y~0_359, main_#t~post5=|v_main_#t~post5_94|, main_~x~0=v_main_~x~0_527, main_#t~post6=|v_main_#t~post6_193|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {8313#(<= main_~x~0 999999)} is VALID [2022-04-28 03:51:33,140 INFO L290 TraceCheckUtils]: 11: Hoare triple {8313#(<= main_~x~0 999999)} [143] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {8307#false} is VALID [2022-04-28 03:51:33,141 INFO L272 TraceCheckUtils]: 12: Hoare triple {8307#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {8307#false} is VALID [2022-04-28 03:51:33,141 INFO L290 TraceCheckUtils]: 13: Hoare triple {8307#false} ~cond := #in~cond; {8307#false} is VALID [2022-04-28 03:51:33,141 INFO L290 TraceCheckUtils]: 14: Hoare triple {8307#false} assume 0 == ~cond; {8307#false} is VALID [2022-04-28 03:51:33,141 INFO L290 TraceCheckUtils]: 15: Hoare triple {8307#false} assume !false; {8307#false} is VALID [2022-04-28 03:51:33,141 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:51:33,141 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:51:33,141 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1591640869] [2022-04-28 03:51:33,141 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1591640869] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:51:33,141 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1389965128] [2022-04-28 03:51:33,142 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:33,142 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:51:33,142 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:51:33,143 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:51:33,143 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-04-28 03:51:33,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:33,168 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:51:33,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:33,177 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:51:33,348 INFO L272 TraceCheckUtils]: 0: Hoare triple {8306#true} call ULTIMATE.init(); {8306#true} is VALID [2022-04-28 03:51:33,349 INFO L290 TraceCheckUtils]: 1: Hoare triple {8306#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {8306#true} is VALID [2022-04-28 03:51:33,349 INFO L290 TraceCheckUtils]: 2: Hoare triple {8306#true} assume true; {8306#true} is VALID [2022-04-28 03:51:33,349 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {8306#true} {8306#true} #48#return; {8306#true} is VALID [2022-04-28 03:51:33,349 INFO L272 TraceCheckUtils]: 4: Hoare triple {8306#true} call #t~ret7 := main(); {8306#true} is VALID [2022-04-28 03:51:33,349 INFO L290 TraceCheckUtils]: 5: Hoare triple {8306#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {8333#(<= main_~x~0 0)} is VALID [2022-04-28 03:51:33,350 INFO L290 TraceCheckUtils]: 6: Hoare triple {8333#(<= main_~x~0 0)} [144] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_114| |v_main_#t~post4_113|)) (.cse1 (= v_main_~x~0_524 v_main_~x~0_523))) (or (and .cse0 .cse1) (and (< v_main_~x~0_523 500001) (< v_main_~x~0_524 v_main_~x~0_523)) (and (not (< v_main_~x~0_524 500000)) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_524, main_#t~post4=|v_main_#t~post4_114|} OutVars{main_~x~0=v_main_~x~0_523, main_#t~post4=|v_main_#t~post4_113|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {8312#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:33,350 INFO L290 TraceCheckUtils]: 7: Hoare triple {8312#(<= main_~x~0 500000)} [145] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {8312#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:33,351 INFO L290 TraceCheckUtils]: 8: Hoare triple {8312#(<= main_~x~0 500000)} [146] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~x~0_526 v_main_~x~0_525)) (.cse0 (<= 750000 v_main_~x~0_526)) (.cse2 (= |v_main_#t~post6_194| |v_main_#t~post6_192|)) (.cse3 (= v_main_~y~0_358 v_main_~y~0_357))) (or (and (< v_main_~y~0_358 v_main_~y~0_357) (= (+ v_main_~x~0_526 (* v_main_~y~0_357 2)) (+ v_main_~x~0_525 (* v_main_~y~0_358 2))) .cse0 (< v_main_~y~0_357 (+ (div (+ 999999 (* v_main_~x~0_526 (- 1))) 2) v_main_~y~0_358 2))) (and .cse1 .cse2 .cse3) (and .cse1 (or (not (< v_main_~x~0_526 1000000)) (not .cse0)) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_358, main_~x~0=v_main_~x~0_526, main_#t~post6=|v_main_#t~post6_194|} OutVars{main_~y~0=v_main_~y~0_357, main_~x~0=v_main_~x~0_525, main_#t~post6=|v_main_#t~post6_192|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {8312#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:33,356 INFO L290 TraceCheckUtils]: 9: Hoare triple {8312#(<= main_~x~0 500000)} [147] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {8312#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:33,357 INFO L290 TraceCheckUtils]: 10: Hoare triple {8312#(<= main_~x~0 500000)} [148] L11-2-->L10-2_primed: Formula: (let ((.cse2 (<= 500000 v_main_~x~0_528)) (.cse0 (= |v_main_#t~post5_95| |v_main_#t~post5_94|)) (.cse1 (= |v_main_#t~post6_197| |v_main_#t~post6_193|)) (.cse3 (= v_main_~x~0_528 v_main_~x~0_527))) (or (and .cse0 .cse1 (= v_main_~y~0_359 v_main_~y~0_360) (or (not (< v_main_~x~0_528 750000)) (not .cse2)) .cse3) (and (< v_main_~x~0_528 v_main_~x~0_527) .cse2 (= (+ v_main_~x~0_528 v_main_~y~0_359) (+ v_main_~x~0_527 v_main_~y~0_360)) (< v_main_~x~0_527 750001)) (and .cse0 .cse1 (= v_main_~y~0_360 v_main_~y~0_359) .cse3))) InVars {main_~y~0=v_main_~y~0_360, main_#t~post5=|v_main_#t~post5_95|, main_~x~0=v_main_~x~0_528, main_#t~post6=|v_main_#t~post6_197|} OutVars{main_~y~0=v_main_~y~0_359, main_#t~post5=|v_main_#t~post5_94|, main_~x~0=v_main_~x~0_527, main_#t~post6=|v_main_#t~post6_193|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {8349#(< main_~x~0 750001)} is VALID [2022-04-28 03:51:33,358 INFO L290 TraceCheckUtils]: 11: Hoare triple {8349#(< main_~x~0 750001)} [143] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {8307#false} is VALID [2022-04-28 03:51:33,358 INFO L272 TraceCheckUtils]: 12: Hoare triple {8307#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {8307#false} is VALID [2022-04-28 03:51:33,358 INFO L290 TraceCheckUtils]: 13: Hoare triple {8307#false} ~cond := #in~cond; {8307#false} is VALID [2022-04-28 03:51:33,358 INFO L290 TraceCheckUtils]: 14: Hoare triple {8307#false} assume 0 == ~cond; {8307#false} is VALID [2022-04-28 03:51:33,358 INFO L290 TraceCheckUtils]: 15: Hoare triple {8307#false} assume !false; {8307#false} is VALID [2022-04-28 03:51:33,358 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:33,358 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:51:33,825 INFO L290 TraceCheckUtils]: 15: Hoare triple {8307#false} assume !false; {8307#false} is VALID [2022-04-28 03:51:33,825 INFO L290 TraceCheckUtils]: 14: Hoare triple {8368#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {8307#false} is VALID [2022-04-28 03:51:33,826 INFO L290 TraceCheckUtils]: 13: Hoare triple {8372#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {8368#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:51:33,826 INFO L272 TraceCheckUtils]: 12: Hoare triple {8376#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {8372#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:51:33,826 INFO L290 TraceCheckUtils]: 11: Hoare triple {8380#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [143] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {8376#(= main_~x~0 1000000)} is VALID [2022-04-28 03:51:33,827 INFO L290 TraceCheckUtils]: 10: Hoare triple {8380#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [148] L11-2-->L10-2_primed: Formula: (let ((.cse2 (<= 500000 v_main_~x~0_528)) (.cse0 (= |v_main_#t~post5_95| |v_main_#t~post5_94|)) (.cse1 (= |v_main_#t~post6_197| |v_main_#t~post6_193|)) (.cse3 (= v_main_~x~0_528 v_main_~x~0_527))) (or (and .cse0 .cse1 (= v_main_~y~0_359 v_main_~y~0_360) (or (not (< v_main_~x~0_528 750000)) (not .cse2)) .cse3) (and (< v_main_~x~0_528 v_main_~x~0_527) .cse2 (= (+ v_main_~x~0_528 v_main_~y~0_359) (+ v_main_~x~0_527 v_main_~y~0_360)) (< v_main_~x~0_527 750001)) (and .cse0 .cse1 (= v_main_~y~0_360 v_main_~y~0_359) .cse3))) InVars {main_~y~0=v_main_~y~0_360, main_#t~post5=|v_main_#t~post5_95|, main_~x~0=v_main_~x~0_528, main_#t~post6=|v_main_#t~post6_197|} OutVars{main_~y~0=v_main_~y~0_359, main_#t~post5=|v_main_#t~post5_94|, main_~x~0=v_main_~x~0_527, main_#t~post6=|v_main_#t~post6_193|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {8380#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:33,827 INFO L290 TraceCheckUtils]: 9: Hoare triple {8380#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [147] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {8380#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:33,828 INFO L290 TraceCheckUtils]: 8: Hoare triple {8390#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [146] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~x~0_526 v_main_~x~0_525)) (.cse0 (<= 750000 v_main_~x~0_526)) (.cse2 (= |v_main_#t~post6_194| |v_main_#t~post6_192|)) (.cse3 (= v_main_~y~0_358 v_main_~y~0_357))) (or (and (< v_main_~y~0_358 v_main_~y~0_357) (= (+ v_main_~x~0_526 (* v_main_~y~0_357 2)) (+ v_main_~x~0_525 (* v_main_~y~0_358 2))) .cse0 (< v_main_~y~0_357 (+ (div (+ 999999 (* v_main_~x~0_526 (- 1))) 2) v_main_~y~0_358 2))) (and .cse1 .cse2 .cse3) (and .cse1 (or (not (< v_main_~x~0_526 1000000)) (not .cse0)) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_358, main_~x~0=v_main_~x~0_526, main_#t~post6=|v_main_#t~post6_194|} OutVars{main_~y~0=v_main_~y~0_357, main_~x~0=v_main_~x~0_525, main_#t~post6=|v_main_#t~post6_192|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {8380#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:33,829 INFO L290 TraceCheckUtils]: 7: Hoare triple {8390#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [145] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {8390#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:33,830 INFO L290 TraceCheckUtils]: 6: Hoare triple {8390#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [144] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_114| |v_main_#t~post4_113|)) (.cse1 (= v_main_~x~0_524 v_main_~x~0_523))) (or (and .cse0 .cse1) (and (< v_main_~x~0_523 500001) (< v_main_~x~0_524 v_main_~x~0_523)) (and (not (< v_main_~x~0_524 500000)) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_524, main_#t~post4=|v_main_#t~post4_114|} OutVars{main_~x~0=v_main_~x~0_523, main_#t~post4=|v_main_#t~post4_113|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {8390#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:33,831 INFO L290 TraceCheckUtils]: 5: Hoare triple {8306#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {8390#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:33,831 INFO L272 TraceCheckUtils]: 4: Hoare triple {8306#true} call #t~ret7 := main(); {8306#true} is VALID [2022-04-28 03:51:33,831 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {8306#true} {8306#true} #48#return; {8306#true} is VALID [2022-04-28 03:51:33,832 INFO L290 TraceCheckUtils]: 2: Hoare triple {8306#true} assume true; {8306#true} is VALID [2022-04-28 03:51:33,832 INFO L290 TraceCheckUtils]: 1: Hoare triple {8306#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {8306#true} is VALID [2022-04-28 03:51:33,832 INFO L272 TraceCheckUtils]: 0: Hoare triple {8306#true} call ULTIMATE.init(); {8306#true} is VALID [2022-04-28 03:51:33,832 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:33,832 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1389965128] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:51:33,832 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:51:33,832 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:51:34,410 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:51:34,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1055364193] [2022-04-28 03:51:34,410 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1055364193] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:51:34,411 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:51:34,411 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [22] imperfect sequences [] total 22 [2022-04-28 03:51:34,411 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [453990187] [2022-04-28 03:51:34,411 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:51:34,411 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 3.5) internal successors, (77), 21 states have internal predecessors, (77), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 81 [2022-04-28 03:51:34,411 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:51:34,411 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 22 states, 22 states have (on average 3.5) internal successors, (77), 21 states have internal predecessors, (77), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:34,464 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 81 edges. 81 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:34,464 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-04-28 03:51:34,464 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:34,465 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-04-28 03:51:34,465 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=166, Invalid=826, Unknown=0, NotChecked=0, Total=992 [2022-04-28 03:51:34,465 INFO L87 Difference]: Start difference. First operand 84 states and 88 transitions. Second operand has 22 states, 22 states have (on average 3.5) internal successors, (77), 21 states have internal predecessors, (77), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:37,051 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:37,051 INFO L93 Difference]: Finished difference Result 111 states and 120 transitions. [2022-04-28 03:51:37,051 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-04-28 03:51:37,051 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 3.5) internal successors, (77), 21 states have internal predecessors, (77), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 81 [2022-04-28 03:51:37,051 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:51:37,051 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22 states, 22 states have (on average 3.5) internal successors, (77), 21 states have internal predecessors, (77), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:37,052 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22 states to 22 states and 100 transitions. [2022-04-28 03:51:37,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22 states, 22 states have (on average 3.5) internal successors, (77), 21 states have internal predecessors, (77), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:37,054 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22 states to 22 states and 100 transitions. [2022-04-28 03:51:37,054 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 22 states and 100 transitions. [2022-04-28 03:51:37,148 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 100 edges. 100 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:37,149 INFO L225 Difference]: With dead ends: 111 [2022-04-28 03:51:37,150 INFO L226 Difference]: Without dead ends: 93 [2022-04-28 03:51:37,150 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 82 SyntacticMatches, 2 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 513 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=327, Invalid=2223, Unknown=0, NotChecked=0, Total=2550 [2022-04-28 03:51:37,151 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 63 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 1300 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 1322 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 1300 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-04-28 03:51:37,151 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 115 Invalid, 1322 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 1300 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-04-28 03:51:37,151 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-04-28 03:51:37,819 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 88. [2022-04-28 03:51:37,819 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:51:37,820 INFO L82 GeneralOperation]: Start isEquivalent. First operand 93 states. Second operand has 88 states, 83 states have (on average 1.0602409638554218) internal successors, (88), 83 states have internal predecessors, (88), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:37,820 INFO L74 IsIncluded]: Start isIncluded. First operand 93 states. Second operand has 88 states, 83 states have (on average 1.0602409638554218) internal successors, (88), 83 states have internal predecessors, (88), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:37,820 INFO L87 Difference]: Start difference. First operand 93 states. Second operand has 88 states, 83 states have (on average 1.0602409638554218) internal successors, (88), 83 states have internal predecessors, (88), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:37,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:37,821 INFO L93 Difference]: Finished difference Result 93 states and 97 transitions. [2022-04-28 03:51:37,821 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 97 transitions. [2022-04-28 03:51:37,822 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:51:37,822 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:51:37,822 INFO L74 IsIncluded]: Start isIncluded. First operand has 88 states, 83 states have (on average 1.0602409638554218) internal successors, (88), 83 states have internal predecessors, (88), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 93 states. [2022-04-28 03:51:37,822 INFO L87 Difference]: Start difference. First operand has 88 states, 83 states have (on average 1.0602409638554218) internal successors, (88), 83 states have internal predecessors, (88), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 93 states. [2022-04-28 03:51:37,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:37,823 INFO L93 Difference]: Finished difference Result 93 states and 97 transitions. [2022-04-28 03:51:37,823 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 97 transitions. [2022-04-28 03:51:37,824 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:51:37,824 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:51:37,824 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:51:37,824 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:51:37,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 83 states have (on average 1.0602409638554218) internal successors, (88), 83 states have internal predecessors, (88), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:37,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 92 transitions. [2022-04-28 03:51:37,825 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 92 transitions. Word has length 81 [2022-04-28 03:51:37,825 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:51:37,826 INFO L495 AbstractCegarLoop]: Abstraction has 88 states and 92 transitions. [2022-04-28 03:51:37,826 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 3.5) internal successors, (77), 21 states have internal predecessors, (77), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:37,826 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 88 states and 92 transitions. [2022-04-28 03:51:37,992 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 92 edges. 92 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:37,992 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 92 transitions. [2022-04-28 03:51:37,993 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2022-04-28 03:51:37,993 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:51:37,993 INFO L195 NwaCegarLoop]: trace histogram [19, 18, 18, 17, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:51:38,015 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-04-28 03:51:38,193 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-04-28 03:51:38,194 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:51:38,194 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:51:38,194 INFO L85 PathProgramCache]: Analyzing trace with hash 1945647975, now seen corresponding path program 16 times [2022-04-28 03:51:38,194 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:38,194 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1531276325] [2022-04-28 03:51:42,272 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:51:42,329 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:42,563 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:42,788 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:42,789 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:51:42,792 INFO L85 PathProgramCache]: Analyzing trace with hash 1230771879, now seen corresponding path program 1 times [2022-04-28 03:51:42,792 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:51:42,792 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1724655096] [2022-04-28 03:51:42,792 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:42,793 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:51:42,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:42,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:51:42,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:42,844 INFO L290 TraceCheckUtils]: 0: Hoare triple {9066#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {9058#true} is VALID [2022-04-28 03:51:42,844 INFO L290 TraceCheckUtils]: 1: Hoare triple {9058#true} assume true; {9058#true} is VALID [2022-04-28 03:51:42,844 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9058#true} {9058#true} #48#return; {9058#true} is VALID [2022-04-28 03:51:42,844 INFO L272 TraceCheckUtils]: 0: Hoare triple {9058#true} call ULTIMATE.init(); {9066#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:51:42,844 INFO L290 TraceCheckUtils]: 1: Hoare triple {9066#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {9058#true} is VALID [2022-04-28 03:51:42,845 INFO L290 TraceCheckUtils]: 2: Hoare triple {9058#true} assume true; {9058#true} is VALID [2022-04-28 03:51:42,845 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {9058#true} {9058#true} #48#return; {9058#true} is VALID [2022-04-28 03:51:42,845 INFO L272 TraceCheckUtils]: 4: Hoare triple {9058#true} call #t~ret7 := main(); {9058#true} is VALID [2022-04-28 03:51:42,845 INFO L290 TraceCheckUtils]: 5: Hoare triple {9058#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {9063#(= main_~x~0 0)} is VALID [2022-04-28 03:51:42,846 INFO L290 TraceCheckUtils]: 6: Hoare triple {9063#(= main_~x~0 0)} [150] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_566 v_main_~x~0_565)) (.cse1 (= |v_main_#t~post4_121| |v_main_#t~post4_120|))) (or (and (<= 500000 v_main_~x~0_566) .cse0 .cse1) (and .cse0 .cse1) (and (< v_main_~x~0_565 500001) (< v_main_~x~0_566 v_main_~x~0_565)))) InVars {main_~x~0=v_main_~x~0_566, main_#t~post4=|v_main_#t~post4_121|} OutVars{main_~x~0=v_main_~x~0_565, main_#t~post4=|v_main_#t~post4_120|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {9064#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:42,846 INFO L290 TraceCheckUtils]: 7: Hoare triple {9064#(<= main_~x~0 500000)} [151] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {9064#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:42,847 INFO L290 TraceCheckUtils]: 8: Hoare triple {9064#(<= main_~x~0 500000)} [152] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_568)) (.cse1 (= |v_main_#t~post6_207| |v_main_#t~post6_205|)) (.cse2 (= v_main_~x~0_568 v_main_~x~0_567))) (or (and (< v_main_~y~0_390 v_main_~y~0_389) (< v_main_~y~0_389 (+ (div (+ 999999 (* v_main_~x~0_568 (- 1))) 2) v_main_~y~0_390 2)) .cse0 (= (+ v_main_~x~0_568 (* v_main_~y~0_389 2)) (+ v_main_~x~0_567 (* v_main_~y~0_390 2)))) (and (or (not (< v_main_~x~0_568 1000000)) (not .cse0)) .cse1 (= v_main_~y~0_389 v_main_~y~0_390) .cse2) (and (= v_main_~y~0_390 v_main_~y~0_389) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_390, main_~x~0=v_main_~x~0_568, main_#t~post6=|v_main_#t~post6_207|} OutVars{main_~y~0=v_main_~y~0_389, main_~x~0=v_main_~x~0_567, main_#t~post6=|v_main_#t~post6_205|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {9064#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:42,847 INFO L290 TraceCheckUtils]: 9: Hoare triple {9064#(<= main_~x~0 500000)} [153] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {9064#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:42,848 INFO L290 TraceCheckUtils]: 10: Hoare triple {9064#(<= main_~x~0 500000)} [154] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_392 v_main_~y~0_391)) (.cse1 (= |v_main_#t~post5_101| |v_main_#t~post5_100|)) (.cse2 (= |v_main_#t~post6_210| |v_main_#t~post6_206|)) (.cse3 (<= 500000 v_main_~x~0_570))) (or (and .cse0 (= v_main_~x~0_570 v_main_~x~0_569) .cse1 .cse2) (and .cse0 (or (not (< v_main_~x~0_570 750000)) (not .cse3)) .cse1 (= v_main_~x~0_569 v_main_~x~0_570) .cse2) (and (< v_main_~x~0_570 v_main_~x~0_569) .cse3 (< v_main_~x~0_569 750001) (= (+ v_main_~x~0_569 v_main_~y~0_392) (+ v_main_~x~0_570 v_main_~y~0_391))))) InVars {main_~y~0=v_main_~y~0_392, main_#t~post5=|v_main_#t~post5_101|, main_~x~0=v_main_~x~0_570, main_#t~post6=|v_main_#t~post6_210|} OutVars{main_~y~0=v_main_~y~0_391, main_#t~post5=|v_main_#t~post5_100|, main_~x~0=v_main_~x~0_569, main_#t~post6=|v_main_#t~post6_206|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {9065#(<= main_~x~0 750000)} is VALID [2022-04-28 03:51:42,849 INFO L290 TraceCheckUtils]: 11: Hoare triple {9065#(<= main_~x~0 750000)} [149] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {9059#false} is VALID [2022-04-28 03:51:42,849 INFO L272 TraceCheckUtils]: 12: Hoare triple {9059#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {9059#false} is VALID [2022-04-28 03:51:42,849 INFO L290 TraceCheckUtils]: 13: Hoare triple {9059#false} ~cond := #in~cond; {9059#false} is VALID [2022-04-28 03:51:42,849 INFO L290 TraceCheckUtils]: 14: Hoare triple {9059#false} assume 0 == ~cond; {9059#false} is VALID [2022-04-28 03:51:42,849 INFO L290 TraceCheckUtils]: 15: Hoare triple {9059#false} assume !false; {9059#false} is VALID [2022-04-28 03:51:42,849 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:42,849 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:51:42,849 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1724655096] [2022-04-28 03:51:42,850 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1724655096] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:51:42,850 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [194744795] [2022-04-28 03:51:42,850 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:42,850 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:51:42,850 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:51:42,851 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:51:42,859 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-04-28 03:51:42,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:42,884 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 9 conjunts are in the unsatisfiable core [2022-04-28 03:51:42,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:42,892 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:51:43,188 INFO L272 TraceCheckUtils]: 0: Hoare triple {9058#true} call ULTIMATE.init(); {9058#true} is VALID [2022-04-28 03:51:43,188 INFO L290 TraceCheckUtils]: 1: Hoare triple {9058#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {9058#true} is VALID [2022-04-28 03:51:43,188 INFO L290 TraceCheckUtils]: 2: Hoare triple {9058#true} assume true; {9058#true} is VALID [2022-04-28 03:51:43,188 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {9058#true} {9058#true} #48#return; {9058#true} is VALID [2022-04-28 03:51:43,188 INFO L272 TraceCheckUtils]: 4: Hoare triple {9058#true} call #t~ret7 := main(); {9058#true} is VALID [2022-04-28 03:51:43,192 INFO L290 TraceCheckUtils]: 5: Hoare triple {9058#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {9063#(= main_~x~0 0)} is VALID [2022-04-28 03:51:43,192 INFO L290 TraceCheckUtils]: 6: Hoare triple {9063#(= main_~x~0 0)} [150] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_566 v_main_~x~0_565)) (.cse1 (= |v_main_#t~post4_121| |v_main_#t~post4_120|))) (or (and (<= 500000 v_main_~x~0_566) .cse0 .cse1) (and .cse0 .cse1) (and (< v_main_~x~0_565 500001) (< v_main_~x~0_566 v_main_~x~0_565)))) InVars {main_~x~0=v_main_~x~0_566, main_#t~post4=|v_main_#t~post4_121|} OutVars{main_~x~0=v_main_~x~0_565, main_#t~post4=|v_main_#t~post4_120|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {9088#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:51:43,193 INFO L290 TraceCheckUtils]: 7: Hoare triple {9088#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [151] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {9088#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:51:43,194 INFO L290 TraceCheckUtils]: 8: Hoare triple {9088#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [152] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_568)) (.cse1 (= |v_main_#t~post6_207| |v_main_#t~post6_205|)) (.cse2 (= v_main_~x~0_568 v_main_~x~0_567))) (or (and (< v_main_~y~0_390 v_main_~y~0_389) (< v_main_~y~0_389 (+ (div (+ 999999 (* v_main_~x~0_568 (- 1))) 2) v_main_~y~0_390 2)) .cse0 (= (+ v_main_~x~0_568 (* v_main_~y~0_389 2)) (+ v_main_~x~0_567 (* v_main_~y~0_390 2)))) (and (or (not (< v_main_~x~0_568 1000000)) (not .cse0)) .cse1 (= v_main_~y~0_389 v_main_~y~0_390) .cse2) (and (= v_main_~y~0_390 v_main_~y~0_389) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_390, main_~x~0=v_main_~x~0_568, main_#t~post6=|v_main_#t~post6_207|} OutVars{main_~y~0=v_main_~y~0_389, main_~x~0=v_main_~x~0_567, main_#t~post6=|v_main_#t~post6_205|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {9088#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:51:43,194 INFO L290 TraceCheckUtils]: 9: Hoare triple {9088#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [153] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {9088#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:51:43,195 INFO L290 TraceCheckUtils]: 10: Hoare triple {9088#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [154] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_392 v_main_~y~0_391)) (.cse1 (= |v_main_#t~post5_101| |v_main_#t~post5_100|)) (.cse2 (= |v_main_#t~post6_210| |v_main_#t~post6_206|)) (.cse3 (<= 500000 v_main_~x~0_570))) (or (and .cse0 (= v_main_~x~0_570 v_main_~x~0_569) .cse1 .cse2) (and .cse0 (or (not (< v_main_~x~0_570 750000)) (not .cse3)) .cse1 (= v_main_~x~0_569 v_main_~x~0_570) .cse2) (and (< v_main_~x~0_570 v_main_~x~0_569) .cse3 (< v_main_~x~0_569 750001) (= (+ v_main_~x~0_569 v_main_~y~0_392) (+ v_main_~x~0_570 v_main_~y~0_391))))) InVars {main_~y~0=v_main_~y~0_392, main_#t~post5=|v_main_#t~post5_101|, main_~x~0=v_main_~x~0_570, main_#t~post6=|v_main_#t~post6_210|} OutVars{main_~y~0=v_main_~y~0_391, main_#t~post5=|v_main_#t~post5_100|, main_~x~0=v_main_~x~0_569, main_#t~post6=|v_main_#t~post6_206|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {9101#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} is VALID [2022-04-28 03:51:43,195 INFO L290 TraceCheckUtils]: 11: Hoare triple {9101#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} [149] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {9059#false} is VALID [2022-04-28 03:51:43,195 INFO L272 TraceCheckUtils]: 12: Hoare triple {9059#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {9059#false} is VALID [2022-04-28 03:51:43,195 INFO L290 TraceCheckUtils]: 13: Hoare triple {9059#false} ~cond := #in~cond; {9059#false} is VALID [2022-04-28 03:51:43,195 INFO L290 TraceCheckUtils]: 14: Hoare triple {9059#false} assume 0 == ~cond; {9059#false} is VALID [2022-04-28 03:51:43,195 INFO L290 TraceCheckUtils]: 15: Hoare triple {9059#false} assume !false; {9059#false} is VALID [2022-04-28 03:51:43,196 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:43,196 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:51:43,592 INFO L290 TraceCheckUtils]: 15: Hoare triple {9059#false} assume !false; {9059#false} is VALID [2022-04-28 03:51:43,593 INFO L290 TraceCheckUtils]: 14: Hoare triple {9120#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {9059#false} is VALID [2022-04-28 03:51:43,593 INFO L290 TraceCheckUtils]: 13: Hoare triple {9124#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {9120#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:51:43,594 INFO L272 TraceCheckUtils]: 12: Hoare triple {9128#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {9124#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:51:43,594 INFO L290 TraceCheckUtils]: 11: Hoare triple {9132#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [149] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {9128#(= main_~x~0 1000000)} is VALID [2022-04-28 03:51:43,595 INFO L290 TraceCheckUtils]: 10: Hoare triple {9132#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [154] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_392 v_main_~y~0_391)) (.cse1 (= |v_main_#t~post5_101| |v_main_#t~post5_100|)) (.cse2 (= |v_main_#t~post6_210| |v_main_#t~post6_206|)) (.cse3 (<= 500000 v_main_~x~0_570))) (or (and .cse0 (= v_main_~x~0_570 v_main_~x~0_569) .cse1 .cse2) (and .cse0 (or (not (< v_main_~x~0_570 750000)) (not .cse3)) .cse1 (= v_main_~x~0_569 v_main_~x~0_570) .cse2) (and (< v_main_~x~0_570 v_main_~x~0_569) .cse3 (< v_main_~x~0_569 750001) (= (+ v_main_~x~0_569 v_main_~y~0_392) (+ v_main_~x~0_570 v_main_~y~0_391))))) InVars {main_~y~0=v_main_~y~0_392, main_#t~post5=|v_main_#t~post5_101|, main_~x~0=v_main_~x~0_570, main_#t~post6=|v_main_#t~post6_210|} OutVars{main_~y~0=v_main_~y~0_391, main_#t~post5=|v_main_#t~post5_100|, main_~x~0=v_main_~x~0_569, main_#t~post6=|v_main_#t~post6_206|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {9132#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:43,595 INFO L290 TraceCheckUtils]: 9: Hoare triple {9132#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [153] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {9132#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:43,596 INFO L290 TraceCheckUtils]: 8: Hoare triple {9142#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [152] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_568)) (.cse1 (= |v_main_#t~post6_207| |v_main_#t~post6_205|)) (.cse2 (= v_main_~x~0_568 v_main_~x~0_567))) (or (and (< v_main_~y~0_390 v_main_~y~0_389) (< v_main_~y~0_389 (+ (div (+ 999999 (* v_main_~x~0_568 (- 1))) 2) v_main_~y~0_390 2)) .cse0 (= (+ v_main_~x~0_568 (* v_main_~y~0_389 2)) (+ v_main_~x~0_567 (* v_main_~y~0_390 2)))) (and (or (not (< v_main_~x~0_568 1000000)) (not .cse0)) .cse1 (= v_main_~y~0_389 v_main_~y~0_390) .cse2) (and (= v_main_~y~0_390 v_main_~y~0_389) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_390, main_~x~0=v_main_~x~0_568, main_#t~post6=|v_main_#t~post6_207|} OutVars{main_~y~0=v_main_~y~0_389, main_~x~0=v_main_~x~0_567, main_#t~post6=|v_main_#t~post6_205|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {9132#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:43,597 INFO L290 TraceCheckUtils]: 7: Hoare triple {9142#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [151] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {9142#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:43,598 INFO L290 TraceCheckUtils]: 6: Hoare triple {9142#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [150] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_566 v_main_~x~0_565)) (.cse1 (= |v_main_#t~post4_121| |v_main_#t~post4_120|))) (or (and (<= 500000 v_main_~x~0_566) .cse0 .cse1) (and .cse0 .cse1) (and (< v_main_~x~0_565 500001) (< v_main_~x~0_566 v_main_~x~0_565)))) InVars {main_~x~0=v_main_~x~0_566, main_#t~post4=|v_main_#t~post4_121|} OutVars{main_~x~0=v_main_~x~0_565, main_#t~post4=|v_main_#t~post4_120|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {9142#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:43,598 INFO L290 TraceCheckUtils]: 5: Hoare triple {9058#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {9142#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:43,598 INFO L272 TraceCheckUtils]: 4: Hoare triple {9058#true} call #t~ret7 := main(); {9058#true} is VALID [2022-04-28 03:51:43,598 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {9058#true} {9058#true} #48#return; {9058#true} is VALID [2022-04-28 03:51:43,598 INFO L290 TraceCheckUtils]: 2: Hoare triple {9058#true} assume true; {9058#true} is VALID [2022-04-28 03:51:43,598 INFO L290 TraceCheckUtils]: 1: Hoare triple {9058#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {9058#true} is VALID [2022-04-28 03:51:43,599 INFO L272 TraceCheckUtils]: 0: Hoare triple {9058#true} call ULTIMATE.init(); {9058#true} is VALID [2022-04-28 03:51:43,599 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:43,599 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [194744795] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:51:43,599 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:51:43,599 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:51:44,153 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:51:44,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1531276325] [2022-04-28 03:51:44,153 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1531276325] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:51:44,153 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:51:44,153 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [23] imperfect sequences [] total 23 [2022-04-28 03:51:44,153 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [492155258] [2022-04-28 03:51:44,153 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:51:44,154 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 3.5217391304347827) internal successors, (81), 22 states have internal predecessors, (81), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 85 [2022-04-28 03:51:44,154 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:51:44,154 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 23 states, 23 states have (on average 3.5217391304347827) internal successors, (81), 22 states have internal predecessors, (81), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:44,217 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 85 edges. 85 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:44,217 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-04-28 03:51:44,217 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:44,217 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-04-28 03:51:44,217 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=164, Invalid=828, Unknown=0, NotChecked=0, Total=992 [2022-04-28 03:51:44,218 INFO L87 Difference]: Start difference. First operand 88 states and 92 transitions. Second operand has 23 states, 23 states have (on average 3.5217391304347827) internal successors, (81), 22 states have internal predecessors, (81), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:47,147 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:47,148 INFO L93 Difference]: Finished difference Result 115 states and 124 transitions. [2022-04-28 03:51:47,148 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-04-28 03:51:47,148 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 3.5217391304347827) internal successors, (81), 22 states have internal predecessors, (81), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 85 [2022-04-28 03:51:47,148 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:51:47,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 23 states have (on average 3.5217391304347827) internal successors, (81), 22 states have internal predecessors, (81), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:47,149 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 104 transitions. [2022-04-28 03:51:47,149 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 23 states have (on average 3.5217391304347827) internal successors, (81), 22 states have internal predecessors, (81), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:47,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 104 transitions. [2022-04-28 03:51:47,150 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 23 states and 104 transitions. [2022-04-28 03:51:47,227 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:47,229 INFO L225 Difference]: With dead ends: 115 [2022-04-28 03:51:47,229 INFO L226 Difference]: Without dead ends: 97 [2022-04-28 03:51:47,230 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 138 GetRequests, 87 SyntacticMatches, 1 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 485 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=333, Invalid=2319, Unknown=0, NotChecked=0, Total=2652 [2022-04-28 03:51:47,230 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 65 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 1524 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 126 SdHoareTripleChecker+Invalid, 1547 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 1524 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-04-28 03:51:47,230 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 126 Invalid, 1547 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 1524 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-04-28 03:51:47,231 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-04-28 03:51:47,836 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 92. [2022-04-28 03:51:47,836 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:51:47,836 INFO L82 GeneralOperation]: Start isEquivalent. First operand 97 states. Second operand has 92 states, 87 states have (on average 1.0574712643678161) internal successors, (92), 87 states have internal predecessors, (92), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:47,836 INFO L74 IsIncluded]: Start isIncluded. First operand 97 states. Second operand has 92 states, 87 states have (on average 1.0574712643678161) internal successors, (92), 87 states have internal predecessors, (92), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:47,836 INFO L87 Difference]: Start difference. First operand 97 states. Second operand has 92 states, 87 states have (on average 1.0574712643678161) internal successors, (92), 87 states have internal predecessors, (92), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:47,837 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:47,837 INFO L93 Difference]: Finished difference Result 97 states and 101 transitions. [2022-04-28 03:51:47,838 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 101 transitions. [2022-04-28 03:51:47,838 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:51:47,838 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:51:47,838 INFO L74 IsIncluded]: Start isIncluded. First operand has 92 states, 87 states have (on average 1.0574712643678161) internal successors, (92), 87 states have internal predecessors, (92), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 97 states. [2022-04-28 03:51:47,838 INFO L87 Difference]: Start difference. First operand has 92 states, 87 states have (on average 1.0574712643678161) internal successors, (92), 87 states have internal predecessors, (92), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 97 states. [2022-04-28 03:51:47,839 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:51:47,839 INFO L93 Difference]: Finished difference Result 97 states and 101 transitions. [2022-04-28 03:51:47,839 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 101 transitions. [2022-04-28 03:51:47,840 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:51:47,840 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:51:47,840 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:51:47,840 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:51:47,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 87 states have (on average 1.0574712643678161) internal successors, (92), 87 states have internal predecessors, (92), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:47,841 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 96 transitions. [2022-04-28 03:51:47,841 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 96 transitions. Word has length 85 [2022-04-28 03:51:47,841 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:51:47,841 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 96 transitions. [2022-04-28 03:51:47,841 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 3.5217391304347827) internal successors, (81), 22 states have internal predecessors, (81), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:47,842 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 92 states and 96 transitions. [2022-04-28 03:51:47,982 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 96 edges. 96 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:47,982 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 96 transitions. [2022-04-28 03:51:47,983 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-04-28 03:51:47,983 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:51:47,983 INFO L195 NwaCegarLoop]: trace histogram [20, 19, 19, 18, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:51:48,007 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Ended with exit code 0 [2022-04-28 03:51:48,205 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,18 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:51:48,205 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:51:48,205 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:51:48,205 INFO L85 PathProgramCache]: Analyzing trace with hash -1438513346, now seen corresponding path program 17 times [2022-04-28 03:51:48,205 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:48,205 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1653945488] [2022-04-28 03:51:52,014 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:51:52,062 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:52,853 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:57,007 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:51:57,136 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:51:57,137 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:51:57,140 INFO L85 PathProgramCache]: Analyzing trace with hash 871196903, now seen corresponding path program 1 times [2022-04-28 03:51:57,140 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:51:57,140 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [480427619] [2022-04-28 03:51:57,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:57,140 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:51:57,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:57,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:51:57,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:57,197 INFO L290 TraceCheckUtils]: 0: Hoare triple {9844#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {9836#true} is VALID [2022-04-28 03:51:57,197 INFO L290 TraceCheckUtils]: 1: Hoare triple {9836#true} assume true; {9836#true} is VALID [2022-04-28 03:51:57,197 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9836#true} {9836#true} #48#return; {9836#true} is VALID [2022-04-28 03:51:57,198 INFO L272 TraceCheckUtils]: 0: Hoare triple {9836#true} call ULTIMATE.init(); {9844#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:51:57,198 INFO L290 TraceCheckUtils]: 1: Hoare triple {9844#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {9836#true} is VALID [2022-04-28 03:51:57,198 INFO L290 TraceCheckUtils]: 2: Hoare triple {9836#true} assume true; {9836#true} is VALID [2022-04-28 03:51:57,198 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {9836#true} {9836#true} #48#return; {9836#true} is VALID [2022-04-28 03:51:57,198 INFO L272 TraceCheckUtils]: 4: Hoare triple {9836#true} call #t~ret7 := main(); {9836#true} is VALID [2022-04-28 03:51:57,198 INFO L290 TraceCheckUtils]: 5: Hoare triple {9836#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {9841#(= main_~x~0 0)} is VALID [2022-04-28 03:51:57,199 INFO L290 TraceCheckUtils]: 6: Hoare triple {9841#(= main_~x~0 0)} [156] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_128| |v_main_#t~post4_127|)) (.cse1 (= v_main_~x~0_609 v_main_~x~0_608))) (or (and .cse0 .cse1 (not (< v_main_~x~0_609 500000))) (and .cse0 .cse1) (and (< v_main_~x~0_608 500001) (< v_main_~x~0_609 v_main_~x~0_608)))) InVars {main_~x~0=v_main_~x~0_609, main_#t~post4=|v_main_#t~post4_128|} OutVars{main_~x~0=v_main_~x~0_608, main_#t~post4=|v_main_#t~post4_127|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {9842#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:57,200 INFO L290 TraceCheckUtils]: 7: Hoare triple {9842#(<= main_~x~0 500000)} [157] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {9842#(<= main_~x~0 500000)} is VALID [2022-04-28 03:51:57,201 INFO L290 TraceCheckUtils]: 8: Hoare triple {9842#(<= main_~x~0 500000)} [158] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_611)) (.cse1 (= v_main_~x~0_611 v_main_~x~0_610))) (or (and (< v_main_~y~0_422 (+ v_main_~y~0_423 2 (div (+ (* v_main_~x~0_611 (- 1)) 999999) 2))) (= (+ v_main_~x~0_610 (* v_main_~y~0_423 2)) (+ v_main_~x~0_611 (* v_main_~y~0_422 2))) .cse0 (< v_main_~y~0_423 v_main_~y~0_422)) (and (or (not (< v_main_~x~0_611 1000000)) (not .cse0)) .cse1 (= v_main_~y~0_422 v_main_~y~0_423) (= |v_main_#t~post6_218| |v_main_#t~post6_220|)) (and (= |v_main_#t~post6_220| |v_main_#t~post6_218|) (= v_main_~y~0_423 v_main_~y~0_422) .cse1))) InVars {main_~y~0=v_main_~y~0_423, main_~x~0=v_main_~x~0_611, main_#t~post6=|v_main_#t~post6_220|} OutVars{main_~y~0=v_main_~y~0_422, main_~x~0=v_main_~x~0_610, main_#t~post6=|v_main_#t~post6_218|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {9843#(<= main_~x~0 999999)} is VALID [2022-04-28 03:51:57,201 INFO L290 TraceCheckUtils]: 9: Hoare triple {9843#(<= main_~x~0 999999)} [159] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {9843#(<= main_~x~0 999999)} is VALID [2022-04-28 03:51:57,202 INFO L290 TraceCheckUtils]: 10: Hoare triple {9843#(<= main_~x~0 999999)} [160] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= |v_main_#t~post5_107| |v_main_#t~post5_106|)) (.cse2 (= v_main_~x~0_613 v_main_~x~0_612)) (.cse3 (= v_main_~y~0_425 v_main_~y~0_424)) (.cse0 (<= 500000 v_main_~x~0_613))) (or (and (< v_main_~x~0_612 750001) (< v_main_~x~0_613 v_main_~x~0_612) .cse0 (= (+ v_main_~x~0_613 v_main_~y~0_424) (+ v_main_~x~0_612 v_main_~y~0_425))) (and .cse1 .cse2 .cse3 (= |v_main_#t~post6_223| |v_main_#t~post6_219|)) (and .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_613 750000)) (not .cse0)) (= |v_main_#t~post6_219| |v_main_#t~post6_223|)))) InVars {main_~y~0=v_main_~y~0_425, main_#t~post5=|v_main_#t~post5_107|, main_~x~0=v_main_~x~0_613, main_#t~post6=|v_main_#t~post6_223|} OutVars{main_~y~0=v_main_~y~0_424, main_#t~post5=|v_main_#t~post5_106|, main_~x~0=v_main_~x~0_612, main_#t~post6=|v_main_#t~post6_219|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {9843#(<= main_~x~0 999999)} is VALID [2022-04-28 03:51:57,202 INFO L290 TraceCheckUtils]: 11: Hoare triple {9843#(<= main_~x~0 999999)} [155] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {9837#false} is VALID [2022-04-28 03:51:57,202 INFO L272 TraceCheckUtils]: 12: Hoare triple {9837#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {9837#false} is VALID [2022-04-28 03:51:57,202 INFO L290 TraceCheckUtils]: 13: Hoare triple {9837#false} ~cond := #in~cond; {9837#false} is VALID [2022-04-28 03:51:57,203 INFO L290 TraceCheckUtils]: 14: Hoare triple {9837#false} assume 0 == ~cond; {9837#false} is VALID [2022-04-28 03:51:57,203 INFO L290 TraceCheckUtils]: 15: Hoare triple {9837#false} assume !false; {9837#false} is VALID [2022-04-28 03:51:57,203 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:51:57,203 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:51:57,203 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [480427619] [2022-04-28 03:51:57,203 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [480427619] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:51:57,203 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1460161430] [2022-04-28 03:51:57,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:51:57,203 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:51:57,203 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:51:57,204 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:51:57,206 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-04-28 03:51:57,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:57,240 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 9 conjunts are in the unsatisfiable core [2022-04-28 03:51:57,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:51:57,251 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:51:57,560 INFO L272 TraceCheckUtils]: 0: Hoare triple {9836#true} call ULTIMATE.init(); {9836#true} is VALID [2022-04-28 03:51:57,560 INFO L290 TraceCheckUtils]: 1: Hoare triple {9836#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {9836#true} is VALID [2022-04-28 03:51:57,560 INFO L290 TraceCheckUtils]: 2: Hoare triple {9836#true} assume true; {9836#true} is VALID [2022-04-28 03:51:57,560 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {9836#true} {9836#true} #48#return; {9836#true} is VALID [2022-04-28 03:51:57,560 INFO L272 TraceCheckUtils]: 4: Hoare triple {9836#true} call #t~ret7 := main(); {9836#true} is VALID [2022-04-28 03:51:57,561 INFO L290 TraceCheckUtils]: 5: Hoare triple {9836#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {9841#(= main_~x~0 0)} is VALID [2022-04-28 03:51:57,561 INFO L290 TraceCheckUtils]: 6: Hoare triple {9841#(= main_~x~0 0)} [156] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_128| |v_main_#t~post4_127|)) (.cse1 (= v_main_~x~0_609 v_main_~x~0_608))) (or (and .cse0 .cse1 (not (< v_main_~x~0_609 500000))) (and .cse0 .cse1) (and (< v_main_~x~0_608 500001) (< v_main_~x~0_609 v_main_~x~0_608)))) InVars {main_~x~0=v_main_~x~0_609, main_#t~post4=|v_main_#t~post4_128|} OutVars{main_~x~0=v_main_~x~0_608, main_#t~post4=|v_main_#t~post4_127|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {9866#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:51:57,562 INFO L290 TraceCheckUtils]: 7: Hoare triple {9866#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [157] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {9866#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:51:57,563 INFO L290 TraceCheckUtils]: 8: Hoare triple {9866#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [158] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_611)) (.cse1 (= v_main_~x~0_611 v_main_~x~0_610))) (or (and (< v_main_~y~0_422 (+ v_main_~y~0_423 2 (div (+ (* v_main_~x~0_611 (- 1)) 999999) 2))) (= (+ v_main_~x~0_610 (* v_main_~y~0_423 2)) (+ v_main_~x~0_611 (* v_main_~y~0_422 2))) .cse0 (< v_main_~y~0_423 v_main_~y~0_422)) (and (or (not (< v_main_~x~0_611 1000000)) (not .cse0)) .cse1 (= v_main_~y~0_422 v_main_~y~0_423) (= |v_main_#t~post6_218| |v_main_#t~post6_220|)) (and (= |v_main_#t~post6_220| |v_main_#t~post6_218|) (= v_main_~y~0_423 v_main_~y~0_422) .cse1))) InVars {main_~y~0=v_main_~y~0_423, main_~x~0=v_main_~x~0_611, main_#t~post6=|v_main_#t~post6_220|} OutVars{main_~y~0=v_main_~y~0_422, main_~x~0=v_main_~x~0_610, main_#t~post6=|v_main_#t~post6_218|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {9866#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:51:57,564 INFO L290 TraceCheckUtils]: 9: Hoare triple {9866#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [159] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {9866#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:51:57,565 INFO L290 TraceCheckUtils]: 10: Hoare triple {9866#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [160] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= |v_main_#t~post5_107| |v_main_#t~post5_106|)) (.cse2 (= v_main_~x~0_613 v_main_~x~0_612)) (.cse3 (= v_main_~y~0_425 v_main_~y~0_424)) (.cse0 (<= 500000 v_main_~x~0_613))) (or (and (< v_main_~x~0_612 750001) (< v_main_~x~0_613 v_main_~x~0_612) .cse0 (= (+ v_main_~x~0_613 v_main_~y~0_424) (+ v_main_~x~0_612 v_main_~y~0_425))) (and .cse1 .cse2 .cse3 (= |v_main_#t~post6_223| |v_main_#t~post6_219|)) (and .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_613 750000)) (not .cse0)) (= |v_main_#t~post6_219| |v_main_#t~post6_223|)))) InVars {main_~y~0=v_main_~y~0_425, main_#t~post5=|v_main_#t~post5_107|, main_~x~0=v_main_~x~0_613, main_#t~post6=|v_main_#t~post6_223|} OutVars{main_~y~0=v_main_~y~0_424, main_#t~post5=|v_main_#t~post5_106|, main_~x~0=v_main_~x~0_612, main_#t~post6=|v_main_#t~post6_219|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {9879#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} is VALID [2022-04-28 03:51:57,565 INFO L290 TraceCheckUtils]: 11: Hoare triple {9879#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} [155] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {9837#false} is VALID [2022-04-28 03:51:57,565 INFO L272 TraceCheckUtils]: 12: Hoare triple {9837#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {9837#false} is VALID [2022-04-28 03:51:57,566 INFO L290 TraceCheckUtils]: 13: Hoare triple {9837#false} ~cond := #in~cond; {9837#false} is VALID [2022-04-28 03:51:57,566 INFO L290 TraceCheckUtils]: 14: Hoare triple {9837#false} assume 0 == ~cond; {9837#false} is VALID [2022-04-28 03:51:57,566 INFO L290 TraceCheckUtils]: 15: Hoare triple {9837#false} assume !false; {9837#false} is VALID [2022-04-28 03:51:57,566 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:57,566 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:51:58,011 INFO L290 TraceCheckUtils]: 15: Hoare triple {9837#false} assume !false; {9837#false} is VALID [2022-04-28 03:51:58,011 INFO L290 TraceCheckUtils]: 14: Hoare triple {9898#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {9837#false} is VALID [2022-04-28 03:51:58,011 INFO L290 TraceCheckUtils]: 13: Hoare triple {9902#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {9898#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:51:58,012 INFO L272 TraceCheckUtils]: 12: Hoare triple {9906#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {9902#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:51:58,012 INFO L290 TraceCheckUtils]: 11: Hoare triple {9910#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [155] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {9906#(= main_~x~0 1000000)} is VALID [2022-04-28 03:51:58,013 INFO L290 TraceCheckUtils]: 10: Hoare triple {9910#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [160] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= |v_main_#t~post5_107| |v_main_#t~post5_106|)) (.cse2 (= v_main_~x~0_613 v_main_~x~0_612)) (.cse3 (= v_main_~y~0_425 v_main_~y~0_424)) (.cse0 (<= 500000 v_main_~x~0_613))) (or (and (< v_main_~x~0_612 750001) (< v_main_~x~0_613 v_main_~x~0_612) .cse0 (= (+ v_main_~x~0_613 v_main_~y~0_424) (+ v_main_~x~0_612 v_main_~y~0_425))) (and .cse1 .cse2 .cse3 (= |v_main_#t~post6_223| |v_main_#t~post6_219|)) (and .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_613 750000)) (not .cse0)) (= |v_main_#t~post6_219| |v_main_#t~post6_223|)))) InVars {main_~y~0=v_main_~y~0_425, main_#t~post5=|v_main_#t~post5_107|, main_~x~0=v_main_~x~0_613, main_#t~post6=|v_main_#t~post6_223|} OutVars{main_~y~0=v_main_~y~0_424, main_#t~post5=|v_main_#t~post5_106|, main_~x~0=v_main_~x~0_612, main_#t~post6=|v_main_#t~post6_219|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {9910#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:58,013 INFO L290 TraceCheckUtils]: 9: Hoare triple {9910#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [159] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {9910#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:58,015 INFO L290 TraceCheckUtils]: 8: Hoare triple {9920#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [158] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_611)) (.cse1 (= v_main_~x~0_611 v_main_~x~0_610))) (or (and (< v_main_~y~0_422 (+ v_main_~y~0_423 2 (div (+ (* v_main_~x~0_611 (- 1)) 999999) 2))) (= (+ v_main_~x~0_610 (* v_main_~y~0_423 2)) (+ v_main_~x~0_611 (* v_main_~y~0_422 2))) .cse0 (< v_main_~y~0_423 v_main_~y~0_422)) (and (or (not (< v_main_~x~0_611 1000000)) (not .cse0)) .cse1 (= v_main_~y~0_422 v_main_~y~0_423) (= |v_main_#t~post6_218| |v_main_#t~post6_220|)) (and (= |v_main_#t~post6_220| |v_main_#t~post6_218|) (= v_main_~y~0_423 v_main_~y~0_422) .cse1))) InVars {main_~y~0=v_main_~y~0_423, main_~x~0=v_main_~x~0_611, main_#t~post6=|v_main_#t~post6_220|} OutVars{main_~y~0=v_main_~y~0_422, main_~x~0=v_main_~x~0_610, main_#t~post6=|v_main_#t~post6_218|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {9910#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:51:58,015 INFO L290 TraceCheckUtils]: 7: Hoare triple {9920#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [157] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {9920#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:58,017 INFO L290 TraceCheckUtils]: 6: Hoare triple {9920#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [156] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_128| |v_main_#t~post4_127|)) (.cse1 (= v_main_~x~0_609 v_main_~x~0_608))) (or (and .cse0 .cse1 (not (< v_main_~x~0_609 500000))) (and .cse0 .cse1) (and (< v_main_~x~0_608 500001) (< v_main_~x~0_609 v_main_~x~0_608)))) InVars {main_~x~0=v_main_~x~0_609, main_#t~post4=|v_main_#t~post4_128|} OutVars{main_~x~0=v_main_~x~0_608, main_#t~post4=|v_main_#t~post4_127|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {9920#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:58,017 INFO L290 TraceCheckUtils]: 5: Hoare triple {9836#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {9920#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:51:58,017 INFO L272 TraceCheckUtils]: 4: Hoare triple {9836#true} call #t~ret7 := main(); {9836#true} is VALID [2022-04-28 03:51:58,017 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {9836#true} {9836#true} #48#return; {9836#true} is VALID [2022-04-28 03:51:58,017 INFO L290 TraceCheckUtils]: 2: Hoare triple {9836#true} assume true; {9836#true} is VALID [2022-04-28 03:51:58,017 INFO L290 TraceCheckUtils]: 1: Hoare triple {9836#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {9836#true} is VALID [2022-04-28 03:51:58,017 INFO L272 TraceCheckUtils]: 0: Hoare triple {9836#true} call ULTIMATE.init(); {9836#true} is VALID [2022-04-28 03:51:58,017 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:51:58,017 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1460161430] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:51:58,018 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:51:58,018 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:51:58,662 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:51:58,662 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1653945488] [2022-04-28 03:51:58,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1653945488] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:51:58,663 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:51:58,663 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [24] imperfect sequences [] total 24 [2022-04-28 03:51:58,663 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [316502485] [2022-04-28 03:51:58,663 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:51:58,663 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 24 states have (on average 3.5416666666666665) internal successors, (85), 23 states have internal predecessors, (85), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 89 [2022-04-28 03:51:58,663 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:51:58,663 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 24 states, 24 states have (on average 3.5416666666666665) internal successors, (85), 23 states have internal predecessors, (85), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:51:58,723 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 89 edges. 89 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:51:58,723 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-04-28 03:51:58,723 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:51:58,724 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-04-28 03:51:58,724 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=169, Invalid=887, Unknown=0, NotChecked=0, Total=1056 [2022-04-28 03:51:58,724 INFO L87 Difference]: Start difference. First operand 92 states and 96 transitions. Second operand has 24 states, 24 states have (on average 3.5416666666666665) internal successors, (85), 23 states have internal predecessors, (85), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:01,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:01,993 INFO L93 Difference]: Finished difference Result 119 states and 128 transitions. [2022-04-28 03:52:01,993 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-04-28 03:52:01,993 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 24 states have (on average 3.5416666666666665) internal successors, (85), 23 states have internal predecessors, (85), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 89 [2022-04-28 03:52:01,993 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:52:01,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24 states, 24 states have (on average 3.5416666666666665) internal successors, (85), 23 states have internal predecessors, (85), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:01,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 108 transitions. [2022-04-28 03:52:01,994 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24 states, 24 states have (on average 3.5416666666666665) internal successors, (85), 23 states have internal predecessors, (85), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:01,995 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 108 transitions. [2022-04-28 03:52:01,995 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 24 states and 108 transitions. [2022-04-28 03:52:02,075 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 108 edges. 108 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:02,076 INFO L225 Difference]: With dead ends: 119 [2022-04-28 03:52:02,076 INFO L226 Difference]: Without dead ends: 101 [2022-04-28 03:52:02,077 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 143 GetRequests, 90 SyntacticMatches, 1 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 519 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=346, Invalid=2516, Unknown=0, NotChecked=0, Total=2862 [2022-04-28 03:52:02,077 INFO L413 NwaCegarLoop]: 30 mSDtfsCounter, 69 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 1685 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 1709 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 1685 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-04-28 03:52:02,078 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 132 Invalid, 1709 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 1685 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-04-28 03:52:02,078 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2022-04-28 03:52:02,814 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 96. [2022-04-28 03:52:02,814 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:52:02,815 INFO L82 GeneralOperation]: Start isEquivalent. First operand 101 states. Second operand has 96 states, 91 states have (on average 1.054945054945055) internal successors, (96), 91 states have internal predecessors, (96), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:02,815 INFO L74 IsIncluded]: Start isIncluded. First operand 101 states. Second operand has 96 states, 91 states have (on average 1.054945054945055) internal successors, (96), 91 states have internal predecessors, (96), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:02,815 INFO L87 Difference]: Start difference. First operand 101 states. Second operand has 96 states, 91 states have (on average 1.054945054945055) internal successors, (96), 91 states have internal predecessors, (96), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:02,816 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:02,816 INFO L93 Difference]: Finished difference Result 101 states and 105 transitions. [2022-04-28 03:52:02,816 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 105 transitions. [2022-04-28 03:52:02,817 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:52:02,817 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:52:02,817 INFO L74 IsIncluded]: Start isIncluded. First operand has 96 states, 91 states have (on average 1.054945054945055) internal successors, (96), 91 states have internal predecessors, (96), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 101 states. [2022-04-28 03:52:02,817 INFO L87 Difference]: Start difference. First operand has 96 states, 91 states have (on average 1.054945054945055) internal successors, (96), 91 states have internal predecessors, (96), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 101 states. [2022-04-28 03:52:02,818 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:02,818 INFO L93 Difference]: Finished difference Result 101 states and 105 transitions. [2022-04-28 03:52:02,818 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 105 transitions. [2022-04-28 03:52:02,819 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:52:02,819 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:52:02,819 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:52:02,819 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:52:02,819 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 91 states have (on average 1.054945054945055) internal successors, (96), 91 states have internal predecessors, (96), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:02,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 100 transitions. [2022-04-28 03:52:02,820 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 100 transitions. Word has length 89 [2022-04-28 03:52:02,820 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:52:02,820 INFO L495 AbstractCegarLoop]: Abstraction has 96 states and 100 transitions. [2022-04-28 03:52:02,821 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 24 states have (on average 3.5416666666666665) internal successors, (85), 23 states have internal predecessors, (85), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:02,821 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 96 states and 100 transitions. [2022-04-28 03:52:02,960 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 100 edges. 100 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:02,961 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 100 transitions. [2022-04-28 03:52:02,961 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-04-28 03:52:02,961 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:52:02,961 INFO L195 NwaCegarLoop]: trace histogram [21, 20, 20, 19, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:52:02,982 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-04-28 03:52:03,162 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,19 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:52:03,162 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:52:03,162 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:52:03,162 INFO L85 PathProgramCache]: Analyzing trace with hash -863760491, now seen corresponding path program 18 times [2022-04-28 03:52:03,162 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:52:03,162 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [162409060] [2022-04-28 03:52:07,240 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:52:07,310 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:07,547 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:07,776 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:07,777 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:52:07,780 INFO L85 PathProgramCache]: Analyzing trace with hash 511621927, now seen corresponding path program 1 times [2022-04-28 03:52:07,780 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:52:07,780 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1131361329] [2022-04-28 03:52:07,781 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:52:07,781 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:52:07,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:07,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:52:07,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:07,839 INFO L290 TraceCheckUtils]: 0: Hoare triple {10649#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {10641#true} is VALID [2022-04-28 03:52:07,839 INFO L290 TraceCheckUtils]: 1: Hoare triple {10641#true} assume true; {10641#true} is VALID [2022-04-28 03:52:07,839 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10641#true} {10641#true} #48#return; {10641#true} is VALID [2022-04-28 03:52:07,839 INFO L272 TraceCheckUtils]: 0: Hoare triple {10641#true} call ULTIMATE.init(); {10649#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:52:07,839 INFO L290 TraceCheckUtils]: 1: Hoare triple {10649#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {10641#true} is VALID [2022-04-28 03:52:07,840 INFO L290 TraceCheckUtils]: 2: Hoare triple {10641#true} assume true; {10641#true} is VALID [2022-04-28 03:52:07,840 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10641#true} {10641#true} #48#return; {10641#true} is VALID [2022-04-28 03:52:07,840 INFO L272 TraceCheckUtils]: 4: Hoare triple {10641#true} call #t~ret7 := main(); {10641#true} is VALID [2022-04-28 03:52:07,840 INFO L290 TraceCheckUtils]: 5: Hoare triple {10641#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {10646#(= main_~x~0 0)} is VALID [2022-04-28 03:52:07,841 INFO L290 TraceCheckUtils]: 6: Hoare triple {10646#(= main_~x~0 0)} [162] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_653 v_main_~x~0_652)) (.cse1 (= |v_main_#t~post4_135| |v_main_#t~post4_134|))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_653)) (and .cse0 .cse1) (and (< v_main_~x~0_653 v_main_~x~0_652) (< v_main_~x~0_652 500001)))) InVars {main_~x~0=v_main_~x~0_653, main_#t~post4=|v_main_#t~post4_135|} OutVars{main_~x~0=v_main_~x~0_652, main_#t~post4=|v_main_#t~post4_134|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {10647#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:07,841 INFO L290 TraceCheckUtils]: 7: Hoare triple {10647#(<= main_~x~0 500000)} [163] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {10647#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:07,842 INFO L290 TraceCheckUtils]: 8: Hoare triple {10647#(<= main_~x~0 500000)} [164] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_233| |v_main_#t~post6_231|)) (.cse2 (= v_main_~x~0_655 v_main_~x~0_654)) (.cse3 (= v_main_~y~0_457 v_main_~y~0_456)) (.cse1 (<= 750000 v_main_~x~0_655))) (or (and .cse0 (or (not .cse1) (not (< v_main_~x~0_655 1000000))) .cse2 .cse3) (and .cse0 .cse2 .cse3) (and (< v_main_~y~0_456 (+ v_main_~y~0_457 (div (+ 999999 (* v_main_~x~0_655 (- 1))) 2) 2)) (= (+ v_main_~x~0_655 (* v_main_~y~0_456 2)) (+ v_main_~x~0_654 (* v_main_~y~0_457 2))) (< v_main_~y~0_457 v_main_~y~0_456) .cse1))) InVars {main_~y~0=v_main_~y~0_457, main_~x~0=v_main_~x~0_655, main_#t~post6=|v_main_#t~post6_233|} OutVars{main_~y~0=v_main_~y~0_456, main_~x~0=v_main_~x~0_654, main_#t~post6=|v_main_#t~post6_231|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {10648#(<= main_~x~0 999999)} is VALID [2022-04-28 03:52:07,842 INFO L290 TraceCheckUtils]: 9: Hoare triple {10648#(<= main_~x~0 999999)} [165] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {10648#(<= main_~x~0 999999)} is VALID [2022-04-28 03:52:07,843 INFO L290 TraceCheckUtils]: 10: Hoare triple {10648#(<= main_~x~0 999999)} [166] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_657)) (.cse2 (= |v_main_#t~post5_113| |v_main_#t~post5_112|)) (.cse3 (= |v_main_#t~post6_236| |v_main_#t~post6_232|)) (.cse4 (= v_main_~y~0_459 v_main_~y~0_458)) (.cse5 (= v_main_~x~0_657 v_main_~x~0_656))) (or (let ((.cse0 (+ v_main_~x~0_657 v_main_~y~0_458))) (and (= .cse0 (+ v_main_~x~0_656 v_main_~y~0_459)) (< v_main_~y~0_459 v_main_~y~0_458) (< .cse0 (+ 750001 v_main_~y~0_459)) .cse1)) (and .cse2 .cse3 .cse4 .cse5 (or (not .cse1) (not (< v_main_~x~0_657 750000)))) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_459, main_#t~post5=|v_main_#t~post5_113|, main_~x~0=v_main_~x~0_657, main_#t~post6=|v_main_#t~post6_236|} OutVars{main_~y~0=v_main_~y~0_458, main_#t~post5=|v_main_#t~post5_112|, main_~x~0=v_main_~x~0_656, main_#t~post6=|v_main_#t~post6_232|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {10648#(<= main_~x~0 999999)} is VALID [2022-04-28 03:52:07,844 INFO L290 TraceCheckUtils]: 11: Hoare triple {10648#(<= main_~x~0 999999)} [161] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {10642#false} is VALID [2022-04-28 03:52:07,844 INFO L272 TraceCheckUtils]: 12: Hoare triple {10642#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {10642#false} is VALID [2022-04-28 03:52:07,844 INFO L290 TraceCheckUtils]: 13: Hoare triple {10642#false} ~cond := #in~cond; {10642#false} is VALID [2022-04-28 03:52:07,844 INFO L290 TraceCheckUtils]: 14: Hoare triple {10642#false} assume 0 == ~cond; {10642#false} is VALID [2022-04-28 03:52:07,844 INFO L290 TraceCheckUtils]: 15: Hoare triple {10642#false} assume !false; {10642#false} is VALID [2022-04-28 03:52:07,844 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:52:07,844 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:52:07,844 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1131361329] [2022-04-28 03:52:07,844 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1131361329] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:52:07,845 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [760448320] [2022-04-28 03:52:07,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:52:07,845 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:52:07,845 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:52:07,848 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:52:07,851 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-04-28 03:52:07,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:07,875 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:52:07,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:07,884 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:52:08,099 INFO L272 TraceCheckUtils]: 0: Hoare triple {10641#true} call ULTIMATE.init(); {10641#true} is VALID [2022-04-28 03:52:08,100 INFO L290 TraceCheckUtils]: 1: Hoare triple {10641#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {10641#true} is VALID [2022-04-28 03:52:08,100 INFO L290 TraceCheckUtils]: 2: Hoare triple {10641#true} assume true; {10641#true} is VALID [2022-04-28 03:52:08,100 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10641#true} {10641#true} #48#return; {10641#true} is VALID [2022-04-28 03:52:08,100 INFO L272 TraceCheckUtils]: 4: Hoare triple {10641#true} call #t~ret7 := main(); {10641#true} is VALID [2022-04-28 03:52:08,100 INFO L290 TraceCheckUtils]: 5: Hoare triple {10641#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {10668#(<= main_~x~0 0)} is VALID [2022-04-28 03:52:08,101 INFO L290 TraceCheckUtils]: 6: Hoare triple {10668#(<= main_~x~0 0)} [162] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_653 v_main_~x~0_652)) (.cse1 (= |v_main_#t~post4_135| |v_main_#t~post4_134|))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_653)) (and .cse0 .cse1) (and (< v_main_~x~0_653 v_main_~x~0_652) (< v_main_~x~0_652 500001)))) InVars {main_~x~0=v_main_~x~0_653, main_#t~post4=|v_main_#t~post4_135|} OutVars{main_~x~0=v_main_~x~0_652, main_#t~post4=|v_main_#t~post4_134|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {10647#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:08,101 INFO L290 TraceCheckUtils]: 7: Hoare triple {10647#(<= main_~x~0 500000)} [163] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {10647#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:08,102 INFO L290 TraceCheckUtils]: 8: Hoare triple {10647#(<= main_~x~0 500000)} [164] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_233| |v_main_#t~post6_231|)) (.cse2 (= v_main_~x~0_655 v_main_~x~0_654)) (.cse3 (= v_main_~y~0_457 v_main_~y~0_456)) (.cse1 (<= 750000 v_main_~x~0_655))) (or (and .cse0 (or (not .cse1) (not (< v_main_~x~0_655 1000000))) .cse2 .cse3) (and .cse0 .cse2 .cse3) (and (< v_main_~y~0_456 (+ v_main_~y~0_457 (div (+ 999999 (* v_main_~x~0_655 (- 1))) 2) 2)) (= (+ v_main_~x~0_655 (* v_main_~y~0_456 2)) (+ v_main_~x~0_654 (* v_main_~y~0_457 2))) (< v_main_~y~0_457 v_main_~y~0_456) .cse1))) InVars {main_~y~0=v_main_~y~0_457, main_~x~0=v_main_~x~0_655, main_#t~post6=|v_main_#t~post6_233|} OutVars{main_~y~0=v_main_~y~0_456, main_~x~0=v_main_~x~0_654, main_#t~post6=|v_main_#t~post6_231|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {10647#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:08,103 INFO L290 TraceCheckUtils]: 9: Hoare triple {10647#(<= main_~x~0 500000)} [165] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {10647#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:08,104 INFO L290 TraceCheckUtils]: 10: Hoare triple {10647#(<= main_~x~0 500000)} [166] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_657)) (.cse2 (= |v_main_#t~post5_113| |v_main_#t~post5_112|)) (.cse3 (= |v_main_#t~post6_236| |v_main_#t~post6_232|)) (.cse4 (= v_main_~y~0_459 v_main_~y~0_458)) (.cse5 (= v_main_~x~0_657 v_main_~x~0_656))) (or (let ((.cse0 (+ v_main_~x~0_657 v_main_~y~0_458))) (and (= .cse0 (+ v_main_~x~0_656 v_main_~y~0_459)) (< v_main_~y~0_459 v_main_~y~0_458) (< .cse0 (+ 750001 v_main_~y~0_459)) .cse1)) (and .cse2 .cse3 .cse4 .cse5 (or (not .cse1) (not (< v_main_~x~0_657 750000)))) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_459, main_#t~post5=|v_main_#t~post5_113|, main_~x~0=v_main_~x~0_657, main_#t~post6=|v_main_#t~post6_236|} OutVars{main_~y~0=v_main_~y~0_458, main_#t~post5=|v_main_#t~post5_112|, main_~x~0=v_main_~x~0_656, main_#t~post6=|v_main_#t~post6_232|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {10684#(< main_~x~0 750001)} is VALID [2022-04-28 03:52:08,104 INFO L290 TraceCheckUtils]: 11: Hoare triple {10684#(< main_~x~0 750001)} [161] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {10642#false} is VALID [2022-04-28 03:52:08,104 INFO L272 TraceCheckUtils]: 12: Hoare triple {10642#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {10642#false} is VALID [2022-04-28 03:52:08,104 INFO L290 TraceCheckUtils]: 13: Hoare triple {10642#false} ~cond := #in~cond; {10642#false} is VALID [2022-04-28 03:52:08,104 INFO L290 TraceCheckUtils]: 14: Hoare triple {10642#false} assume 0 == ~cond; {10642#false} is VALID [2022-04-28 03:52:08,104 INFO L290 TraceCheckUtils]: 15: Hoare triple {10642#false} assume !false; {10642#false} is VALID [2022-04-28 03:52:08,105 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:52:08,105 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:52:08,657 INFO L290 TraceCheckUtils]: 15: Hoare triple {10642#false} assume !false; {10642#false} is VALID [2022-04-28 03:52:08,658 INFO L290 TraceCheckUtils]: 14: Hoare triple {10703#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {10642#false} is VALID [2022-04-28 03:52:08,658 INFO L290 TraceCheckUtils]: 13: Hoare triple {10707#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {10703#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:52:08,659 INFO L272 TraceCheckUtils]: 12: Hoare triple {10711#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {10707#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:52:08,659 INFO L290 TraceCheckUtils]: 11: Hoare triple {10715#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [161] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {10711#(= main_~x~0 1000000)} is VALID [2022-04-28 03:52:08,660 INFO L290 TraceCheckUtils]: 10: Hoare triple {10715#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [166] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_657)) (.cse2 (= |v_main_#t~post5_113| |v_main_#t~post5_112|)) (.cse3 (= |v_main_#t~post6_236| |v_main_#t~post6_232|)) (.cse4 (= v_main_~y~0_459 v_main_~y~0_458)) (.cse5 (= v_main_~x~0_657 v_main_~x~0_656))) (or (let ((.cse0 (+ v_main_~x~0_657 v_main_~y~0_458))) (and (= .cse0 (+ v_main_~x~0_656 v_main_~y~0_459)) (< v_main_~y~0_459 v_main_~y~0_458) (< .cse0 (+ 750001 v_main_~y~0_459)) .cse1)) (and .cse2 .cse3 .cse4 .cse5 (or (not .cse1) (not (< v_main_~x~0_657 750000)))) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_459, main_#t~post5=|v_main_#t~post5_113|, main_~x~0=v_main_~x~0_657, main_#t~post6=|v_main_#t~post6_236|} OutVars{main_~y~0=v_main_~y~0_458, main_#t~post5=|v_main_#t~post5_112|, main_~x~0=v_main_~x~0_656, main_#t~post6=|v_main_#t~post6_232|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {10715#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:08,660 INFO L290 TraceCheckUtils]: 9: Hoare triple {10715#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [165] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {10715#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:08,661 INFO L290 TraceCheckUtils]: 8: Hoare triple {10725#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [164] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_233| |v_main_#t~post6_231|)) (.cse2 (= v_main_~x~0_655 v_main_~x~0_654)) (.cse3 (= v_main_~y~0_457 v_main_~y~0_456)) (.cse1 (<= 750000 v_main_~x~0_655))) (or (and .cse0 (or (not .cse1) (not (< v_main_~x~0_655 1000000))) .cse2 .cse3) (and .cse0 .cse2 .cse3) (and (< v_main_~y~0_456 (+ v_main_~y~0_457 (div (+ 999999 (* v_main_~x~0_655 (- 1))) 2) 2)) (= (+ v_main_~x~0_655 (* v_main_~y~0_456 2)) (+ v_main_~x~0_654 (* v_main_~y~0_457 2))) (< v_main_~y~0_457 v_main_~y~0_456) .cse1))) InVars {main_~y~0=v_main_~y~0_457, main_~x~0=v_main_~x~0_655, main_#t~post6=|v_main_#t~post6_233|} OutVars{main_~y~0=v_main_~y~0_456, main_~x~0=v_main_~x~0_654, main_#t~post6=|v_main_#t~post6_231|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {10715#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:08,662 INFO L290 TraceCheckUtils]: 7: Hoare triple {10725#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [163] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {10725#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:52:08,663 INFO L290 TraceCheckUtils]: 6: Hoare triple {10725#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [162] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_653 v_main_~x~0_652)) (.cse1 (= |v_main_#t~post4_135| |v_main_#t~post4_134|))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_653)) (and .cse0 .cse1) (and (< v_main_~x~0_653 v_main_~x~0_652) (< v_main_~x~0_652 500001)))) InVars {main_~x~0=v_main_~x~0_653, main_#t~post4=|v_main_#t~post4_135|} OutVars{main_~x~0=v_main_~x~0_652, main_#t~post4=|v_main_#t~post4_134|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {10725#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:52:08,664 INFO L290 TraceCheckUtils]: 5: Hoare triple {10641#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {10725#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:52:08,664 INFO L272 TraceCheckUtils]: 4: Hoare triple {10641#true} call #t~ret7 := main(); {10641#true} is VALID [2022-04-28 03:52:08,664 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10641#true} {10641#true} #48#return; {10641#true} is VALID [2022-04-28 03:52:08,664 INFO L290 TraceCheckUtils]: 2: Hoare triple {10641#true} assume true; {10641#true} is VALID [2022-04-28 03:52:08,664 INFO L290 TraceCheckUtils]: 1: Hoare triple {10641#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {10641#true} is VALID [2022-04-28 03:52:08,664 INFO L272 TraceCheckUtils]: 0: Hoare triple {10641#true} call ULTIMATE.init(); {10641#true} is VALID [2022-04-28 03:52:08,664 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:52:08,664 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [760448320] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:52:08,665 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:52:08,665 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:52:09,343 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:52:09,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [162409060] [2022-04-28 03:52:09,344 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [162409060] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:52:09,344 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:52:09,344 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [25] imperfect sequences [] total 25 [2022-04-28 03:52:09,344 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1114682862] [2022-04-28 03:52:09,344 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:52:09,344 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 3.56) internal successors, (89), 24 states have internal predecessors, (89), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 93 [2022-04-28 03:52:09,345 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:52:09,345 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 25 states, 25 states have (on average 3.56) internal successors, (89), 24 states have internal predecessors, (89), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:09,420 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 93 edges. 93 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:09,420 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-04-28 03:52:09,420 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:52:09,421 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-04-28 03:52:09,421 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=184, Invalid=1006, Unknown=0, NotChecked=0, Total=1190 [2022-04-28 03:52:09,421 INFO L87 Difference]: Start difference. First operand 96 states and 100 transitions. Second operand has 25 states, 25 states have (on average 3.56) internal successors, (89), 24 states have internal predecessors, (89), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:12,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:12,877 INFO L93 Difference]: Finished difference Result 123 states and 132 transitions. [2022-04-28 03:52:12,877 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-04-28 03:52:12,877 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 3.56) internal successors, (89), 24 states have internal predecessors, (89), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 93 [2022-04-28 03:52:12,877 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:52:12,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 25 states have (on average 3.56) internal successors, (89), 24 states have internal predecessors, (89), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:12,879 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 112 transitions. [2022-04-28 03:52:12,879 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 25 states have (on average 3.56) internal successors, (89), 24 states have internal predecessors, (89), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:12,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 112 transitions. [2022-04-28 03:52:12,880 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 25 states and 112 transitions. [2022-04-28 03:52:12,983 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 112 edges. 112 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:12,984 INFO L225 Difference]: With dead ends: 123 [2022-04-28 03:52:12,984 INFO L226 Difference]: Without dead ends: 105 [2022-04-28 03:52:12,985 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 148 GetRequests, 91 SyntacticMatches, 2 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 624 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=369, Invalid=2823, Unknown=0, NotChecked=0, Total=3192 [2022-04-28 03:52:12,986 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 72 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 1770 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 1795 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 1770 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-04-28 03:52:12,986 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 133 Invalid, 1795 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 1770 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-04-28 03:52:12,986 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105 states. [2022-04-28 03:52:13,797 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105 to 100. [2022-04-28 03:52:13,798 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:52:13,798 INFO L82 GeneralOperation]: Start isEquivalent. First operand 105 states. Second operand has 100 states, 95 states have (on average 1.0526315789473684) internal successors, (100), 95 states have internal predecessors, (100), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:13,798 INFO L74 IsIncluded]: Start isIncluded. First operand 105 states. Second operand has 100 states, 95 states have (on average 1.0526315789473684) internal successors, (100), 95 states have internal predecessors, (100), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:13,798 INFO L87 Difference]: Start difference. First operand 105 states. Second operand has 100 states, 95 states have (on average 1.0526315789473684) internal successors, (100), 95 states have internal predecessors, (100), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:13,800 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:13,800 INFO L93 Difference]: Finished difference Result 105 states and 109 transitions. [2022-04-28 03:52:13,800 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 109 transitions. [2022-04-28 03:52:13,800 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:52:13,800 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:52:13,800 INFO L74 IsIncluded]: Start isIncluded. First operand has 100 states, 95 states have (on average 1.0526315789473684) internal successors, (100), 95 states have internal predecessors, (100), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 105 states. [2022-04-28 03:52:13,801 INFO L87 Difference]: Start difference. First operand has 100 states, 95 states have (on average 1.0526315789473684) internal successors, (100), 95 states have internal predecessors, (100), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 105 states. [2022-04-28 03:52:13,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:13,802 INFO L93 Difference]: Finished difference Result 105 states and 109 transitions. [2022-04-28 03:52:13,802 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 109 transitions. [2022-04-28 03:52:13,802 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:52:13,802 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:52:13,802 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:52:13,802 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:52:13,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 95 states have (on average 1.0526315789473684) internal successors, (100), 95 states have internal predecessors, (100), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:13,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 104 transitions. [2022-04-28 03:52:13,804 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 104 transitions. Word has length 93 [2022-04-28 03:52:13,804 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:52:13,804 INFO L495 AbstractCegarLoop]: Abstraction has 100 states and 104 transitions. [2022-04-28 03:52:13,804 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 3.56) internal successors, (89), 24 states have internal predecessors, (89), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:13,804 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 100 states and 104 transitions. [2022-04-28 03:52:13,965 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:13,965 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 104 transitions. [2022-04-28 03:52:13,965 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-04-28 03:52:13,965 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:52:13,966 INFO L195 NwaCegarLoop]: trace histogram [22, 21, 21, 20, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:52:13,983 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-04-28 03:52:14,166 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,20 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:52:14,166 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:52:14,166 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:52:14,166 INFO L85 PathProgramCache]: Analyzing trace with hash 1934365804, now seen corresponding path program 19 times [2022-04-28 03:52:14,166 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:52:14,167 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [226842194] [2022-04-28 03:52:18,234 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:52:18,279 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:18,523 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:18,721 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:18,722 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:52:18,725 INFO L85 PathProgramCache]: Analyzing trace with hash 152046951, now seen corresponding path program 1 times [2022-04-28 03:52:18,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:52:18,726 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [602366548] [2022-04-28 03:52:18,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:52:18,726 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:52:18,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:18,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:52:18,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:18,779 INFO L290 TraceCheckUtils]: 0: Hoare triple {11482#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {11474#true} is VALID [2022-04-28 03:52:18,780 INFO L290 TraceCheckUtils]: 1: Hoare triple {11474#true} assume true; {11474#true} is VALID [2022-04-28 03:52:18,780 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11474#true} {11474#true} #48#return; {11474#true} is VALID [2022-04-28 03:52:18,780 INFO L272 TraceCheckUtils]: 0: Hoare triple {11474#true} call ULTIMATE.init(); {11482#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:52:18,780 INFO L290 TraceCheckUtils]: 1: Hoare triple {11482#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {11474#true} is VALID [2022-04-28 03:52:18,780 INFO L290 TraceCheckUtils]: 2: Hoare triple {11474#true} assume true; {11474#true} is VALID [2022-04-28 03:52:18,781 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {11474#true} {11474#true} #48#return; {11474#true} is VALID [2022-04-28 03:52:18,781 INFO L272 TraceCheckUtils]: 4: Hoare triple {11474#true} call #t~ret7 := main(); {11474#true} is VALID [2022-04-28 03:52:18,781 INFO L290 TraceCheckUtils]: 5: Hoare triple {11474#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {11479#(= main_~x~0 0)} is VALID [2022-04-28 03:52:18,782 INFO L290 TraceCheckUtils]: 6: Hoare triple {11479#(= main_~x~0 0)} [168] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_142| |v_main_#t~post4_141|)) (.cse1 (= v_main_~x~0_698 v_main_~x~0_697))) (or (and .cse0 .cse1) (and .cse0 .cse1 (not (< v_main_~x~0_698 500000))) (and (< v_main_~x~0_697 500001) (< v_main_~x~0_698 v_main_~x~0_697)))) InVars {main_~x~0=v_main_~x~0_698, main_#t~post4=|v_main_#t~post4_142|} OutVars{main_~x~0=v_main_~x~0_697, main_#t~post4=|v_main_#t~post4_141|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {11480#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:18,782 INFO L290 TraceCheckUtils]: 7: Hoare triple {11480#(<= main_~x~0 500000)} [169] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {11480#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:18,783 INFO L290 TraceCheckUtils]: 8: Hoare triple {11480#(<= main_~x~0 500000)} [170] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_700)) (.cse1 (= v_main_~y~0_492 v_main_~y~0_491)) (.cse2 (= |v_main_#t~post6_246| |v_main_#t~post6_244|)) (.cse3 (= v_main_~x~0_700 v_main_~x~0_699))) (or (and (< v_main_~y~0_491 (+ v_main_~y~0_492 2 (div (+ 999999 (* v_main_~x~0_700 (- 1))) 2))) (< v_main_~y~0_492 v_main_~y~0_491) .cse0 (= (+ (* v_main_~y~0_491 2) v_main_~x~0_700) (+ v_main_~x~0_699 (* v_main_~y~0_492 2)))) (and .cse1 .cse2 (or (not .cse0) (not (< v_main_~x~0_700 1000000))) .cse3) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_492, main_~x~0=v_main_~x~0_700, main_#t~post6=|v_main_#t~post6_246|} OutVars{main_~y~0=v_main_~y~0_491, main_~x~0=v_main_~x~0_699, main_#t~post6=|v_main_#t~post6_244|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {11481#(<= main_~x~0 999999)} is VALID [2022-04-28 03:52:18,783 INFO L290 TraceCheckUtils]: 9: Hoare triple {11481#(<= main_~x~0 999999)} [171] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {11481#(<= main_~x~0 999999)} is VALID [2022-04-28 03:52:18,784 INFO L290 TraceCheckUtils]: 10: Hoare triple {11481#(<= main_~x~0 999999)} [172] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_494 v_main_~y~0_493)) (.cse2 (= |v_main_#t~post6_249| |v_main_#t~post6_245|)) (.cse3 (= v_main_~x~0_702 v_main_~x~0_701)) (.cse4 (= |v_main_#t~post5_119| |v_main_#t~post5_118|)) (.cse1 (<= 500000 v_main_~x~0_702))) (or (and .cse0 (or (not (< v_main_~x~0_702 750000)) (not .cse1)) .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4) (let ((.cse5 (+ v_main_~x~0_702 v_main_~y~0_493))) (and .cse1 (< .cse5 (+ 750001 v_main_~y~0_494)) (< v_main_~y~0_494 v_main_~y~0_493) (= .cse5 (+ v_main_~x~0_701 v_main_~y~0_494)))))) InVars {main_~y~0=v_main_~y~0_494, main_#t~post5=|v_main_#t~post5_119|, main_~x~0=v_main_~x~0_702, main_#t~post6=|v_main_#t~post6_249|} OutVars{main_~y~0=v_main_~y~0_493, main_#t~post5=|v_main_#t~post5_118|, main_~x~0=v_main_~x~0_701, main_#t~post6=|v_main_#t~post6_245|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {11481#(<= main_~x~0 999999)} is VALID [2022-04-28 03:52:18,785 INFO L290 TraceCheckUtils]: 11: Hoare triple {11481#(<= main_~x~0 999999)} [167] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {11475#false} is VALID [2022-04-28 03:52:18,785 INFO L272 TraceCheckUtils]: 12: Hoare triple {11475#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {11475#false} is VALID [2022-04-28 03:52:18,785 INFO L290 TraceCheckUtils]: 13: Hoare triple {11475#false} ~cond := #in~cond; {11475#false} is VALID [2022-04-28 03:52:18,785 INFO L290 TraceCheckUtils]: 14: Hoare triple {11475#false} assume 0 == ~cond; {11475#false} is VALID [2022-04-28 03:52:18,785 INFO L290 TraceCheckUtils]: 15: Hoare triple {11475#false} assume !false; {11475#false} is VALID [2022-04-28 03:52:18,785 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:52:18,785 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:52:18,785 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [602366548] [2022-04-28 03:52:18,785 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [602366548] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:52:18,786 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2021482100] [2022-04-28 03:52:18,786 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:52:18,786 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:52:18,786 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:52:18,788 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:52:18,798 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-04-28 03:52:18,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:18,829 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:52:18,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:18,839 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:52:19,046 INFO L272 TraceCheckUtils]: 0: Hoare triple {11474#true} call ULTIMATE.init(); {11474#true} is VALID [2022-04-28 03:52:19,046 INFO L290 TraceCheckUtils]: 1: Hoare triple {11474#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {11474#true} is VALID [2022-04-28 03:52:19,046 INFO L290 TraceCheckUtils]: 2: Hoare triple {11474#true} assume true; {11474#true} is VALID [2022-04-28 03:52:19,046 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {11474#true} {11474#true} #48#return; {11474#true} is VALID [2022-04-28 03:52:19,047 INFO L272 TraceCheckUtils]: 4: Hoare triple {11474#true} call #t~ret7 := main(); {11474#true} is VALID [2022-04-28 03:52:19,047 INFO L290 TraceCheckUtils]: 5: Hoare triple {11474#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {11501#(<= main_~x~0 0)} is VALID [2022-04-28 03:52:19,050 INFO L290 TraceCheckUtils]: 6: Hoare triple {11501#(<= main_~x~0 0)} [168] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_142| |v_main_#t~post4_141|)) (.cse1 (= v_main_~x~0_698 v_main_~x~0_697))) (or (and .cse0 .cse1) (and .cse0 .cse1 (not (< v_main_~x~0_698 500000))) (and (< v_main_~x~0_697 500001) (< v_main_~x~0_698 v_main_~x~0_697)))) InVars {main_~x~0=v_main_~x~0_698, main_#t~post4=|v_main_#t~post4_142|} OutVars{main_~x~0=v_main_~x~0_697, main_#t~post4=|v_main_#t~post4_141|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {11480#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:19,051 INFO L290 TraceCheckUtils]: 7: Hoare triple {11480#(<= main_~x~0 500000)} [169] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {11480#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:19,052 INFO L290 TraceCheckUtils]: 8: Hoare triple {11480#(<= main_~x~0 500000)} [170] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_700)) (.cse1 (= v_main_~y~0_492 v_main_~y~0_491)) (.cse2 (= |v_main_#t~post6_246| |v_main_#t~post6_244|)) (.cse3 (= v_main_~x~0_700 v_main_~x~0_699))) (or (and (< v_main_~y~0_491 (+ v_main_~y~0_492 2 (div (+ 999999 (* v_main_~x~0_700 (- 1))) 2))) (< v_main_~y~0_492 v_main_~y~0_491) .cse0 (= (+ (* v_main_~y~0_491 2) v_main_~x~0_700) (+ v_main_~x~0_699 (* v_main_~y~0_492 2)))) (and .cse1 .cse2 (or (not .cse0) (not (< v_main_~x~0_700 1000000))) .cse3) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_492, main_~x~0=v_main_~x~0_700, main_#t~post6=|v_main_#t~post6_246|} OutVars{main_~y~0=v_main_~y~0_491, main_~x~0=v_main_~x~0_699, main_#t~post6=|v_main_#t~post6_244|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {11480#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:19,052 INFO L290 TraceCheckUtils]: 9: Hoare triple {11480#(<= main_~x~0 500000)} [171] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {11480#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:19,053 INFO L290 TraceCheckUtils]: 10: Hoare triple {11480#(<= main_~x~0 500000)} [172] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_494 v_main_~y~0_493)) (.cse2 (= |v_main_#t~post6_249| |v_main_#t~post6_245|)) (.cse3 (= v_main_~x~0_702 v_main_~x~0_701)) (.cse4 (= |v_main_#t~post5_119| |v_main_#t~post5_118|)) (.cse1 (<= 500000 v_main_~x~0_702))) (or (and .cse0 (or (not (< v_main_~x~0_702 750000)) (not .cse1)) .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4) (let ((.cse5 (+ v_main_~x~0_702 v_main_~y~0_493))) (and .cse1 (< .cse5 (+ 750001 v_main_~y~0_494)) (< v_main_~y~0_494 v_main_~y~0_493) (= .cse5 (+ v_main_~x~0_701 v_main_~y~0_494)))))) InVars {main_~y~0=v_main_~y~0_494, main_#t~post5=|v_main_#t~post5_119|, main_~x~0=v_main_~x~0_702, main_#t~post6=|v_main_#t~post6_249|} OutVars{main_~y~0=v_main_~y~0_493, main_#t~post5=|v_main_#t~post5_118|, main_~x~0=v_main_~x~0_701, main_#t~post6=|v_main_#t~post6_245|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {11517#(< main_~x~0 750001)} is VALID [2022-04-28 03:52:19,053 INFO L290 TraceCheckUtils]: 11: Hoare triple {11517#(< main_~x~0 750001)} [167] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {11475#false} is VALID [2022-04-28 03:52:19,053 INFO L272 TraceCheckUtils]: 12: Hoare triple {11475#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {11475#false} is VALID [2022-04-28 03:52:19,053 INFO L290 TraceCheckUtils]: 13: Hoare triple {11475#false} ~cond := #in~cond; {11475#false} is VALID [2022-04-28 03:52:19,053 INFO L290 TraceCheckUtils]: 14: Hoare triple {11475#false} assume 0 == ~cond; {11475#false} is VALID [2022-04-28 03:52:19,053 INFO L290 TraceCheckUtils]: 15: Hoare triple {11475#false} assume !false; {11475#false} is VALID [2022-04-28 03:52:19,054 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:52:19,054 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:52:19,516 INFO L290 TraceCheckUtils]: 15: Hoare triple {11475#false} assume !false; {11475#false} is VALID [2022-04-28 03:52:19,517 INFO L290 TraceCheckUtils]: 14: Hoare triple {11536#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {11475#false} is VALID [2022-04-28 03:52:19,517 INFO L290 TraceCheckUtils]: 13: Hoare triple {11540#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {11536#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:52:19,517 INFO L272 TraceCheckUtils]: 12: Hoare triple {11544#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {11540#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:52:19,518 INFO L290 TraceCheckUtils]: 11: Hoare triple {11548#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [167] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {11544#(= main_~x~0 1000000)} is VALID [2022-04-28 03:52:19,519 INFO L290 TraceCheckUtils]: 10: Hoare triple {11548#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [172] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_494 v_main_~y~0_493)) (.cse2 (= |v_main_#t~post6_249| |v_main_#t~post6_245|)) (.cse3 (= v_main_~x~0_702 v_main_~x~0_701)) (.cse4 (= |v_main_#t~post5_119| |v_main_#t~post5_118|)) (.cse1 (<= 500000 v_main_~x~0_702))) (or (and .cse0 (or (not (< v_main_~x~0_702 750000)) (not .cse1)) .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4) (let ((.cse5 (+ v_main_~x~0_702 v_main_~y~0_493))) (and .cse1 (< .cse5 (+ 750001 v_main_~y~0_494)) (< v_main_~y~0_494 v_main_~y~0_493) (= .cse5 (+ v_main_~x~0_701 v_main_~y~0_494)))))) InVars {main_~y~0=v_main_~y~0_494, main_#t~post5=|v_main_#t~post5_119|, main_~x~0=v_main_~x~0_702, main_#t~post6=|v_main_#t~post6_249|} OutVars{main_~y~0=v_main_~y~0_493, main_#t~post5=|v_main_#t~post5_118|, main_~x~0=v_main_~x~0_701, main_#t~post6=|v_main_#t~post6_245|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {11548#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:19,519 INFO L290 TraceCheckUtils]: 9: Hoare triple {11548#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [171] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {11548#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:19,520 INFO L290 TraceCheckUtils]: 8: Hoare triple {11558#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [170] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_700)) (.cse1 (= v_main_~y~0_492 v_main_~y~0_491)) (.cse2 (= |v_main_#t~post6_246| |v_main_#t~post6_244|)) (.cse3 (= v_main_~x~0_700 v_main_~x~0_699))) (or (and (< v_main_~y~0_491 (+ v_main_~y~0_492 2 (div (+ 999999 (* v_main_~x~0_700 (- 1))) 2))) (< v_main_~y~0_492 v_main_~y~0_491) .cse0 (= (+ (* v_main_~y~0_491 2) v_main_~x~0_700) (+ v_main_~x~0_699 (* v_main_~y~0_492 2)))) (and .cse1 .cse2 (or (not .cse0) (not (< v_main_~x~0_700 1000000))) .cse3) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_492, main_~x~0=v_main_~x~0_700, main_#t~post6=|v_main_#t~post6_246|} OutVars{main_~y~0=v_main_~y~0_491, main_~x~0=v_main_~x~0_699, main_#t~post6=|v_main_#t~post6_244|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {11548#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:19,521 INFO L290 TraceCheckUtils]: 7: Hoare triple {11558#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [169] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {11558#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:52:19,522 INFO L290 TraceCheckUtils]: 6: Hoare triple {11558#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [168] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_142| |v_main_#t~post4_141|)) (.cse1 (= v_main_~x~0_698 v_main_~x~0_697))) (or (and .cse0 .cse1) (and .cse0 .cse1 (not (< v_main_~x~0_698 500000))) (and (< v_main_~x~0_697 500001) (< v_main_~x~0_698 v_main_~x~0_697)))) InVars {main_~x~0=v_main_~x~0_698, main_#t~post4=|v_main_#t~post4_142|} OutVars{main_~x~0=v_main_~x~0_697, main_#t~post4=|v_main_#t~post4_141|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {11558#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:52:19,522 INFO L290 TraceCheckUtils]: 5: Hoare triple {11474#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {11558#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:52:19,522 INFO L272 TraceCheckUtils]: 4: Hoare triple {11474#true} call #t~ret7 := main(); {11474#true} is VALID [2022-04-28 03:52:19,522 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {11474#true} {11474#true} #48#return; {11474#true} is VALID [2022-04-28 03:52:19,522 INFO L290 TraceCheckUtils]: 2: Hoare triple {11474#true} assume true; {11474#true} is VALID [2022-04-28 03:52:19,522 INFO L290 TraceCheckUtils]: 1: Hoare triple {11474#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {11474#true} is VALID [2022-04-28 03:52:19,522 INFO L272 TraceCheckUtils]: 0: Hoare triple {11474#true} call ULTIMATE.init(); {11474#true} is VALID [2022-04-28 03:52:19,523 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:52:19,523 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2021482100] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:52:19,523 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:52:19,523 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:52:20,229 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:52:20,229 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [226842194] [2022-04-28 03:52:20,229 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [226842194] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:52:20,229 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:52:20,229 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [26] imperfect sequences [] total 26 [2022-04-28 03:52:20,229 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1402112250] [2022-04-28 03:52:20,229 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:52:20,230 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 3.576923076923077) internal successors, (93), 25 states have internal predecessors, (93), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 97 [2022-04-28 03:52:20,230 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:52:20,230 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 26 states, 26 states have (on average 3.576923076923077) internal successors, (93), 25 states have internal predecessors, (93), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:20,294 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 97 edges. 97 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:20,294 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-04-28 03:52:20,294 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:52:20,294 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-04-28 03:52:20,294 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=1070, Unknown=0, NotChecked=0, Total=1260 [2022-04-28 03:52:20,295 INFO L87 Difference]: Start difference. First operand 100 states and 104 transitions. Second operand has 26 states, 26 states have (on average 3.576923076923077) internal successors, (93), 25 states have internal predecessors, (93), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:24,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:24,142 INFO L93 Difference]: Finished difference Result 127 states and 136 transitions. [2022-04-28 03:52:24,142 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-04-28 03:52:24,142 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 3.576923076923077) internal successors, (93), 25 states have internal predecessors, (93), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 97 [2022-04-28 03:52:24,143 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:52:24,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 26 states have (on average 3.576923076923077) internal successors, (93), 25 states have internal predecessors, (93), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:24,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 116 transitions. [2022-04-28 03:52:24,145 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 26 states have (on average 3.576923076923077) internal successors, (93), 25 states have internal predecessors, (93), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:24,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 116 transitions. [2022-04-28 03:52:24,146 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 26 states and 116 transitions. [2022-04-28 03:52:24,237 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 116 edges. 116 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:24,238 INFO L225 Difference]: With dead ends: 127 [2022-04-28 03:52:24,238 INFO L226 Difference]: Without dead ends: 109 [2022-04-28 03:52:24,239 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 94 SyntacticMatches, 2 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 663 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=383, Invalid=3039, Unknown=0, NotChecked=0, Total=3422 [2022-04-28 03:52:24,239 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 75 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 1940 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 139 SdHoareTripleChecker+Invalid, 1966 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 1940 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-04-28 03:52:24,240 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 139 Invalid, 1966 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 1940 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-04-28 03:52:24,240 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109 states. [2022-04-28 03:52:25,052 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109 to 104. [2022-04-28 03:52:25,052 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:52:25,052 INFO L82 GeneralOperation]: Start isEquivalent. First operand 109 states. Second operand has 104 states, 99 states have (on average 1.0505050505050506) internal successors, (104), 99 states have internal predecessors, (104), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:25,052 INFO L74 IsIncluded]: Start isIncluded. First operand 109 states. Second operand has 104 states, 99 states have (on average 1.0505050505050506) internal successors, (104), 99 states have internal predecessors, (104), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:25,053 INFO L87 Difference]: Start difference. First operand 109 states. Second operand has 104 states, 99 states have (on average 1.0505050505050506) internal successors, (104), 99 states have internal predecessors, (104), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:25,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:25,054 INFO L93 Difference]: Finished difference Result 109 states and 113 transitions. [2022-04-28 03:52:25,054 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 113 transitions. [2022-04-28 03:52:25,054 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:52:25,054 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:52:25,054 INFO L74 IsIncluded]: Start isIncluded. First operand has 104 states, 99 states have (on average 1.0505050505050506) internal successors, (104), 99 states have internal predecessors, (104), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 109 states. [2022-04-28 03:52:25,054 INFO L87 Difference]: Start difference. First operand has 104 states, 99 states have (on average 1.0505050505050506) internal successors, (104), 99 states have internal predecessors, (104), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 109 states. [2022-04-28 03:52:25,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:25,055 INFO L93 Difference]: Finished difference Result 109 states and 113 transitions. [2022-04-28 03:52:25,055 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 113 transitions. [2022-04-28 03:52:25,056 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:52:25,056 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:52:25,056 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:52:25,056 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:52:25,056 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104 states, 99 states have (on average 1.0505050505050506) internal successors, (104), 99 states have internal predecessors, (104), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:25,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104 states to 104 states and 108 transitions. [2022-04-28 03:52:25,057 INFO L78 Accepts]: Start accepts. Automaton has 104 states and 108 transitions. Word has length 97 [2022-04-28 03:52:25,058 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:52:25,058 INFO L495 AbstractCegarLoop]: Abstraction has 104 states and 108 transitions. [2022-04-28 03:52:25,058 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 3.576923076923077) internal successors, (93), 25 states have internal predecessors, (93), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:25,058 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 104 states and 108 transitions. [2022-04-28 03:52:25,240 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 108 edges. 108 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:25,241 INFO L276 IsEmpty]: Start isEmpty. Operand 104 states and 108 transitions. [2022-04-28 03:52:25,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2022-04-28 03:52:25,241 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:52:25,241 INFO L195 NwaCegarLoop]: trace histogram [23, 22, 22, 21, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:52:25,257 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-04-28 03:52:25,441 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2022-04-28 03:52:25,442 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:52:25,442 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:52:25,442 INFO L85 PathProgramCache]: Analyzing trace with hash -1169697341, now seen corresponding path program 20 times [2022-04-28 03:52:25,442 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:52:25,442 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1389162651] [2022-04-28 03:52:29,507 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:52:29,557 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:29,772 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:33,887 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:52:33,999 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:34,001 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:52:34,008 INFO L85 PathProgramCache]: Analyzing trace with hash -207528025, now seen corresponding path program 1 times [2022-04-28 03:52:34,008 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:52:34,008 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1505264844] [2022-04-28 03:52:34,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:52:34,008 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:52:34,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:34,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:52:34,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:34,050 INFO L290 TraceCheckUtils]: 0: Hoare triple {12342#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {12334#true} is VALID [2022-04-28 03:52:34,050 INFO L290 TraceCheckUtils]: 1: Hoare triple {12334#true} assume true; {12334#true} is VALID [2022-04-28 03:52:34,050 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12334#true} {12334#true} #48#return; {12334#true} is VALID [2022-04-28 03:52:34,051 INFO L272 TraceCheckUtils]: 0: Hoare triple {12334#true} call ULTIMATE.init(); {12342#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:52:34,051 INFO L290 TraceCheckUtils]: 1: Hoare triple {12342#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {12334#true} is VALID [2022-04-28 03:52:34,051 INFO L290 TraceCheckUtils]: 2: Hoare triple {12334#true} assume true; {12334#true} is VALID [2022-04-28 03:52:34,051 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12334#true} {12334#true} #48#return; {12334#true} is VALID [2022-04-28 03:52:34,051 INFO L272 TraceCheckUtils]: 4: Hoare triple {12334#true} call #t~ret7 := main(); {12334#true} is VALID [2022-04-28 03:52:34,056 INFO L290 TraceCheckUtils]: 5: Hoare triple {12334#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {12339#(= main_~x~0 0)} is VALID [2022-04-28 03:52:34,057 INFO L290 TraceCheckUtils]: 6: Hoare triple {12339#(= main_~x~0 0)} [174] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_149| |v_main_#t~post4_148|)) (.cse1 (= v_main_~x~0_744 v_main_~x~0_743))) (or (and .cse0 .cse1) (and (not (< v_main_~x~0_744 500000)) .cse0 .cse1) (and (< v_main_~x~0_743 500001) (< v_main_~x~0_744 v_main_~x~0_743)))) InVars {main_~x~0=v_main_~x~0_744, main_#t~post4=|v_main_#t~post4_149|} OutVars{main_~x~0=v_main_~x~0_743, main_#t~post4=|v_main_#t~post4_148|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {12340#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:34,057 INFO L290 TraceCheckUtils]: 7: Hoare triple {12340#(<= main_~x~0 500000)} [175] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {12340#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:34,058 INFO L290 TraceCheckUtils]: 8: Hoare triple {12340#(<= main_~x~0 500000)} [176] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_746)) (.cse1 (= v_main_~x~0_746 v_main_~x~0_745)) (.cse2 (= v_main_~y~0_528 v_main_~y~0_527)) (.cse3 (= |v_main_#t~post6_259| |v_main_#t~post6_257|))) (or (and (< v_main_~y~0_528 v_main_~y~0_527) (< v_main_~y~0_527 (+ v_main_~y~0_528 (div (+ 999999 (* v_main_~x~0_746 (- 1))) 2) 2)) .cse0 (= (+ v_main_~x~0_746 (* v_main_~y~0_527 2)) (+ v_main_~x~0_745 (* v_main_~y~0_528 2)))) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_746 1000000)))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_528, main_~x~0=v_main_~x~0_746, main_#t~post6=|v_main_#t~post6_259|} OutVars{main_~y~0=v_main_~y~0_527, main_~x~0=v_main_~x~0_745, main_#t~post6=|v_main_#t~post6_257|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {12340#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:34,058 INFO L290 TraceCheckUtils]: 9: Hoare triple {12340#(<= main_~x~0 500000)} [177] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {12340#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:34,059 INFO L290 TraceCheckUtils]: 10: Hoare triple {12340#(<= main_~x~0 500000)} [178] L11-2-->L10-2_primed: Formula: (let ((.cse2 (<= 500000 v_main_~x~0_748)) (.cse0 (= |v_main_#t~post5_125| |v_main_#t~post5_124|)) (.cse1 (= v_main_~x~0_748 v_main_~x~0_747))) (or (and (= v_main_~y~0_530 v_main_~y~0_529) (= |v_main_#t~post6_262| |v_main_#t~post6_258|) .cse0 .cse1) (let ((.cse3 (+ v_main_~x~0_748 v_main_~y~0_529))) (and .cse2 (< .cse3 (+ 750001 v_main_~y~0_530)) (< v_main_~y~0_530 v_main_~y~0_529) (= (+ v_main_~x~0_747 v_main_~y~0_530) .cse3))) (and (= |v_main_#t~post6_258| |v_main_#t~post6_262|) (or (not (< v_main_~x~0_748 750000)) (not .cse2)) (= v_main_~y~0_529 v_main_~y~0_530) .cse0 .cse1))) InVars {main_~y~0=v_main_~y~0_530, main_#t~post5=|v_main_#t~post5_125|, main_~x~0=v_main_~x~0_748, main_#t~post6=|v_main_#t~post6_262|} OutVars{main_~y~0=v_main_~y~0_529, main_#t~post5=|v_main_#t~post5_124|, main_~x~0=v_main_~x~0_747, main_#t~post6=|v_main_#t~post6_258|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {12341#(<= main_~x~0 750000)} is VALID [2022-04-28 03:52:34,059 INFO L290 TraceCheckUtils]: 11: Hoare triple {12341#(<= main_~x~0 750000)} [173] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {12335#false} is VALID [2022-04-28 03:52:34,059 INFO L272 TraceCheckUtils]: 12: Hoare triple {12335#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {12335#false} is VALID [2022-04-28 03:52:34,059 INFO L290 TraceCheckUtils]: 13: Hoare triple {12335#false} ~cond := #in~cond; {12335#false} is VALID [2022-04-28 03:52:34,059 INFO L290 TraceCheckUtils]: 14: Hoare triple {12335#false} assume 0 == ~cond; {12335#false} is VALID [2022-04-28 03:52:34,060 INFO L290 TraceCheckUtils]: 15: Hoare triple {12335#false} assume !false; {12335#false} is VALID [2022-04-28 03:52:34,060 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:52:34,060 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:52:34,060 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1505264844] [2022-04-28 03:52:34,060 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1505264844] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:52:34,060 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1060863412] [2022-04-28 03:52:34,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:52:34,060 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:52:34,061 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:52:34,064 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:52:34,067 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-04-28 03:52:34,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:34,094 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:52:34,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:34,103 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:52:34,281 INFO L272 TraceCheckUtils]: 0: Hoare triple {12334#true} call ULTIMATE.init(); {12334#true} is VALID [2022-04-28 03:52:34,281 INFO L290 TraceCheckUtils]: 1: Hoare triple {12334#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {12334#true} is VALID [2022-04-28 03:52:34,281 INFO L290 TraceCheckUtils]: 2: Hoare triple {12334#true} assume true; {12334#true} is VALID [2022-04-28 03:52:34,281 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12334#true} {12334#true} #48#return; {12334#true} is VALID [2022-04-28 03:52:34,281 INFO L272 TraceCheckUtils]: 4: Hoare triple {12334#true} call #t~ret7 := main(); {12334#true} is VALID [2022-04-28 03:52:34,281 INFO L290 TraceCheckUtils]: 5: Hoare triple {12334#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {12361#(<= main_~x~0 0)} is VALID [2022-04-28 03:52:34,282 INFO L290 TraceCheckUtils]: 6: Hoare triple {12361#(<= main_~x~0 0)} [174] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_149| |v_main_#t~post4_148|)) (.cse1 (= v_main_~x~0_744 v_main_~x~0_743))) (or (and .cse0 .cse1) (and (not (< v_main_~x~0_744 500000)) .cse0 .cse1) (and (< v_main_~x~0_743 500001) (< v_main_~x~0_744 v_main_~x~0_743)))) InVars {main_~x~0=v_main_~x~0_744, main_#t~post4=|v_main_#t~post4_149|} OutVars{main_~x~0=v_main_~x~0_743, main_#t~post4=|v_main_#t~post4_148|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {12340#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:34,282 INFO L290 TraceCheckUtils]: 7: Hoare triple {12340#(<= main_~x~0 500000)} [175] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {12340#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:34,283 INFO L290 TraceCheckUtils]: 8: Hoare triple {12340#(<= main_~x~0 500000)} [176] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_746)) (.cse1 (= v_main_~x~0_746 v_main_~x~0_745)) (.cse2 (= v_main_~y~0_528 v_main_~y~0_527)) (.cse3 (= |v_main_#t~post6_259| |v_main_#t~post6_257|))) (or (and (< v_main_~y~0_528 v_main_~y~0_527) (< v_main_~y~0_527 (+ v_main_~y~0_528 (div (+ 999999 (* v_main_~x~0_746 (- 1))) 2) 2)) .cse0 (= (+ v_main_~x~0_746 (* v_main_~y~0_527 2)) (+ v_main_~x~0_745 (* v_main_~y~0_528 2)))) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_746 1000000)))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_528, main_~x~0=v_main_~x~0_746, main_#t~post6=|v_main_#t~post6_259|} OutVars{main_~y~0=v_main_~y~0_527, main_~x~0=v_main_~x~0_745, main_#t~post6=|v_main_#t~post6_257|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {12340#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:34,283 INFO L290 TraceCheckUtils]: 9: Hoare triple {12340#(<= main_~x~0 500000)} [177] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {12340#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:34,284 INFO L290 TraceCheckUtils]: 10: Hoare triple {12340#(<= main_~x~0 500000)} [178] L11-2-->L10-2_primed: Formula: (let ((.cse2 (<= 500000 v_main_~x~0_748)) (.cse0 (= |v_main_#t~post5_125| |v_main_#t~post5_124|)) (.cse1 (= v_main_~x~0_748 v_main_~x~0_747))) (or (and (= v_main_~y~0_530 v_main_~y~0_529) (= |v_main_#t~post6_262| |v_main_#t~post6_258|) .cse0 .cse1) (let ((.cse3 (+ v_main_~x~0_748 v_main_~y~0_529))) (and .cse2 (< .cse3 (+ 750001 v_main_~y~0_530)) (< v_main_~y~0_530 v_main_~y~0_529) (= (+ v_main_~x~0_747 v_main_~y~0_530) .cse3))) (and (= |v_main_#t~post6_258| |v_main_#t~post6_262|) (or (not (< v_main_~x~0_748 750000)) (not .cse2)) (= v_main_~y~0_529 v_main_~y~0_530) .cse0 .cse1))) InVars {main_~y~0=v_main_~y~0_530, main_#t~post5=|v_main_#t~post5_125|, main_~x~0=v_main_~x~0_748, main_#t~post6=|v_main_#t~post6_262|} OutVars{main_~y~0=v_main_~y~0_529, main_#t~post5=|v_main_#t~post5_124|, main_~x~0=v_main_~x~0_747, main_#t~post6=|v_main_#t~post6_258|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {12341#(<= main_~x~0 750000)} is VALID [2022-04-28 03:52:34,284 INFO L290 TraceCheckUtils]: 11: Hoare triple {12341#(<= main_~x~0 750000)} [173] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {12335#false} is VALID [2022-04-28 03:52:34,285 INFO L272 TraceCheckUtils]: 12: Hoare triple {12335#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {12335#false} is VALID [2022-04-28 03:52:34,285 INFO L290 TraceCheckUtils]: 13: Hoare triple {12335#false} ~cond := #in~cond; {12335#false} is VALID [2022-04-28 03:52:34,285 INFO L290 TraceCheckUtils]: 14: Hoare triple {12335#false} assume 0 == ~cond; {12335#false} is VALID [2022-04-28 03:52:34,285 INFO L290 TraceCheckUtils]: 15: Hoare triple {12335#false} assume !false; {12335#false} is VALID [2022-04-28 03:52:34,285 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:52:34,285 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:52:34,681 INFO L290 TraceCheckUtils]: 15: Hoare triple {12335#false} assume !false; {12335#false} is VALID [2022-04-28 03:52:34,681 INFO L290 TraceCheckUtils]: 14: Hoare triple {12395#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {12335#false} is VALID [2022-04-28 03:52:34,682 INFO L290 TraceCheckUtils]: 13: Hoare triple {12399#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {12395#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:52:34,682 INFO L272 TraceCheckUtils]: 12: Hoare triple {12403#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {12399#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:52:34,683 INFO L290 TraceCheckUtils]: 11: Hoare triple {12407#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [173] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {12403#(= main_~x~0 1000000)} is VALID [2022-04-28 03:52:34,683 INFO L290 TraceCheckUtils]: 10: Hoare triple {12407#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [178] L11-2-->L10-2_primed: Formula: (let ((.cse2 (<= 500000 v_main_~x~0_748)) (.cse0 (= |v_main_#t~post5_125| |v_main_#t~post5_124|)) (.cse1 (= v_main_~x~0_748 v_main_~x~0_747))) (or (and (= v_main_~y~0_530 v_main_~y~0_529) (= |v_main_#t~post6_262| |v_main_#t~post6_258|) .cse0 .cse1) (let ((.cse3 (+ v_main_~x~0_748 v_main_~y~0_529))) (and .cse2 (< .cse3 (+ 750001 v_main_~y~0_530)) (< v_main_~y~0_530 v_main_~y~0_529) (= (+ v_main_~x~0_747 v_main_~y~0_530) .cse3))) (and (= |v_main_#t~post6_258| |v_main_#t~post6_262|) (or (not (< v_main_~x~0_748 750000)) (not .cse2)) (= v_main_~y~0_529 v_main_~y~0_530) .cse0 .cse1))) InVars {main_~y~0=v_main_~y~0_530, main_#t~post5=|v_main_#t~post5_125|, main_~x~0=v_main_~x~0_748, main_#t~post6=|v_main_#t~post6_262|} OutVars{main_~y~0=v_main_~y~0_529, main_#t~post5=|v_main_#t~post5_124|, main_~x~0=v_main_~x~0_747, main_#t~post6=|v_main_#t~post6_258|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {12407#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:34,684 INFO L290 TraceCheckUtils]: 9: Hoare triple {12407#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [177] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {12407#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:34,685 INFO L290 TraceCheckUtils]: 8: Hoare triple {12417#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [176] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_746)) (.cse1 (= v_main_~x~0_746 v_main_~x~0_745)) (.cse2 (= v_main_~y~0_528 v_main_~y~0_527)) (.cse3 (= |v_main_#t~post6_259| |v_main_#t~post6_257|))) (or (and (< v_main_~y~0_528 v_main_~y~0_527) (< v_main_~y~0_527 (+ v_main_~y~0_528 (div (+ 999999 (* v_main_~x~0_746 (- 1))) 2) 2)) .cse0 (= (+ v_main_~x~0_746 (* v_main_~y~0_527 2)) (+ v_main_~x~0_745 (* v_main_~y~0_528 2)))) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_746 1000000)))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_528, main_~x~0=v_main_~x~0_746, main_#t~post6=|v_main_#t~post6_259|} OutVars{main_~y~0=v_main_~y~0_527, main_~x~0=v_main_~x~0_745, main_#t~post6=|v_main_#t~post6_257|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {12407#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:34,685 INFO L290 TraceCheckUtils]: 7: Hoare triple {12417#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [175] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {12417#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:52:34,686 INFO L290 TraceCheckUtils]: 6: Hoare triple {12417#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [174] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_149| |v_main_#t~post4_148|)) (.cse1 (= v_main_~x~0_744 v_main_~x~0_743))) (or (and .cse0 .cse1) (and (not (< v_main_~x~0_744 500000)) .cse0 .cse1) (and (< v_main_~x~0_743 500001) (< v_main_~x~0_744 v_main_~x~0_743)))) InVars {main_~x~0=v_main_~x~0_744, main_#t~post4=|v_main_#t~post4_149|} OutVars{main_~x~0=v_main_~x~0_743, main_#t~post4=|v_main_#t~post4_148|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {12417#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:52:34,687 INFO L290 TraceCheckUtils]: 5: Hoare triple {12334#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {12417#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:52:34,687 INFO L272 TraceCheckUtils]: 4: Hoare triple {12334#true} call #t~ret7 := main(); {12334#true} is VALID [2022-04-28 03:52:34,687 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {12334#true} {12334#true} #48#return; {12334#true} is VALID [2022-04-28 03:52:34,687 INFO L290 TraceCheckUtils]: 2: Hoare triple {12334#true} assume true; {12334#true} is VALID [2022-04-28 03:52:34,687 INFO L290 TraceCheckUtils]: 1: Hoare triple {12334#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {12334#true} is VALID [2022-04-28 03:52:34,687 INFO L272 TraceCheckUtils]: 0: Hoare triple {12334#true} call ULTIMATE.init(); {12334#true} is VALID [2022-04-28 03:52:34,687 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:52:34,687 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1060863412] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:52:34,688 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:52:34,688 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:52:35,445 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:52:35,445 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1389162651] [2022-04-28 03:52:35,445 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1389162651] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:52:35,445 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:52:35,446 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [27] imperfect sequences [] total 27 [2022-04-28 03:52:35,446 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [996549337] [2022-04-28 03:52:35,446 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:52:35,446 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 27 states have (on average 3.5925925925925926) internal successors, (97), 26 states have internal predecessors, (97), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 101 [2022-04-28 03:52:35,447 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:52:35,447 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 27 states, 27 states have (on average 3.5925925925925926) internal successors, (97), 26 states have internal predecessors, (97), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:35,529 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 101 edges. 101 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:35,529 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-04-28 03:52:35,529 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:52:35,529 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-04-28 03:52:35,530 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=165, Invalid=1095, Unknown=0, NotChecked=0, Total=1260 [2022-04-28 03:52:35,530 INFO L87 Difference]: Start difference. First operand 104 states and 108 transitions. Second operand has 27 states, 27 states have (on average 3.5925925925925926) internal successors, (97), 26 states have internal predecessors, (97), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:39,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:39,730 INFO L93 Difference]: Finished difference Result 131 states and 140 transitions. [2022-04-28 03:52:39,730 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-04-28 03:52:39,730 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 27 states have (on average 3.5925925925925926) internal successors, (97), 26 states have internal predecessors, (97), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 101 [2022-04-28 03:52:39,730 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:52:39,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 27 states have (on average 3.5925925925925926) internal successors, (97), 26 states have internal predecessors, (97), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:39,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 120 transitions. [2022-04-28 03:52:39,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 27 states have (on average 3.5925925925925926) internal successors, (97), 26 states have internal predecessors, (97), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:39,733 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 120 transitions. [2022-04-28 03:52:39,733 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 27 states and 120 transitions. [2022-04-28 03:52:39,824 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 120 edges. 120 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:39,825 INFO L225 Difference]: With dead ends: 131 [2022-04-28 03:52:39,826 INFO L226 Difference]: Without dead ends: 113 [2022-04-28 03:52:39,827 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 158 GetRequests, 97 SyntacticMatches, 3 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 664 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=342, Invalid=3198, Unknown=0, NotChecked=0, Total=3540 [2022-04-28 03:52:39,827 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 78 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 2120 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 145 SdHoareTripleChecker+Invalid, 2147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 2120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-04-28 03:52:39,827 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 145 Invalid, 2147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 2120 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-04-28 03:52:39,827 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113 states. [2022-04-28 03:52:40,714 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113 to 108. [2022-04-28 03:52:40,714 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:52:40,714 INFO L82 GeneralOperation]: Start isEquivalent. First operand 113 states. Second operand has 108 states, 103 states have (on average 1.0485436893203883) internal successors, (108), 103 states have internal predecessors, (108), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:40,714 INFO L74 IsIncluded]: Start isIncluded. First operand 113 states. Second operand has 108 states, 103 states have (on average 1.0485436893203883) internal successors, (108), 103 states have internal predecessors, (108), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:40,715 INFO L87 Difference]: Start difference. First operand 113 states. Second operand has 108 states, 103 states have (on average 1.0485436893203883) internal successors, (108), 103 states have internal predecessors, (108), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:40,716 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:40,716 INFO L93 Difference]: Finished difference Result 113 states and 117 transitions. [2022-04-28 03:52:40,716 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 117 transitions. [2022-04-28 03:52:40,716 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:52:40,716 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:52:40,716 INFO L74 IsIncluded]: Start isIncluded. First operand has 108 states, 103 states have (on average 1.0485436893203883) internal successors, (108), 103 states have internal predecessors, (108), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 113 states. [2022-04-28 03:52:40,716 INFO L87 Difference]: Start difference. First operand has 108 states, 103 states have (on average 1.0485436893203883) internal successors, (108), 103 states have internal predecessors, (108), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 113 states. [2022-04-28 03:52:40,718 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:40,718 INFO L93 Difference]: Finished difference Result 113 states and 117 transitions. [2022-04-28 03:52:40,718 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 117 transitions. [2022-04-28 03:52:40,718 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:52:40,718 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:52:40,718 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:52:40,718 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:52:40,718 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 103 states have (on average 1.0485436893203883) internal successors, (108), 103 states have internal predecessors, (108), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:40,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 112 transitions. [2022-04-28 03:52:40,720 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 112 transitions. Word has length 101 [2022-04-28 03:52:40,720 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:52:40,720 INFO L495 AbstractCegarLoop]: Abstraction has 108 states and 112 transitions. [2022-04-28 03:52:40,720 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 27 states have (on average 3.5925925925925926) internal successors, (97), 26 states have internal predecessors, (97), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:40,720 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 108 states and 112 transitions. [2022-04-28 03:52:40,902 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 112 edges. 112 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:40,902 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 112 transitions. [2022-04-28 03:52:40,903 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2022-04-28 03:52:40,903 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:52:40,903 INFO L195 NwaCegarLoop]: trace histogram [24, 23, 23, 22, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:52:40,920 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-04-28 03:52:41,119 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-04-28 03:52:41,120 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:52:41,120 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:52:41,120 INFO L85 PathProgramCache]: Analyzing trace with hash -1337650278, now seen corresponding path program 21 times [2022-04-28 03:52:41,120 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:52:41,120 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [450908841] [2022-04-28 03:52:41,216 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:41,502 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:41,734 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:41,735 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:52:41,740 INFO L85 PathProgramCache]: Analyzing trace with hash -567103001, now seen corresponding path program 1 times [2022-04-28 03:52:41,740 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:52:41,740 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1174401645] [2022-04-28 03:52:41,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:52:41,740 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:52:41,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:41,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:52:41,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:41,784 INFO L290 TraceCheckUtils]: 0: Hoare triple {13228#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {13220#true} is VALID [2022-04-28 03:52:41,784 INFO L290 TraceCheckUtils]: 1: Hoare triple {13220#true} assume true; {13220#true} is VALID [2022-04-28 03:52:41,784 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13220#true} {13220#true} #48#return; {13220#true} is VALID [2022-04-28 03:52:41,785 INFO L272 TraceCheckUtils]: 0: Hoare triple {13220#true} call ULTIMATE.init(); {13228#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:52:41,785 INFO L290 TraceCheckUtils]: 1: Hoare triple {13228#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {13220#true} is VALID [2022-04-28 03:52:41,785 INFO L290 TraceCheckUtils]: 2: Hoare triple {13220#true} assume true; {13220#true} is VALID [2022-04-28 03:52:41,785 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {13220#true} {13220#true} #48#return; {13220#true} is VALID [2022-04-28 03:52:41,785 INFO L272 TraceCheckUtils]: 4: Hoare triple {13220#true} call #t~ret7 := main(); {13220#true} is VALID [2022-04-28 03:52:41,785 INFO L290 TraceCheckUtils]: 5: Hoare triple {13220#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {13225#(= main_~x~0 0)} is VALID [2022-04-28 03:52:41,786 INFO L290 TraceCheckUtils]: 6: Hoare triple {13225#(= main_~x~0 0)} [180] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_156| |v_main_#t~post4_155|)) (.cse1 (= v_main_~x~0_791 v_main_~x~0_790))) (or (and (< v_main_~x~0_790 500001) (< v_main_~x~0_791 v_main_~x~0_790)) (and .cse0 (<= 500000 v_main_~x~0_791) .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_791, main_#t~post4=|v_main_#t~post4_156|} OutVars{main_~x~0=v_main_~x~0_790, main_#t~post4=|v_main_#t~post4_155|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {13226#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:41,786 INFO L290 TraceCheckUtils]: 7: Hoare triple {13226#(<= main_~x~0 500000)} [181] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {13226#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:41,787 INFO L290 TraceCheckUtils]: 8: Hoare triple {13226#(<= main_~x~0 500000)} [182] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~y~0_565 v_main_~y~0_564)) (.cse2 (= v_main_~x~0_793 v_main_~x~0_792)) (.cse0 (<= 750000 v_main_~x~0_793)) (.cse3 (= |v_main_#t~post6_272| |v_main_#t~post6_270|))) (or (and (< v_main_~y~0_565 v_main_~y~0_564) (< v_main_~y~0_564 (+ (div (+ 999999 (* v_main_~x~0_793 (- 1))) 2) v_main_~y~0_565 2)) (= (+ v_main_~x~0_793 (* v_main_~y~0_564 2)) (+ (* v_main_~y~0_565 2) v_main_~x~0_792)) .cse0) (and .cse1 .cse2 .cse3) (and .cse1 .cse2 (or (not .cse0) (not (< v_main_~x~0_793 1000000))) .cse3))) InVars {main_~y~0=v_main_~y~0_565, main_~x~0=v_main_~x~0_793, main_#t~post6=|v_main_#t~post6_272|} OutVars{main_~y~0=v_main_~y~0_564, main_~x~0=v_main_~x~0_792, main_#t~post6=|v_main_#t~post6_270|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {13226#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:41,787 INFO L290 TraceCheckUtils]: 9: Hoare triple {13226#(<= main_~x~0 500000)} [183] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {13226#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:41,788 INFO L290 TraceCheckUtils]: 10: Hoare triple {13226#(<= main_~x~0 500000)} [184] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_275| |v_main_#t~post6_271|)) (.cse1 (= v_main_~x~0_795 v_main_~x~0_794)) (.cse2 (= v_main_~y~0_567 v_main_~y~0_566)) (.cse5 (<= 500000 v_main_~x~0_795)) (.cse3 (= |v_main_#t~post5_131| |v_main_#t~post5_130|))) (or (and .cse0 .cse1 .cse2 .cse3) (let ((.cse4 (+ v_main_~x~0_795 v_main_~y~0_566))) (and (= .cse4 (+ v_main_~x~0_794 v_main_~y~0_567)) (< v_main_~y~0_567 v_main_~y~0_566) (< .cse4 (+ 750001 v_main_~y~0_567)) .cse5)) (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_795 750000)) (not .cse5)) .cse3))) InVars {main_~y~0=v_main_~y~0_567, main_#t~post5=|v_main_#t~post5_131|, main_~x~0=v_main_~x~0_795, main_#t~post6=|v_main_#t~post6_275|} OutVars{main_~y~0=v_main_~y~0_566, main_#t~post5=|v_main_#t~post5_130|, main_~x~0=v_main_~x~0_794, main_#t~post6=|v_main_#t~post6_271|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {13227#(<= main_~x~0 750000)} is VALID [2022-04-28 03:52:41,788 INFO L290 TraceCheckUtils]: 11: Hoare triple {13227#(<= main_~x~0 750000)} [179] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {13221#false} is VALID [2022-04-28 03:52:41,788 INFO L272 TraceCheckUtils]: 12: Hoare triple {13221#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {13221#false} is VALID [2022-04-28 03:52:41,788 INFO L290 TraceCheckUtils]: 13: Hoare triple {13221#false} ~cond := #in~cond; {13221#false} is VALID [2022-04-28 03:52:41,789 INFO L290 TraceCheckUtils]: 14: Hoare triple {13221#false} assume 0 == ~cond; {13221#false} is VALID [2022-04-28 03:52:41,789 INFO L290 TraceCheckUtils]: 15: Hoare triple {13221#false} assume !false; {13221#false} is VALID [2022-04-28 03:52:41,789 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:52:41,789 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:52:41,789 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1174401645] [2022-04-28 03:52:41,789 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1174401645] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:52:41,789 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [299564507] [2022-04-28 03:52:41,789 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:52:41,789 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:52:41,789 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:52:41,791 INFO L229 MonitoredProcess]: Starting monitored process 23 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:52:41,791 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-04-28 03:52:41,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:41,815 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 9 conjunts are in the unsatisfiable core [2022-04-28 03:52:41,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:41,823 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:52:42,125 INFO L272 TraceCheckUtils]: 0: Hoare triple {13220#true} call ULTIMATE.init(); {13220#true} is VALID [2022-04-28 03:52:42,125 INFO L290 TraceCheckUtils]: 1: Hoare triple {13220#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {13220#true} is VALID [2022-04-28 03:52:42,125 INFO L290 TraceCheckUtils]: 2: Hoare triple {13220#true} assume true; {13220#true} is VALID [2022-04-28 03:52:42,125 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {13220#true} {13220#true} #48#return; {13220#true} is VALID [2022-04-28 03:52:42,125 INFO L272 TraceCheckUtils]: 4: Hoare triple {13220#true} call #t~ret7 := main(); {13220#true} is VALID [2022-04-28 03:52:42,125 INFO L290 TraceCheckUtils]: 5: Hoare triple {13220#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {13225#(= main_~x~0 0)} is VALID [2022-04-28 03:52:42,126 INFO L290 TraceCheckUtils]: 6: Hoare triple {13225#(= main_~x~0 0)} [180] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_156| |v_main_#t~post4_155|)) (.cse1 (= v_main_~x~0_791 v_main_~x~0_790))) (or (and (< v_main_~x~0_790 500001) (< v_main_~x~0_791 v_main_~x~0_790)) (and .cse0 (<= 500000 v_main_~x~0_791) .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_791, main_#t~post4=|v_main_#t~post4_156|} OutVars{main_~x~0=v_main_~x~0_790, main_#t~post4=|v_main_#t~post4_155|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {13250#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:52:42,126 INFO L290 TraceCheckUtils]: 7: Hoare triple {13250#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [181] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {13250#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:52:42,127 INFO L290 TraceCheckUtils]: 8: Hoare triple {13250#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [182] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~y~0_565 v_main_~y~0_564)) (.cse2 (= v_main_~x~0_793 v_main_~x~0_792)) (.cse0 (<= 750000 v_main_~x~0_793)) (.cse3 (= |v_main_#t~post6_272| |v_main_#t~post6_270|))) (or (and (< v_main_~y~0_565 v_main_~y~0_564) (< v_main_~y~0_564 (+ (div (+ 999999 (* v_main_~x~0_793 (- 1))) 2) v_main_~y~0_565 2)) (= (+ v_main_~x~0_793 (* v_main_~y~0_564 2)) (+ (* v_main_~y~0_565 2) v_main_~x~0_792)) .cse0) (and .cse1 .cse2 .cse3) (and .cse1 .cse2 (or (not .cse0) (not (< v_main_~x~0_793 1000000))) .cse3))) InVars {main_~y~0=v_main_~y~0_565, main_~x~0=v_main_~x~0_793, main_#t~post6=|v_main_#t~post6_272|} OutVars{main_~y~0=v_main_~y~0_564, main_~x~0=v_main_~x~0_792, main_#t~post6=|v_main_#t~post6_270|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {13250#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:52:42,128 INFO L290 TraceCheckUtils]: 9: Hoare triple {13250#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [183] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {13250#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:52:42,129 INFO L290 TraceCheckUtils]: 10: Hoare triple {13250#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [184] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_275| |v_main_#t~post6_271|)) (.cse1 (= v_main_~x~0_795 v_main_~x~0_794)) (.cse2 (= v_main_~y~0_567 v_main_~y~0_566)) (.cse5 (<= 500000 v_main_~x~0_795)) (.cse3 (= |v_main_#t~post5_131| |v_main_#t~post5_130|))) (or (and .cse0 .cse1 .cse2 .cse3) (let ((.cse4 (+ v_main_~x~0_795 v_main_~y~0_566))) (and (= .cse4 (+ v_main_~x~0_794 v_main_~y~0_567)) (< v_main_~y~0_567 v_main_~y~0_566) (< .cse4 (+ 750001 v_main_~y~0_567)) .cse5)) (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_795 750000)) (not .cse5)) .cse3))) InVars {main_~y~0=v_main_~y~0_567, main_#t~post5=|v_main_#t~post5_131|, main_~x~0=v_main_~x~0_795, main_#t~post6=|v_main_#t~post6_275|} OutVars{main_~y~0=v_main_~y~0_566, main_#t~post5=|v_main_#t~post5_130|, main_~x~0=v_main_~x~0_794, main_#t~post6=|v_main_#t~post6_271|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {13263#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} is VALID [2022-04-28 03:52:42,130 INFO L290 TraceCheckUtils]: 11: Hoare triple {13263#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} [179] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {13221#false} is VALID [2022-04-28 03:52:42,130 INFO L272 TraceCheckUtils]: 12: Hoare triple {13221#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {13221#false} is VALID [2022-04-28 03:52:42,130 INFO L290 TraceCheckUtils]: 13: Hoare triple {13221#false} ~cond := #in~cond; {13221#false} is VALID [2022-04-28 03:52:42,130 INFO L290 TraceCheckUtils]: 14: Hoare triple {13221#false} assume 0 == ~cond; {13221#false} is VALID [2022-04-28 03:52:42,130 INFO L290 TraceCheckUtils]: 15: Hoare triple {13221#false} assume !false; {13221#false} is VALID [2022-04-28 03:52:42,130 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:52:42,130 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:52:42,601 INFO L290 TraceCheckUtils]: 15: Hoare triple {13221#false} assume !false; {13221#false} is VALID [2022-04-28 03:52:42,602 INFO L290 TraceCheckUtils]: 14: Hoare triple {13282#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {13221#false} is VALID [2022-04-28 03:52:42,602 INFO L290 TraceCheckUtils]: 13: Hoare triple {13286#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {13282#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:52:42,602 INFO L272 TraceCheckUtils]: 12: Hoare triple {13290#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {13286#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:52:42,603 INFO L290 TraceCheckUtils]: 11: Hoare triple {13294#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [179] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {13290#(= main_~x~0 1000000)} is VALID [2022-04-28 03:52:42,604 INFO L290 TraceCheckUtils]: 10: Hoare triple {13294#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [184] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_275| |v_main_#t~post6_271|)) (.cse1 (= v_main_~x~0_795 v_main_~x~0_794)) (.cse2 (= v_main_~y~0_567 v_main_~y~0_566)) (.cse5 (<= 500000 v_main_~x~0_795)) (.cse3 (= |v_main_#t~post5_131| |v_main_#t~post5_130|))) (or (and .cse0 .cse1 .cse2 .cse3) (let ((.cse4 (+ v_main_~x~0_795 v_main_~y~0_566))) (and (= .cse4 (+ v_main_~x~0_794 v_main_~y~0_567)) (< v_main_~y~0_567 v_main_~y~0_566) (< .cse4 (+ 750001 v_main_~y~0_567)) .cse5)) (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_795 750000)) (not .cse5)) .cse3))) InVars {main_~y~0=v_main_~y~0_567, main_#t~post5=|v_main_#t~post5_131|, main_~x~0=v_main_~x~0_795, main_#t~post6=|v_main_#t~post6_275|} OutVars{main_~y~0=v_main_~y~0_566, main_#t~post5=|v_main_#t~post5_130|, main_~x~0=v_main_~x~0_794, main_#t~post6=|v_main_#t~post6_271|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {13294#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:42,604 INFO L290 TraceCheckUtils]: 9: Hoare triple {13294#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [183] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {13294#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:42,605 INFO L290 TraceCheckUtils]: 8: Hoare triple {13304#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [182] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~y~0_565 v_main_~y~0_564)) (.cse2 (= v_main_~x~0_793 v_main_~x~0_792)) (.cse0 (<= 750000 v_main_~x~0_793)) (.cse3 (= |v_main_#t~post6_272| |v_main_#t~post6_270|))) (or (and (< v_main_~y~0_565 v_main_~y~0_564) (< v_main_~y~0_564 (+ (div (+ 999999 (* v_main_~x~0_793 (- 1))) 2) v_main_~y~0_565 2)) (= (+ v_main_~x~0_793 (* v_main_~y~0_564 2)) (+ (* v_main_~y~0_565 2) v_main_~x~0_792)) .cse0) (and .cse1 .cse2 .cse3) (and .cse1 .cse2 (or (not .cse0) (not (< v_main_~x~0_793 1000000))) .cse3))) InVars {main_~y~0=v_main_~y~0_565, main_~x~0=v_main_~x~0_793, main_#t~post6=|v_main_#t~post6_272|} OutVars{main_~y~0=v_main_~y~0_564, main_~x~0=v_main_~x~0_792, main_#t~post6=|v_main_#t~post6_270|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {13294#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:42,618 INFO L290 TraceCheckUtils]: 7: Hoare triple {13304#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [181] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {13304#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:52:42,619 INFO L290 TraceCheckUtils]: 6: Hoare triple {13304#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [180] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_156| |v_main_#t~post4_155|)) (.cse1 (= v_main_~x~0_791 v_main_~x~0_790))) (or (and (< v_main_~x~0_790 500001) (< v_main_~x~0_791 v_main_~x~0_790)) (and .cse0 (<= 500000 v_main_~x~0_791) .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_791, main_#t~post4=|v_main_#t~post4_156|} OutVars{main_~x~0=v_main_~x~0_790, main_#t~post4=|v_main_#t~post4_155|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {13304#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:52:42,620 INFO L290 TraceCheckUtils]: 5: Hoare triple {13220#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {13304#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:52:42,620 INFO L272 TraceCheckUtils]: 4: Hoare triple {13220#true} call #t~ret7 := main(); {13220#true} is VALID [2022-04-28 03:52:42,620 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {13220#true} {13220#true} #48#return; {13220#true} is VALID [2022-04-28 03:52:42,620 INFO L290 TraceCheckUtils]: 2: Hoare triple {13220#true} assume true; {13220#true} is VALID [2022-04-28 03:52:42,620 INFO L290 TraceCheckUtils]: 1: Hoare triple {13220#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {13220#true} is VALID [2022-04-28 03:52:42,620 INFO L272 TraceCheckUtils]: 0: Hoare triple {13220#true} call ULTIMATE.init(); {13220#true} is VALID [2022-04-28 03:52:42,620 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:52:42,620 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [299564507] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:52:42,620 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:52:42,620 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:52:43,408 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:52:43,408 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [450908841] [2022-04-28 03:52:43,408 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [450908841] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:52:43,408 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:52:43,408 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [28] imperfect sequences [] total 28 [2022-04-28 03:52:43,408 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2072567761] [2022-04-28 03:52:43,408 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:52:43,410 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 3.607142857142857) internal successors, (101), 27 states have internal predecessors, (101), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 105 [2022-04-28 03:52:43,410 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:52:43,410 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 28 states, 28 states have (on average 3.607142857142857) internal successors, (101), 27 states have internal predecessors, (101), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:43,483 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 105 edges. 105 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:43,483 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-04-28 03:52:43,483 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:52:43,483 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-04-28 03:52:43,484 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=194, Invalid=1138, Unknown=0, NotChecked=0, Total=1332 [2022-04-28 03:52:43,484 INFO L87 Difference]: Start difference. First operand 108 states and 112 transitions. Second operand has 28 states, 28 states have (on average 3.607142857142857) internal successors, (101), 27 states have internal predecessors, (101), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:48,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:48,022 INFO L93 Difference]: Finished difference Result 135 states and 144 transitions. [2022-04-28 03:52:48,022 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-04-28 03:52:48,022 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 3.607142857142857) internal successors, (101), 27 states have internal predecessors, (101), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 105 [2022-04-28 03:52:48,022 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:52:48,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 28 states have (on average 3.607142857142857) internal successors, (101), 27 states have internal predecessors, (101), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:48,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 124 transitions. [2022-04-28 03:52:48,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 28 states have (on average 3.607142857142857) internal successors, (101), 27 states have internal predecessors, (101), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:48,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 124 transitions. [2022-04-28 03:52:48,025 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 28 states and 124 transitions. [2022-04-28 03:52:48,131 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 124 edges. 124 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:48,132 INFO L225 Difference]: With dead ends: 135 [2022-04-28 03:52:48,132 INFO L226 Difference]: Without dead ends: 117 [2022-04-28 03:52:48,133 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 102 SyntacticMatches, 1 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 665 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=403, Invalid=3379, Unknown=0, NotChecked=0, Total=3782 [2022-04-28 03:52:48,133 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 81 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 2405 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 156 SdHoareTripleChecker+Invalid, 2433 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 2405 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-04-28 03:52:48,133 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 156 Invalid, 2433 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 2405 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-04-28 03:52:48,133 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2022-04-28 03:52:49,109 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 112. [2022-04-28 03:52:49,110 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:52:49,110 INFO L82 GeneralOperation]: Start isEquivalent. First operand 117 states. Second operand has 112 states, 107 states have (on average 1.0467289719626167) internal successors, (112), 107 states have internal predecessors, (112), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:49,110 INFO L74 IsIncluded]: Start isIncluded. First operand 117 states. Second operand has 112 states, 107 states have (on average 1.0467289719626167) internal successors, (112), 107 states have internal predecessors, (112), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:49,110 INFO L87 Difference]: Start difference. First operand 117 states. Second operand has 112 states, 107 states have (on average 1.0467289719626167) internal successors, (112), 107 states have internal predecessors, (112), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:49,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:49,112 INFO L93 Difference]: Finished difference Result 117 states and 121 transitions. [2022-04-28 03:52:49,112 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 121 transitions. [2022-04-28 03:52:49,112 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:52:49,112 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:52:49,112 INFO L74 IsIncluded]: Start isIncluded. First operand has 112 states, 107 states have (on average 1.0467289719626167) internal successors, (112), 107 states have internal predecessors, (112), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 117 states. [2022-04-28 03:52:49,112 INFO L87 Difference]: Start difference. First operand has 112 states, 107 states have (on average 1.0467289719626167) internal successors, (112), 107 states have internal predecessors, (112), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 117 states. [2022-04-28 03:52:49,114 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:52:49,114 INFO L93 Difference]: Finished difference Result 117 states and 121 transitions. [2022-04-28 03:52:49,114 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 121 transitions. [2022-04-28 03:52:49,114 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:52:49,114 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:52:49,114 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:52:49,114 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:52:49,114 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 112 states, 107 states have (on average 1.0467289719626167) internal successors, (112), 107 states have internal predecessors, (112), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:49,116 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 116 transitions. [2022-04-28 03:52:49,116 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 116 transitions. Word has length 105 [2022-04-28 03:52:49,116 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:52:49,116 INFO L495 AbstractCegarLoop]: Abstraction has 112 states and 116 transitions. [2022-04-28 03:52:49,116 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 3.607142857142857) internal successors, (101), 27 states have internal predecessors, (101), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:49,116 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 112 states and 116 transitions. [2022-04-28 03:52:49,301 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 116 edges. 116 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:49,301 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 116 transitions. [2022-04-28 03:52:49,301 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2022-04-28 03:52:49,301 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:52:49,301 INFO L195 NwaCegarLoop]: trace histogram [25, 24, 24, 23, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:52:49,317 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-04-28 03:52:49,502 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23,23 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:52:49,502 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:52:49,502 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:52:49,502 INFO L85 PathProgramCache]: Analyzing trace with hash -953053711, now seen corresponding path program 22 times [2022-04-28 03:52:49,502 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:52:49,502 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [692587058] [2022-04-28 03:52:53,568 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:52:53,616 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:53,867 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:54,107 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:52:54,108 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:52:54,111 INFO L85 PathProgramCache]: Analyzing trace with hash -926677977, now seen corresponding path program 1 times [2022-04-28 03:52:54,111 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:52:54,111 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [520927305] [2022-04-28 03:52:54,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:52:54,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:52:54,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:54,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:52:54,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:54,163 INFO L290 TraceCheckUtils]: 0: Hoare triple {14141#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {14133#true} is VALID [2022-04-28 03:52:54,163 INFO L290 TraceCheckUtils]: 1: Hoare triple {14133#true} assume true; {14133#true} is VALID [2022-04-28 03:52:54,163 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14133#true} {14133#true} #48#return; {14133#true} is VALID [2022-04-28 03:52:54,165 INFO L272 TraceCheckUtils]: 0: Hoare triple {14133#true} call ULTIMATE.init(); {14141#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:52:54,165 INFO L290 TraceCheckUtils]: 1: Hoare triple {14141#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {14133#true} is VALID [2022-04-28 03:52:54,165 INFO L290 TraceCheckUtils]: 2: Hoare triple {14133#true} assume true; {14133#true} is VALID [2022-04-28 03:52:54,165 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14133#true} {14133#true} #48#return; {14133#true} is VALID [2022-04-28 03:52:54,165 INFO L272 TraceCheckUtils]: 4: Hoare triple {14133#true} call #t~ret7 := main(); {14133#true} is VALID [2022-04-28 03:52:54,165 INFO L290 TraceCheckUtils]: 5: Hoare triple {14133#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {14138#(= main_~x~0 0)} is VALID [2022-04-28 03:52:54,166 INFO L290 TraceCheckUtils]: 6: Hoare triple {14138#(= main_~x~0 0)} [186] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_839 v_main_~x~0_838)) (.cse1 (= |v_main_#t~post4_163| |v_main_#t~post4_162|))) (or (and .cse0 .cse1) (and (not (< v_main_~x~0_839 500000)) .cse0 .cse1) (and (< v_main_~x~0_839 v_main_~x~0_838) (< v_main_~x~0_838 500001)))) InVars {main_~x~0=v_main_~x~0_839, main_#t~post4=|v_main_#t~post4_163|} OutVars{main_~x~0=v_main_~x~0_838, main_#t~post4=|v_main_#t~post4_162|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {14139#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:54,166 INFO L290 TraceCheckUtils]: 7: Hoare triple {14139#(<= main_~x~0 500000)} [187] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {14139#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:54,167 INFO L290 TraceCheckUtils]: 8: Hoare triple {14139#(<= main_~x~0 500000)} [188] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~y~0_603 v_main_~y~0_602)) (.cse2 (= |v_main_#t~post6_285| |v_main_#t~post6_283|)) (.cse3 (= v_main_~x~0_841 v_main_~x~0_840)) (.cse0 (<= 750000 v_main_~x~0_841))) (or (and (< v_main_~y~0_603 v_main_~y~0_602) (< v_main_~y~0_602 (+ (div (+ 999999 (* v_main_~x~0_841 (- 1))) 2) v_main_~y~0_603 2)) .cse0 (= (+ v_main_~x~0_840 (* v_main_~y~0_603 2)) (+ v_main_~x~0_841 (* v_main_~y~0_602 2)))) (and .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_841 1000000)))))) InVars {main_~y~0=v_main_~y~0_603, main_~x~0=v_main_~x~0_841, main_#t~post6=|v_main_#t~post6_285|} OutVars{main_~y~0=v_main_~y~0_602, main_~x~0=v_main_~x~0_840, main_#t~post6=|v_main_#t~post6_283|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {14139#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:54,168 INFO L290 TraceCheckUtils]: 9: Hoare triple {14139#(<= main_~x~0 500000)} [189] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {14139#(<= main_~x~0 500000)} is VALID [2022-04-28 03:52:54,169 INFO L290 TraceCheckUtils]: 10: Hoare triple {14139#(<= main_~x~0 500000)} [190] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post5_137| |v_main_#t~post5_136|)) (.cse1 (= v_main_~y~0_605 v_main_~y~0_604)) (.cse2 (= |v_main_#t~post6_288| |v_main_#t~post6_284|)) (.cse3 (= v_main_~x~0_843 v_main_~x~0_842)) (.cse4 (<= 500000 v_main_~x~0_843))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 (or (not (< v_main_~x~0_843 750000)) (not .cse4)) .cse2 .cse3) (and (< v_main_~x~0_842 750001) .cse4 (= (+ v_main_~x~0_843 v_main_~y~0_604) (+ v_main_~x~0_842 v_main_~y~0_605)) (< v_main_~x~0_843 v_main_~x~0_842)))) InVars {main_~y~0=v_main_~y~0_605, main_#t~post5=|v_main_#t~post5_137|, main_~x~0=v_main_~x~0_843, main_#t~post6=|v_main_#t~post6_288|} OutVars{main_~y~0=v_main_~y~0_604, main_#t~post5=|v_main_#t~post5_136|, main_~x~0=v_main_~x~0_842, main_#t~post6=|v_main_#t~post6_284|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {14140#(<= main_~x~0 750000)} is VALID [2022-04-28 03:52:54,169 INFO L290 TraceCheckUtils]: 11: Hoare triple {14140#(<= main_~x~0 750000)} [185] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {14134#false} is VALID [2022-04-28 03:52:54,169 INFO L272 TraceCheckUtils]: 12: Hoare triple {14134#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {14134#false} is VALID [2022-04-28 03:52:54,169 INFO L290 TraceCheckUtils]: 13: Hoare triple {14134#false} ~cond := #in~cond; {14134#false} is VALID [2022-04-28 03:52:54,169 INFO L290 TraceCheckUtils]: 14: Hoare triple {14134#false} assume 0 == ~cond; {14134#false} is VALID [2022-04-28 03:52:54,169 INFO L290 TraceCheckUtils]: 15: Hoare triple {14134#false} assume !false; {14134#false} is VALID [2022-04-28 03:52:54,170 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:52:54,170 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:52:54,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [520927305] [2022-04-28 03:52:54,170 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [520927305] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:52:54,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1774745397] [2022-04-28 03:52:54,170 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:52:54,170 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:52:54,170 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:52:54,172 INFO L229 MonitoredProcess]: Starting monitored process 24 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:52:54,183 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-04-28 03:52:54,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:54,209 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 9 conjunts are in the unsatisfiable core [2022-04-28 03:52:54,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:52:54,218 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:52:54,515 INFO L272 TraceCheckUtils]: 0: Hoare triple {14133#true} call ULTIMATE.init(); {14133#true} is VALID [2022-04-28 03:52:54,515 INFO L290 TraceCheckUtils]: 1: Hoare triple {14133#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {14133#true} is VALID [2022-04-28 03:52:54,515 INFO L290 TraceCheckUtils]: 2: Hoare triple {14133#true} assume true; {14133#true} is VALID [2022-04-28 03:52:54,515 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14133#true} {14133#true} #48#return; {14133#true} is VALID [2022-04-28 03:52:54,515 INFO L272 TraceCheckUtils]: 4: Hoare triple {14133#true} call #t~ret7 := main(); {14133#true} is VALID [2022-04-28 03:52:54,516 INFO L290 TraceCheckUtils]: 5: Hoare triple {14133#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {14138#(= main_~x~0 0)} is VALID [2022-04-28 03:52:54,516 INFO L290 TraceCheckUtils]: 6: Hoare triple {14138#(= main_~x~0 0)} [186] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_839 v_main_~x~0_838)) (.cse1 (= |v_main_#t~post4_163| |v_main_#t~post4_162|))) (or (and .cse0 .cse1) (and (not (< v_main_~x~0_839 500000)) .cse0 .cse1) (and (< v_main_~x~0_839 v_main_~x~0_838) (< v_main_~x~0_838 500001)))) InVars {main_~x~0=v_main_~x~0_839, main_#t~post4=|v_main_#t~post4_163|} OutVars{main_~x~0=v_main_~x~0_838, main_#t~post4=|v_main_#t~post4_162|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {14163#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:52:54,517 INFO L290 TraceCheckUtils]: 7: Hoare triple {14163#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [187] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {14163#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:52:54,518 INFO L290 TraceCheckUtils]: 8: Hoare triple {14163#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [188] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~y~0_603 v_main_~y~0_602)) (.cse2 (= |v_main_#t~post6_285| |v_main_#t~post6_283|)) (.cse3 (= v_main_~x~0_841 v_main_~x~0_840)) (.cse0 (<= 750000 v_main_~x~0_841))) (or (and (< v_main_~y~0_603 v_main_~y~0_602) (< v_main_~y~0_602 (+ (div (+ 999999 (* v_main_~x~0_841 (- 1))) 2) v_main_~y~0_603 2)) .cse0 (= (+ v_main_~x~0_840 (* v_main_~y~0_603 2)) (+ v_main_~x~0_841 (* v_main_~y~0_602 2)))) (and .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_841 1000000)))))) InVars {main_~y~0=v_main_~y~0_603, main_~x~0=v_main_~x~0_841, main_#t~post6=|v_main_#t~post6_285|} OutVars{main_~y~0=v_main_~y~0_602, main_~x~0=v_main_~x~0_840, main_#t~post6=|v_main_#t~post6_283|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {14163#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:52:54,518 INFO L290 TraceCheckUtils]: 9: Hoare triple {14163#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [189] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {14163#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:52:54,519 INFO L290 TraceCheckUtils]: 10: Hoare triple {14163#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [190] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post5_137| |v_main_#t~post5_136|)) (.cse1 (= v_main_~y~0_605 v_main_~y~0_604)) (.cse2 (= |v_main_#t~post6_288| |v_main_#t~post6_284|)) (.cse3 (= v_main_~x~0_843 v_main_~x~0_842)) (.cse4 (<= 500000 v_main_~x~0_843))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 (or (not (< v_main_~x~0_843 750000)) (not .cse4)) .cse2 .cse3) (and (< v_main_~x~0_842 750001) .cse4 (= (+ v_main_~x~0_843 v_main_~y~0_604) (+ v_main_~x~0_842 v_main_~y~0_605)) (< v_main_~x~0_843 v_main_~x~0_842)))) InVars {main_~y~0=v_main_~y~0_605, main_#t~post5=|v_main_#t~post5_137|, main_~x~0=v_main_~x~0_843, main_#t~post6=|v_main_#t~post6_288|} OutVars{main_~y~0=v_main_~y~0_604, main_#t~post5=|v_main_#t~post5_136|, main_~x~0=v_main_~x~0_842, main_#t~post6=|v_main_#t~post6_284|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {14176#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} is VALID [2022-04-28 03:52:54,520 INFO L290 TraceCheckUtils]: 11: Hoare triple {14176#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} [185] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {14134#false} is VALID [2022-04-28 03:52:54,520 INFO L272 TraceCheckUtils]: 12: Hoare triple {14134#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {14134#false} is VALID [2022-04-28 03:52:54,520 INFO L290 TraceCheckUtils]: 13: Hoare triple {14134#false} ~cond := #in~cond; {14134#false} is VALID [2022-04-28 03:52:54,520 INFO L290 TraceCheckUtils]: 14: Hoare triple {14134#false} assume 0 == ~cond; {14134#false} is VALID [2022-04-28 03:52:54,520 INFO L290 TraceCheckUtils]: 15: Hoare triple {14134#false} assume !false; {14134#false} is VALID [2022-04-28 03:52:54,520 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:52:54,520 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:52:54,992 INFO L290 TraceCheckUtils]: 15: Hoare triple {14134#false} assume !false; {14134#false} is VALID [2022-04-28 03:52:54,992 INFO L290 TraceCheckUtils]: 14: Hoare triple {14195#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {14134#false} is VALID [2022-04-28 03:52:54,992 INFO L290 TraceCheckUtils]: 13: Hoare triple {14199#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {14195#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:52:54,993 INFO L272 TraceCheckUtils]: 12: Hoare triple {14203#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {14199#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:52:54,993 INFO L290 TraceCheckUtils]: 11: Hoare triple {14207#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [185] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {14203#(= main_~x~0 1000000)} is VALID [2022-04-28 03:52:54,994 INFO L290 TraceCheckUtils]: 10: Hoare triple {14207#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [190] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post5_137| |v_main_#t~post5_136|)) (.cse1 (= v_main_~y~0_605 v_main_~y~0_604)) (.cse2 (= |v_main_#t~post6_288| |v_main_#t~post6_284|)) (.cse3 (= v_main_~x~0_843 v_main_~x~0_842)) (.cse4 (<= 500000 v_main_~x~0_843))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 (or (not (< v_main_~x~0_843 750000)) (not .cse4)) .cse2 .cse3) (and (< v_main_~x~0_842 750001) .cse4 (= (+ v_main_~x~0_843 v_main_~y~0_604) (+ v_main_~x~0_842 v_main_~y~0_605)) (< v_main_~x~0_843 v_main_~x~0_842)))) InVars {main_~y~0=v_main_~y~0_605, main_#t~post5=|v_main_#t~post5_137|, main_~x~0=v_main_~x~0_843, main_#t~post6=|v_main_#t~post6_288|} OutVars{main_~y~0=v_main_~y~0_604, main_#t~post5=|v_main_#t~post5_136|, main_~x~0=v_main_~x~0_842, main_#t~post6=|v_main_#t~post6_284|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {14207#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:54,994 INFO L290 TraceCheckUtils]: 9: Hoare triple {14207#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [189] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {14207#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:54,995 INFO L290 TraceCheckUtils]: 8: Hoare triple {14217#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [188] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~y~0_603 v_main_~y~0_602)) (.cse2 (= |v_main_#t~post6_285| |v_main_#t~post6_283|)) (.cse3 (= v_main_~x~0_841 v_main_~x~0_840)) (.cse0 (<= 750000 v_main_~x~0_841))) (or (and (< v_main_~y~0_603 v_main_~y~0_602) (< v_main_~y~0_602 (+ (div (+ 999999 (* v_main_~x~0_841 (- 1))) 2) v_main_~y~0_603 2)) .cse0 (= (+ v_main_~x~0_840 (* v_main_~y~0_603 2)) (+ v_main_~x~0_841 (* v_main_~y~0_602 2)))) (and .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_841 1000000)))))) InVars {main_~y~0=v_main_~y~0_603, main_~x~0=v_main_~x~0_841, main_#t~post6=|v_main_#t~post6_285|} OutVars{main_~y~0=v_main_~y~0_602, main_~x~0=v_main_~x~0_840, main_#t~post6=|v_main_#t~post6_283|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {14207#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:52:54,996 INFO L290 TraceCheckUtils]: 7: Hoare triple {14217#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [187] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {14217#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:52:54,997 INFO L290 TraceCheckUtils]: 6: Hoare triple {14217#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [186] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_839 v_main_~x~0_838)) (.cse1 (= |v_main_#t~post4_163| |v_main_#t~post4_162|))) (or (and .cse0 .cse1) (and (not (< v_main_~x~0_839 500000)) .cse0 .cse1) (and (< v_main_~x~0_839 v_main_~x~0_838) (< v_main_~x~0_838 500001)))) InVars {main_~x~0=v_main_~x~0_839, main_#t~post4=|v_main_#t~post4_163|} OutVars{main_~x~0=v_main_~x~0_838, main_#t~post4=|v_main_#t~post4_162|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {14217#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:52:54,997 INFO L290 TraceCheckUtils]: 5: Hoare triple {14133#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {14217#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:52:54,997 INFO L272 TraceCheckUtils]: 4: Hoare triple {14133#true} call #t~ret7 := main(); {14133#true} is VALID [2022-04-28 03:52:54,998 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {14133#true} {14133#true} #48#return; {14133#true} is VALID [2022-04-28 03:52:54,998 INFO L290 TraceCheckUtils]: 2: Hoare triple {14133#true} assume true; {14133#true} is VALID [2022-04-28 03:52:54,998 INFO L290 TraceCheckUtils]: 1: Hoare triple {14133#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {14133#true} is VALID [2022-04-28 03:52:54,998 INFO L272 TraceCheckUtils]: 0: Hoare triple {14133#true} call ULTIMATE.init(); {14133#true} is VALID [2022-04-28 03:52:54,998 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:52:54,998 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1774745397] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:52:54,998 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:52:54,998 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:52:55,811 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:52:55,811 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [692587058] [2022-04-28 03:52:55,811 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [692587058] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:52:55,812 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:52:55,812 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [29] imperfect sequences [] total 29 [2022-04-28 03:52:55,812 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1091670264] [2022-04-28 03:52:55,812 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:52:55,812 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 3.6206896551724137) internal successors, (105), 28 states have internal predecessors, (105), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 109 [2022-04-28 03:52:55,812 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:52:55,812 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 29 states, 29 states have (on average 3.6206896551724137) internal successors, (105), 28 states have internal predecessors, (105), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:52:55,899 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 109 edges. 109 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:52:55,899 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-04-28 03:52:55,899 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:52:55,900 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-04-28 03:52:55,900 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=200, Invalid=1206, Unknown=0, NotChecked=0, Total=1406 [2022-04-28 03:52:55,900 INFO L87 Difference]: Start difference. First operand 112 states and 116 transitions. Second operand has 29 states, 29 states have (on average 3.6206896551724137) internal successors, (105), 28 states have internal predecessors, (105), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:00,946 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:00,946 INFO L93 Difference]: Finished difference Result 139 states and 148 transitions. [2022-04-28 03:53:00,946 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-04-28 03:53:00,950 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 3.6206896551724137) internal successors, (105), 28 states have internal predecessors, (105), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 109 [2022-04-28 03:53:00,951 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:53:00,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 29 states have (on average 3.6206896551724137) internal successors, (105), 28 states have internal predecessors, (105), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:00,952 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 128 transitions. [2022-04-28 03:53:00,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 29 states have (on average 3.6206896551724137) internal successors, (105), 28 states have internal predecessors, (105), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:00,952 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 128 transitions. [2022-04-28 03:53:00,952 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 29 states and 128 transitions. [2022-04-28 03:53:01,049 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 128 edges. 128 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:53:01,050 INFO L225 Difference]: With dead ends: 139 [2022-04-28 03:53:01,050 INFO L226 Difference]: Without dead ends: 121 [2022-04-28 03:53:01,051 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 168 GetRequests, 105 SyntacticMatches, 1 SemanticMatches, 62 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 704 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=417, Invalid=3615, Unknown=0, NotChecked=0, Total=4032 [2022-04-28 03:53:01,052 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 83 mSDsluCounter, 127 mSDsCounter, 0 mSdLazyCounter, 2604 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 162 SdHoareTripleChecker+Invalid, 2633 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 2604 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-04-28 03:53:01,052 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 162 Invalid, 2633 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 2604 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-04-28 03:53:01,052 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2022-04-28 03:53:02,123 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 116. [2022-04-28 03:53:02,123 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:53:02,124 INFO L82 GeneralOperation]: Start isEquivalent. First operand 121 states. Second operand has 116 states, 111 states have (on average 1.045045045045045) internal successors, (116), 111 states have internal predecessors, (116), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:02,124 INFO L74 IsIncluded]: Start isIncluded. First operand 121 states. Second operand has 116 states, 111 states have (on average 1.045045045045045) internal successors, (116), 111 states have internal predecessors, (116), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:02,124 INFO L87 Difference]: Start difference. First operand 121 states. Second operand has 116 states, 111 states have (on average 1.045045045045045) internal successors, (116), 111 states have internal predecessors, (116), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:02,125 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:02,125 INFO L93 Difference]: Finished difference Result 121 states and 125 transitions. [2022-04-28 03:53:02,125 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 125 transitions. [2022-04-28 03:53:02,126 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:53:02,126 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:53:02,126 INFO L74 IsIncluded]: Start isIncluded. First operand has 116 states, 111 states have (on average 1.045045045045045) internal successors, (116), 111 states have internal predecessors, (116), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 121 states. [2022-04-28 03:53:02,126 INFO L87 Difference]: Start difference. First operand has 116 states, 111 states have (on average 1.045045045045045) internal successors, (116), 111 states have internal predecessors, (116), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 121 states. [2022-04-28 03:53:02,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:02,128 INFO L93 Difference]: Finished difference Result 121 states and 125 transitions. [2022-04-28 03:53:02,128 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 125 transitions. [2022-04-28 03:53:02,128 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:53:02,128 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:53:02,128 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:53:02,128 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:53:02,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 116 states, 111 states have (on average 1.045045045045045) internal successors, (116), 111 states have internal predecessors, (116), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:02,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116 states to 116 states and 120 transitions. [2022-04-28 03:53:02,130 INFO L78 Accepts]: Start accepts. Automaton has 116 states and 120 transitions. Word has length 109 [2022-04-28 03:53:02,130 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:53:02,130 INFO L495 AbstractCegarLoop]: Abstraction has 116 states and 120 transitions. [2022-04-28 03:53:02,130 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 3.6206896551724137) internal successors, (105), 28 states have internal predecessors, (105), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:02,130 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 116 states and 120 transitions. [2022-04-28 03:53:02,358 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 120 edges. 120 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:53:02,358 INFO L276 IsEmpty]: Start isEmpty. Operand 116 states and 120 transitions. [2022-04-28 03:53:02,358 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2022-04-28 03:53:02,358 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:53:02,359 INFO L195 NwaCegarLoop]: trace histogram [26, 25, 25, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:53:02,374 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Ended with exit code 0 [2022-04-28 03:53:02,559 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24,24 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:53:02,559 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:53:02,559 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:53:02,559 INFO L85 PathProgramCache]: Analyzing trace with hash 1142621384, now seen corresponding path program 23 times [2022-04-28 03:53:02,559 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:53:02,560 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [2064552851] [2022-04-28 03:53:04,686 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:53:04,742 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:07,677 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:53:07,780 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:08,023 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:08,024 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:53:08,027 INFO L85 PathProgramCache]: Analyzing trace with hash -1286252953, now seen corresponding path program 1 times [2022-04-28 03:53:08,027 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:53:08,027 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1539065497] [2022-04-28 03:53:08,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:53:08,027 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:53:08,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:08,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:53:08,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:08,077 INFO L290 TraceCheckUtils]: 0: Hoare triple {15081#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {15073#true} is VALID [2022-04-28 03:53:08,078 INFO L290 TraceCheckUtils]: 1: Hoare triple {15073#true} assume true; {15073#true} is VALID [2022-04-28 03:53:08,078 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15073#true} {15073#true} #48#return; {15073#true} is VALID [2022-04-28 03:53:08,078 INFO L272 TraceCheckUtils]: 0: Hoare triple {15073#true} call ULTIMATE.init(); {15081#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:53:08,078 INFO L290 TraceCheckUtils]: 1: Hoare triple {15081#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {15073#true} is VALID [2022-04-28 03:53:08,078 INFO L290 TraceCheckUtils]: 2: Hoare triple {15073#true} assume true; {15073#true} is VALID [2022-04-28 03:53:08,078 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {15073#true} {15073#true} #48#return; {15073#true} is VALID [2022-04-28 03:53:08,078 INFO L272 TraceCheckUtils]: 4: Hoare triple {15073#true} call #t~ret7 := main(); {15073#true} is VALID [2022-04-28 03:53:08,079 INFO L290 TraceCheckUtils]: 5: Hoare triple {15073#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {15078#(= main_~x~0 0)} is VALID [2022-04-28 03:53:08,079 INFO L290 TraceCheckUtils]: 6: Hoare triple {15078#(= main_~x~0 0)} [192] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_170| |v_main_#t~post4_169|)) (.cse1 (= v_main_~x~0_888 v_main_~x~0_887))) (or (and .cse0 (not (< v_main_~x~0_888 500000)) .cse1) (and .cse0 .cse1) (and (< v_main_~x~0_887 500001) (< v_main_~x~0_888 v_main_~x~0_887)))) InVars {main_~x~0=v_main_~x~0_888, main_#t~post4=|v_main_#t~post4_170|} OutVars{main_~x~0=v_main_~x~0_887, main_#t~post4=|v_main_#t~post4_169|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {15079#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:08,080 INFO L290 TraceCheckUtils]: 7: Hoare triple {15079#(<= main_~x~0 500000)} [193] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {15079#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:08,081 INFO L290 TraceCheckUtils]: 8: Hoare triple {15079#(<= main_~x~0 500000)} [194] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_890)) (.cse1 (= v_main_~y~0_642 v_main_~y~0_641)) (.cse2 (= |v_main_#t~post6_298| |v_main_#t~post6_296|))) (or (and (< v_main_~y~0_641 (+ v_main_~y~0_642 2 (div (+ 999999 (* v_main_~x~0_890 (- 1))) 2))) .cse0 (= (+ v_main_~x~0_889 (* v_main_~y~0_642 2)) (+ v_main_~x~0_890 (* v_main_~y~0_641 2))) (< v_main_~y~0_642 v_main_~y~0_641)) (and (or (not (< v_main_~x~0_890 1000000)) (not .cse0)) .cse1 .cse2 (= v_main_~x~0_889 v_main_~x~0_890)) (and .cse1 (= v_main_~x~0_890 v_main_~x~0_889) .cse2))) InVars {main_~y~0=v_main_~y~0_642, main_~x~0=v_main_~x~0_890, main_#t~post6=|v_main_#t~post6_298|} OutVars{main_~y~0=v_main_~y~0_641, main_~x~0=v_main_~x~0_889, main_#t~post6=|v_main_#t~post6_296|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {15080#(<= main_~x~0 999999)} is VALID [2022-04-28 03:53:08,081 INFO L290 TraceCheckUtils]: 9: Hoare triple {15080#(<= main_~x~0 999999)} [195] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {15080#(<= main_~x~0 999999)} is VALID [2022-04-28 03:53:08,082 INFO L290 TraceCheckUtils]: 10: Hoare triple {15080#(<= main_~x~0 999999)} [196] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_301| |v_main_#t~post6_297|)) (.cse1 (= v_main_~y~0_644 v_main_~y~0_643)) (.cse2 (= |v_main_#t~post5_143| |v_main_#t~post5_142|)) (.cse3 (= v_main_~x~0_892 v_main_~x~0_891)) (.cse4 (<= 500000 v_main_~x~0_892))) (or (and .cse0 .cse1 .cse2 .cse3) (and (or (not (< v_main_~x~0_892 750000)) (not .cse4)) .cse0 .cse1 .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_892 v_main_~y~0_643))) (and (< .cse5 (+ 750001 v_main_~y~0_644)) (= (+ v_main_~x~0_891 v_main_~y~0_644) .cse5) .cse4 (< v_main_~y~0_644 v_main_~y~0_643))))) InVars {main_~y~0=v_main_~y~0_644, main_#t~post5=|v_main_#t~post5_143|, main_~x~0=v_main_~x~0_892, main_#t~post6=|v_main_#t~post6_301|} OutVars{main_~y~0=v_main_~y~0_643, main_#t~post5=|v_main_#t~post5_142|, main_~x~0=v_main_~x~0_891, main_#t~post6=|v_main_#t~post6_297|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {15080#(<= main_~x~0 999999)} is VALID [2022-04-28 03:53:08,082 INFO L290 TraceCheckUtils]: 11: Hoare triple {15080#(<= main_~x~0 999999)} [191] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {15074#false} is VALID [2022-04-28 03:53:08,082 INFO L272 TraceCheckUtils]: 12: Hoare triple {15074#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {15074#false} is VALID [2022-04-28 03:53:08,082 INFO L290 TraceCheckUtils]: 13: Hoare triple {15074#false} ~cond := #in~cond; {15074#false} is VALID [2022-04-28 03:53:08,082 INFO L290 TraceCheckUtils]: 14: Hoare triple {15074#false} assume 0 == ~cond; {15074#false} is VALID [2022-04-28 03:53:08,082 INFO L290 TraceCheckUtils]: 15: Hoare triple {15074#false} assume !false; {15074#false} is VALID [2022-04-28 03:53:08,083 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:53:08,083 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:53:08,083 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1539065497] [2022-04-28 03:53:08,083 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1539065497] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:53:08,083 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [484973117] [2022-04-28 03:53:08,083 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:53:08,083 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:53:08,083 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:53:08,084 INFO L229 MonitoredProcess]: Starting monitored process 25 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:53:08,108 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-04-28 03:53:08,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:08,121 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:53:08,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:08,130 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:53:08,322 INFO L272 TraceCheckUtils]: 0: Hoare triple {15073#true} call ULTIMATE.init(); {15073#true} is VALID [2022-04-28 03:53:08,322 INFO L290 TraceCheckUtils]: 1: Hoare triple {15073#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {15073#true} is VALID [2022-04-28 03:53:08,322 INFO L290 TraceCheckUtils]: 2: Hoare triple {15073#true} assume true; {15073#true} is VALID [2022-04-28 03:53:08,322 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {15073#true} {15073#true} #48#return; {15073#true} is VALID [2022-04-28 03:53:08,322 INFO L272 TraceCheckUtils]: 4: Hoare triple {15073#true} call #t~ret7 := main(); {15073#true} is VALID [2022-04-28 03:53:08,322 INFO L290 TraceCheckUtils]: 5: Hoare triple {15073#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {15100#(<= main_~x~0 0)} is VALID [2022-04-28 03:53:08,323 INFO L290 TraceCheckUtils]: 6: Hoare triple {15100#(<= main_~x~0 0)} [192] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_170| |v_main_#t~post4_169|)) (.cse1 (= v_main_~x~0_888 v_main_~x~0_887))) (or (and .cse0 (not (< v_main_~x~0_888 500000)) .cse1) (and .cse0 .cse1) (and (< v_main_~x~0_887 500001) (< v_main_~x~0_888 v_main_~x~0_887)))) InVars {main_~x~0=v_main_~x~0_888, main_#t~post4=|v_main_#t~post4_170|} OutVars{main_~x~0=v_main_~x~0_887, main_#t~post4=|v_main_#t~post4_169|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {15079#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:08,323 INFO L290 TraceCheckUtils]: 7: Hoare triple {15079#(<= main_~x~0 500000)} [193] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {15079#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:08,324 INFO L290 TraceCheckUtils]: 8: Hoare triple {15079#(<= main_~x~0 500000)} [194] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_890)) (.cse1 (= v_main_~y~0_642 v_main_~y~0_641)) (.cse2 (= |v_main_#t~post6_298| |v_main_#t~post6_296|))) (or (and (< v_main_~y~0_641 (+ v_main_~y~0_642 2 (div (+ 999999 (* v_main_~x~0_890 (- 1))) 2))) .cse0 (= (+ v_main_~x~0_889 (* v_main_~y~0_642 2)) (+ v_main_~x~0_890 (* v_main_~y~0_641 2))) (< v_main_~y~0_642 v_main_~y~0_641)) (and (or (not (< v_main_~x~0_890 1000000)) (not .cse0)) .cse1 .cse2 (= v_main_~x~0_889 v_main_~x~0_890)) (and .cse1 (= v_main_~x~0_890 v_main_~x~0_889) .cse2))) InVars {main_~y~0=v_main_~y~0_642, main_~x~0=v_main_~x~0_890, main_#t~post6=|v_main_#t~post6_298|} OutVars{main_~y~0=v_main_~y~0_641, main_~x~0=v_main_~x~0_889, main_#t~post6=|v_main_#t~post6_296|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {15079#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:08,324 INFO L290 TraceCheckUtils]: 9: Hoare triple {15079#(<= main_~x~0 500000)} [195] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {15079#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:08,325 INFO L290 TraceCheckUtils]: 10: Hoare triple {15079#(<= main_~x~0 500000)} [196] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_301| |v_main_#t~post6_297|)) (.cse1 (= v_main_~y~0_644 v_main_~y~0_643)) (.cse2 (= |v_main_#t~post5_143| |v_main_#t~post5_142|)) (.cse3 (= v_main_~x~0_892 v_main_~x~0_891)) (.cse4 (<= 500000 v_main_~x~0_892))) (or (and .cse0 .cse1 .cse2 .cse3) (and (or (not (< v_main_~x~0_892 750000)) (not .cse4)) .cse0 .cse1 .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_892 v_main_~y~0_643))) (and (< .cse5 (+ 750001 v_main_~y~0_644)) (= (+ v_main_~x~0_891 v_main_~y~0_644) .cse5) .cse4 (< v_main_~y~0_644 v_main_~y~0_643))))) InVars {main_~y~0=v_main_~y~0_644, main_#t~post5=|v_main_#t~post5_143|, main_~x~0=v_main_~x~0_892, main_#t~post6=|v_main_#t~post6_301|} OutVars{main_~y~0=v_main_~y~0_643, main_#t~post5=|v_main_#t~post5_142|, main_~x~0=v_main_~x~0_891, main_#t~post6=|v_main_#t~post6_297|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {15116#(< main_~x~0 750001)} is VALID [2022-04-28 03:53:08,325 INFO L290 TraceCheckUtils]: 11: Hoare triple {15116#(< main_~x~0 750001)} [191] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {15074#false} is VALID [2022-04-28 03:53:08,325 INFO L272 TraceCheckUtils]: 12: Hoare triple {15074#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {15074#false} is VALID [2022-04-28 03:53:08,326 INFO L290 TraceCheckUtils]: 13: Hoare triple {15074#false} ~cond := #in~cond; {15074#false} is VALID [2022-04-28 03:53:08,326 INFO L290 TraceCheckUtils]: 14: Hoare triple {15074#false} assume 0 == ~cond; {15074#false} is VALID [2022-04-28 03:53:08,326 INFO L290 TraceCheckUtils]: 15: Hoare triple {15074#false} assume !false; {15074#false} is VALID [2022-04-28 03:53:08,326 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:53:08,326 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:53:08,843 INFO L290 TraceCheckUtils]: 15: Hoare triple {15074#false} assume !false; {15074#false} is VALID [2022-04-28 03:53:08,843 INFO L290 TraceCheckUtils]: 14: Hoare triple {15135#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {15074#false} is VALID [2022-04-28 03:53:08,844 INFO L290 TraceCheckUtils]: 13: Hoare triple {15139#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {15135#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:53:08,844 INFO L272 TraceCheckUtils]: 12: Hoare triple {15143#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {15139#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:53:08,845 INFO L290 TraceCheckUtils]: 11: Hoare triple {15147#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [191] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {15143#(= main_~x~0 1000000)} is VALID [2022-04-28 03:53:08,846 INFO L290 TraceCheckUtils]: 10: Hoare triple {15147#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [196] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_301| |v_main_#t~post6_297|)) (.cse1 (= v_main_~y~0_644 v_main_~y~0_643)) (.cse2 (= |v_main_#t~post5_143| |v_main_#t~post5_142|)) (.cse3 (= v_main_~x~0_892 v_main_~x~0_891)) (.cse4 (<= 500000 v_main_~x~0_892))) (or (and .cse0 .cse1 .cse2 .cse3) (and (or (not (< v_main_~x~0_892 750000)) (not .cse4)) .cse0 .cse1 .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_892 v_main_~y~0_643))) (and (< .cse5 (+ 750001 v_main_~y~0_644)) (= (+ v_main_~x~0_891 v_main_~y~0_644) .cse5) .cse4 (< v_main_~y~0_644 v_main_~y~0_643))))) InVars {main_~y~0=v_main_~y~0_644, main_#t~post5=|v_main_#t~post5_143|, main_~x~0=v_main_~x~0_892, main_#t~post6=|v_main_#t~post6_301|} OutVars{main_~y~0=v_main_~y~0_643, main_#t~post5=|v_main_#t~post5_142|, main_~x~0=v_main_~x~0_891, main_#t~post6=|v_main_#t~post6_297|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {15147#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:53:08,846 INFO L290 TraceCheckUtils]: 9: Hoare triple {15147#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [195] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {15147#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:53:08,847 INFO L290 TraceCheckUtils]: 8: Hoare triple {15157#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [194] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_890)) (.cse1 (= v_main_~y~0_642 v_main_~y~0_641)) (.cse2 (= |v_main_#t~post6_298| |v_main_#t~post6_296|))) (or (and (< v_main_~y~0_641 (+ v_main_~y~0_642 2 (div (+ 999999 (* v_main_~x~0_890 (- 1))) 2))) .cse0 (= (+ v_main_~x~0_889 (* v_main_~y~0_642 2)) (+ v_main_~x~0_890 (* v_main_~y~0_641 2))) (< v_main_~y~0_642 v_main_~y~0_641)) (and (or (not (< v_main_~x~0_890 1000000)) (not .cse0)) .cse1 .cse2 (= v_main_~x~0_889 v_main_~x~0_890)) (and .cse1 (= v_main_~x~0_890 v_main_~x~0_889) .cse2))) InVars {main_~y~0=v_main_~y~0_642, main_~x~0=v_main_~x~0_890, main_#t~post6=|v_main_#t~post6_298|} OutVars{main_~y~0=v_main_~y~0_641, main_~x~0=v_main_~x~0_889, main_#t~post6=|v_main_#t~post6_296|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {15147#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:53:08,847 INFO L290 TraceCheckUtils]: 7: Hoare triple {15157#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [193] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {15157#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:53:08,849 INFO L290 TraceCheckUtils]: 6: Hoare triple {15157#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [192] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_170| |v_main_#t~post4_169|)) (.cse1 (= v_main_~x~0_888 v_main_~x~0_887))) (or (and .cse0 (not (< v_main_~x~0_888 500000)) .cse1) (and .cse0 .cse1) (and (< v_main_~x~0_887 500001) (< v_main_~x~0_888 v_main_~x~0_887)))) InVars {main_~x~0=v_main_~x~0_888, main_#t~post4=|v_main_#t~post4_170|} OutVars{main_~x~0=v_main_~x~0_887, main_#t~post4=|v_main_#t~post4_169|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {15157#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:53:08,849 INFO L290 TraceCheckUtils]: 5: Hoare triple {15073#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {15157#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:53:08,849 INFO L272 TraceCheckUtils]: 4: Hoare triple {15073#true} call #t~ret7 := main(); {15073#true} is VALID [2022-04-28 03:53:08,849 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {15073#true} {15073#true} #48#return; {15073#true} is VALID [2022-04-28 03:53:08,849 INFO L290 TraceCheckUtils]: 2: Hoare triple {15073#true} assume true; {15073#true} is VALID [2022-04-28 03:53:08,849 INFO L290 TraceCheckUtils]: 1: Hoare triple {15073#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {15073#true} is VALID [2022-04-28 03:53:08,849 INFO L272 TraceCheckUtils]: 0: Hoare triple {15073#true} call ULTIMATE.init(); {15073#true} is VALID [2022-04-28 03:53:08,850 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:53:08,850 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [484973117] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:53:08,850 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:53:08,850 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:53:09,723 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:53:09,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [2064552851] [2022-04-28 03:53:09,723 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [2064552851] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:53:09,723 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:53:09,723 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [30] imperfect sequences [] total 30 [2022-04-28 03:53:09,723 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2090302820] [2022-04-28 03:53:09,723 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:53:09,724 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 3.6333333333333333) internal successors, (109), 29 states have internal predecessors, (109), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 113 [2022-04-28 03:53:09,724 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:53:09,724 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 30 states, 30 states have (on average 3.6333333333333333) internal successors, (109), 29 states have internal predecessors, (109), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:09,802 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 113 edges. 113 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:53:09,803 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-04-28 03:53:09,803 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:53:09,803 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-04-28 03:53:09,803 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=214, Invalid=1346, Unknown=0, NotChecked=0, Total=1560 [2022-04-28 03:53:09,804 INFO L87 Difference]: Start difference. First operand 116 states and 120 transitions. Second operand has 30 states, 30 states have (on average 3.6333333333333333) internal successors, (109), 29 states have internal predecessors, (109), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:14,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:14,993 INFO L93 Difference]: Finished difference Result 143 states and 152 transitions. [2022-04-28 03:53:14,993 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-04-28 03:53:14,993 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 3.6333333333333333) internal successors, (109), 29 states have internal predecessors, (109), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 113 [2022-04-28 03:53:14,993 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:53:14,994 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 30 states have (on average 3.6333333333333333) internal successors, (109), 29 states have internal predecessors, (109), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:14,995 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 132 transitions. [2022-04-28 03:53:14,995 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 30 states have (on average 3.6333333333333333) internal successors, (109), 29 states have internal predecessors, (109), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:14,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 132 transitions. [2022-04-28 03:53:14,996 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 30 states and 132 transitions. [2022-04-28 03:53:15,096 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 132 edges. 132 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:53:15,097 INFO L225 Difference]: With dead ends: 143 [2022-04-28 03:53:15,097 INFO L226 Difference]: Without dead ends: 125 [2022-04-28 03:53:15,098 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 106 SyntacticMatches, 2 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 829 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=439, Invalid=3983, Unknown=0, NotChecked=0, Total=4422 [2022-04-28 03:53:15,098 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 87 mSDsluCounter, 127 mSDsCounter, 0 mSdLazyCounter, 2710 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 163 SdHoareTripleChecker+Invalid, 2740 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 2710 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-04-28 03:53:15,098 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 163 Invalid, 2740 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 2710 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-04-28 03:53:15,099 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125 states. [2022-04-28 03:53:16,231 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125 to 120. [2022-04-28 03:53:16,232 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:53:16,232 INFO L82 GeneralOperation]: Start isEquivalent. First operand 125 states. Second operand has 120 states, 115 states have (on average 1.0434782608695652) internal successors, (120), 115 states have internal predecessors, (120), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:16,232 INFO L74 IsIncluded]: Start isIncluded. First operand 125 states. Second operand has 120 states, 115 states have (on average 1.0434782608695652) internal successors, (120), 115 states have internal predecessors, (120), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:16,232 INFO L87 Difference]: Start difference. First operand 125 states. Second operand has 120 states, 115 states have (on average 1.0434782608695652) internal successors, (120), 115 states have internal predecessors, (120), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:16,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:16,234 INFO L93 Difference]: Finished difference Result 125 states and 129 transitions. [2022-04-28 03:53:16,234 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 129 transitions. [2022-04-28 03:53:16,234 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:53:16,234 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:53:16,234 INFO L74 IsIncluded]: Start isIncluded. First operand has 120 states, 115 states have (on average 1.0434782608695652) internal successors, (120), 115 states have internal predecessors, (120), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 125 states. [2022-04-28 03:53:16,234 INFO L87 Difference]: Start difference. First operand has 120 states, 115 states have (on average 1.0434782608695652) internal successors, (120), 115 states have internal predecessors, (120), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 125 states. [2022-04-28 03:53:16,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:16,236 INFO L93 Difference]: Finished difference Result 125 states and 129 transitions. [2022-04-28 03:53:16,236 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 129 transitions. [2022-04-28 03:53:16,236 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:53:16,236 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:53:16,236 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:53:16,236 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:53:16,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 120 states, 115 states have (on average 1.0434782608695652) internal successors, (120), 115 states have internal predecessors, (120), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:16,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 120 states to 120 states and 124 transitions. [2022-04-28 03:53:16,238 INFO L78 Accepts]: Start accepts. Automaton has 120 states and 124 transitions. Word has length 113 [2022-04-28 03:53:16,238 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:53:16,238 INFO L495 AbstractCegarLoop]: Abstraction has 120 states and 124 transitions. [2022-04-28 03:53:16,238 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 3.6333333333333333) internal successors, (109), 29 states have internal predecessors, (109), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:16,239 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 120 states and 124 transitions. [2022-04-28 03:53:16,448 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 124 edges. 124 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:53:16,448 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 124 transitions. [2022-04-28 03:53:16,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2022-04-28 03:53:16,449 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:53:16,449 INFO L195 NwaCegarLoop]: trace histogram [27, 26, 26, 25, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:53:16,465 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Ended with exit code 0 [2022-04-28 03:53:16,655 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-04-28 03:53:16,655 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:53:16,655 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:53:16,656 INFO L85 PathProgramCache]: Analyzing trace with hash -1355859937, now seen corresponding path program 24 times [2022-04-28 03:53:16,656 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:53:16,656 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1552586139] [2022-04-28 03:53:20,729 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:53:20,783 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:20,995 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:21,263 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:21,266 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:53:21,269 INFO L85 PathProgramCache]: Analyzing trace with hash -1645827929, now seen corresponding path program 1 times [2022-04-28 03:53:21,269 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:53:21,269 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1214684282] [2022-04-28 03:53:21,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:53:21,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:53:21,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:21,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:53:21,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:21,323 INFO L290 TraceCheckUtils]: 0: Hoare triple {16050#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {16041#true} is VALID [2022-04-28 03:53:21,323 INFO L290 TraceCheckUtils]: 1: Hoare triple {16041#true} assume true; {16041#true} is VALID [2022-04-28 03:53:21,323 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16041#true} {16041#true} #48#return; {16041#true} is VALID [2022-04-28 03:53:21,323 INFO L272 TraceCheckUtils]: 0: Hoare triple {16041#true} call ULTIMATE.init(); {16050#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:53:21,323 INFO L290 TraceCheckUtils]: 1: Hoare triple {16050#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {16041#true} is VALID [2022-04-28 03:53:21,324 INFO L290 TraceCheckUtils]: 2: Hoare triple {16041#true} assume true; {16041#true} is VALID [2022-04-28 03:53:21,324 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {16041#true} {16041#true} #48#return; {16041#true} is VALID [2022-04-28 03:53:21,324 INFO L272 TraceCheckUtils]: 4: Hoare triple {16041#true} call #t~ret7 := main(); {16041#true} is VALID [2022-04-28 03:53:21,324 INFO L290 TraceCheckUtils]: 5: Hoare triple {16041#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {16046#(= main_~x~0 0)} is VALID [2022-04-28 03:53:21,324 INFO L290 TraceCheckUtils]: 6: Hoare triple {16046#(= main_~x~0 0)} [198] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_177| |v_main_#t~post4_176|)) (.cse1 (= v_main_~x~0_938 v_main_~x~0_937))) (or (and .cse0 .cse1) (and (< v_main_~x~0_938 v_main_~x~0_937) (< v_main_~x~0_937 500001)) (and (not (< v_main_~x~0_938 500000)) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_938, main_#t~post4=|v_main_#t~post4_177|} OutVars{main_~x~0=v_main_~x~0_937, main_#t~post4=|v_main_#t~post4_176|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {16047#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:21,325 INFO L290 TraceCheckUtils]: 7: Hoare triple {16047#(<= main_~x~0 500000)} [199] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {16047#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:21,326 INFO L290 TraceCheckUtils]: 8: Hoare triple {16047#(<= main_~x~0 500000)} [200] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 750000 v_main_~x~0_940)) (.cse0 (= v_main_~y~0_682 v_main_~y~0_681))) (or (and (= |v_main_#t~post6_309| |v_main_#t~post6_311|) (= v_main_~x~0_939 v_main_~x~0_940) .cse0 (or (not .cse1) (not (< v_main_~x~0_940 1000000)))) (and (< v_main_~y~0_682 v_main_~y~0_681) (= (+ v_main_~x~0_939 (* v_main_~y~0_682 2)) (+ v_main_~x~0_940 (* v_main_~y~0_681 2))) .cse1 (< v_main_~y~0_681 (+ v_main_~y~0_682 (div (+ 999999 (* v_main_~x~0_940 (- 1))) 2) 2))) (and (= v_main_~x~0_940 v_main_~x~0_939) (= |v_main_#t~post6_311| |v_main_#t~post6_309|) .cse0))) InVars {main_~y~0=v_main_~y~0_682, main_~x~0=v_main_~x~0_940, main_#t~post6=|v_main_#t~post6_311|} OutVars{main_~y~0=v_main_~y~0_681, main_~x~0=v_main_~x~0_939, main_#t~post6=|v_main_#t~post6_309|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {16048#(<= main_~x~0 749999)} is VALID [2022-04-28 03:53:21,326 INFO L290 TraceCheckUtils]: 9: Hoare triple {16048#(<= main_~x~0 749999)} [201] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {16048#(<= main_~x~0 749999)} is VALID [2022-04-28 03:53:21,326 INFO L290 TraceCheckUtils]: 10: Hoare triple {16048#(<= main_~x~0 749999)} [202] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_942)) (.cse2 (= v_main_~x~0_942 v_main_~x~0_941)) (.cse3 (= |v_main_#t~post5_149| |v_main_#t~post5_148|)) (.cse4 (= |v_main_#t~post6_314| |v_main_#t~post6_310|)) (.cse5 (= v_main_~y~0_684 v_main_~y~0_683))) (or (let ((.cse1 (+ v_main_~x~0_942 v_main_~y~0_683))) (and .cse0 (< v_main_~y~0_684 v_main_~y~0_683) (= .cse1 (+ v_main_~x~0_941 v_main_~y~0_684)) (< .cse1 (+ 750001 v_main_~y~0_684)))) (and .cse2 .cse3 .cse4 .cse5 (or (not (< v_main_~x~0_942 750000)) (not .cse0))) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_684, main_#t~post5=|v_main_#t~post5_149|, main_~x~0=v_main_~x~0_942, main_#t~post6=|v_main_#t~post6_314|} OutVars{main_~y~0=v_main_~y~0_683, main_#t~post5=|v_main_#t~post5_148|, main_~x~0=v_main_~x~0_941, main_#t~post6=|v_main_#t~post6_310|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {16049#(<= main_~x~0 750000)} is VALID [2022-04-28 03:53:21,327 INFO L290 TraceCheckUtils]: 11: Hoare triple {16049#(<= main_~x~0 750000)} [197] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {16042#false} is VALID [2022-04-28 03:53:21,327 INFO L272 TraceCheckUtils]: 12: Hoare triple {16042#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {16042#false} is VALID [2022-04-28 03:53:21,327 INFO L290 TraceCheckUtils]: 13: Hoare triple {16042#false} ~cond := #in~cond; {16042#false} is VALID [2022-04-28 03:53:21,327 INFO L290 TraceCheckUtils]: 14: Hoare triple {16042#false} assume 0 == ~cond; {16042#false} is VALID [2022-04-28 03:53:21,327 INFO L290 TraceCheckUtils]: 15: Hoare triple {16042#false} assume !false; {16042#false} is VALID [2022-04-28 03:53:21,327 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-04-28 03:53:21,327 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:53:21,327 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1214684282] [2022-04-28 03:53:21,327 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1214684282] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:53:21,327 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [412922065] [2022-04-28 03:53:21,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:53:21,328 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:53:21,328 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:53:21,328 INFO L229 MonitoredProcess]: Starting monitored process 26 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:53:21,329 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-04-28 03:53:21,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:21,354 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:53:21,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:21,370 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:53:21,574 INFO L272 TraceCheckUtils]: 0: Hoare triple {16041#true} call ULTIMATE.init(); {16041#true} is VALID [2022-04-28 03:53:21,575 INFO L290 TraceCheckUtils]: 1: Hoare triple {16041#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {16041#true} is VALID [2022-04-28 03:53:21,575 INFO L290 TraceCheckUtils]: 2: Hoare triple {16041#true} assume true; {16041#true} is VALID [2022-04-28 03:53:21,575 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {16041#true} {16041#true} #48#return; {16041#true} is VALID [2022-04-28 03:53:21,575 INFO L272 TraceCheckUtils]: 4: Hoare triple {16041#true} call #t~ret7 := main(); {16041#true} is VALID [2022-04-28 03:53:21,575 INFO L290 TraceCheckUtils]: 5: Hoare triple {16041#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {16069#(<= main_~x~0 0)} is VALID [2022-04-28 03:53:21,576 INFO L290 TraceCheckUtils]: 6: Hoare triple {16069#(<= main_~x~0 0)} [198] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_177| |v_main_#t~post4_176|)) (.cse1 (= v_main_~x~0_938 v_main_~x~0_937))) (or (and .cse0 .cse1) (and (< v_main_~x~0_938 v_main_~x~0_937) (< v_main_~x~0_937 500001)) (and (not (< v_main_~x~0_938 500000)) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_938, main_#t~post4=|v_main_#t~post4_177|} OutVars{main_~x~0=v_main_~x~0_937, main_#t~post4=|v_main_#t~post4_176|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {16047#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:21,577 INFO L290 TraceCheckUtils]: 7: Hoare triple {16047#(<= main_~x~0 500000)} [199] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {16047#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:21,578 INFO L290 TraceCheckUtils]: 8: Hoare triple {16047#(<= main_~x~0 500000)} [200] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 750000 v_main_~x~0_940)) (.cse0 (= v_main_~y~0_682 v_main_~y~0_681))) (or (and (= |v_main_#t~post6_309| |v_main_#t~post6_311|) (= v_main_~x~0_939 v_main_~x~0_940) .cse0 (or (not .cse1) (not (< v_main_~x~0_940 1000000)))) (and (< v_main_~y~0_682 v_main_~y~0_681) (= (+ v_main_~x~0_939 (* v_main_~y~0_682 2)) (+ v_main_~x~0_940 (* v_main_~y~0_681 2))) .cse1 (< v_main_~y~0_681 (+ v_main_~y~0_682 (div (+ 999999 (* v_main_~x~0_940 (- 1))) 2) 2))) (and (= v_main_~x~0_940 v_main_~x~0_939) (= |v_main_#t~post6_311| |v_main_#t~post6_309|) .cse0))) InVars {main_~y~0=v_main_~y~0_682, main_~x~0=v_main_~x~0_940, main_#t~post6=|v_main_#t~post6_311|} OutVars{main_~y~0=v_main_~y~0_681, main_~x~0=v_main_~x~0_939, main_#t~post6=|v_main_#t~post6_309|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {16047#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:21,578 INFO L290 TraceCheckUtils]: 9: Hoare triple {16047#(<= main_~x~0 500000)} [201] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {16047#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:21,579 INFO L290 TraceCheckUtils]: 10: Hoare triple {16047#(<= main_~x~0 500000)} [202] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_942)) (.cse2 (= v_main_~x~0_942 v_main_~x~0_941)) (.cse3 (= |v_main_#t~post5_149| |v_main_#t~post5_148|)) (.cse4 (= |v_main_#t~post6_314| |v_main_#t~post6_310|)) (.cse5 (= v_main_~y~0_684 v_main_~y~0_683))) (or (let ((.cse1 (+ v_main_~x~0_942 v_main_~y~0_683))) (and .cse0 (< v_main_~y~0_684 v_main_~y~0_683) (= .cse1 (+ v_main_~x~0_941 v_main_~y~0_684)) (< .cse1 (+ 750001 v_main_~y~0_684)))) (and .cse2 .cse3 .cse4 .cse5 (or (not (< v_main_~x~0_942 750000)) (not .cse0))) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_684, main_#t~post5=|v_main_#t~post5_149|, main_~x~0=v_main_~x~0_942, main_#t~post6=|v_main_#t~post6_314|} OutVars{main_~y~0=v_main_~y~0_683, main_#t~post5=|v_main_#t~post5_148|, main_~x~0=v_main_~x~0_941, main_#t~post6=|v_main_#t~post6_310|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {16049#(<= main_~x~0 750000)} is VALID [2022-04-28 03:53:21,579 INFO L290 TraceCheckUtils]: 11: Hoare triple {16049#(<= main_~x~0 750000)} [197] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {16042#false} is VALID [2022-04-28 03:53:21,579 INFO L272 TraceCheckUtils]: 12: Hoare triple {16042#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {16042#false} is VALID [2022-04-28 03:53:21,580 INFO L290 TraceCheckUtils]: 13: Hoare triple {16042#false} ~cond := #in~cond; {16042#false} is VALID [2022-04-28 03:53:21,580 INFO L290 TraceCheckUtils]: 14: Hoare triple {16042#false} assume 0 == ~cond; {16042#false} is VALID [2022-04-28 03:53:21,580 INFO L290 TraceCheckUtils]: 15: Hoare triple {16042#false} assume !false; {16042#false} is VALID [2022-04-28 03:53:21,580 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:53:21,580 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:53:21,990 INFO L290 TraceCheckUtils]: 15: Hoare triple {16042#false} assume !false; {16042#false} is VALID [2022-04-28 03:53:21,991 INFO L290 TraceCheckUtils]: 14: Hoare triple {16103#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {16042#false} is VALID [2022-04-28 03:53:21,991 INFO L290 TraceCheckUtils]: 13: Hoare triple {16107#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {16103#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:53:21,992 INFO L272 TraceCheckUtils]: 12: Hoare triple {16111#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {16107#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:53:21,992 INFO L290 TraceCheckUtils]: 11: Hoare triple {16115#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [197] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {16111#(= main_~x~0 1000000)} is VALID [2022-04-28 03:53:21,993 INFO L290 TraceCheckUtils]: 10: Hoare triple {16115#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [202] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_942)) (.cse2 (= v_main_~x~0_942 v_main_~x~0_941)) (.cse3 (= |v_main_#t~post5_149| |v_main_#t~post5_148|)) (.cse4 (= |v_main_#t~post6_314| |v_main_#t~post6_310|)) (.cse5 (= v_main_~y~0_684 v_main_~y~0_683))) (or (let ((.cse1 (+ v_main_~x~0_942 v_main_~y~0_683))) (and .cse0 (< v_main_~y~0_684 v_main_~y~0_683) (= .cse1 (+ v_main_~x~0_941 v_main_~y~0_684)) (< .cse1 (+ 750001 v_main_~y~0_684)))) (and .cse2 .cse3 .cse4 .cse5 (or (not (< v_main_~x~0_942 750000)) (not .cse0))) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_684, main_#t~post5=|v_main_#t~post5_149|, main_~x~0=v_main_~x~0_942, main_#t~post6=|v_main_#t~post6_314|} OutVars{main_~y~0=v_main_~y~0_683, main_#t~post5=|v_main_#t~post5_148|, main_~x~0=v_main_~x~0_941, main_#t~post6=|v_main_#t~post6_310|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {16115#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:53:21,993 INFO L290 TraceCheckUtils]: 9: Hoare triple {16115#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [201] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {16115#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:53:21,994 INFO L290 TraceCheckUtils]: 8: Hoare triple {16125#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [200] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 750000 v_main_~x~0_940)) (.cse0 (= v_main_~y~0_682 v_main_~y~0_681))) (or (and (= |v_main_#t~post6_309| |v_main_#t~post6_311|) (= v_main_~x~0_939 v_main_~x~0_940) .cse0 (or (not .cse1) (not (< v_main_~x~0_940 1000000)))) (and (< v_main_~y~0_682 v_main_~y~0_681) (= (+ v_main_~x~0_939 (* v_main_~y~0_682 2)) (+ v_main_~x~0_940 (* v_main_~y~0_681 2))) .cse1 (< v_main_~y~0_681 (+ v_main_~y~0_682 (div (+ 999999 (* v_main_~x~0_940 (- 1))) 2) 2))) (and (= v_main_~x~0_940 v_main_~x~0_939) (= |v_main_#t~post6_311| |v_main_#t~post6_309|) .cse0))) InVars {main_~y~0=v_main_~y~0_682, main_~x~0=v_main_~x~0_940, main_#t~post6=|v_main_#t~post6_311|} OutVars{main_~y~0=v_main_~y~0_681, main_~x~0=v_main_~x~0_939, main_#t~post6=|v_main_#t~post6_309|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {16115#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:53:21,995 INFO L290 TraceCheckUtils]: 7: Hoare triple {16125#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [199] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {16125#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:53:21,996 INFO L290 TraceCheckUtils]: 6: Hoare triple {16125#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [198] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_177| |v_main_#t~post4_176|)) (.cse1 (= v_main_~x~0_938 v_main_~x~0_937))) (or (and .cse0 .cse1) (and (< v_main_~x~0_938 v_main_~x~0_937) (< v_main_~x~0_937 500001)) (and (not (< v_main_~x~0_938 500000)) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_938, main_#t~post4=|v_main_#t~post4_177|} OutVars{main_~x~0=v_main_~x~0_937, main_#t~post4=|v_main_#t~post4_176|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {16125#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:53:21,997 INFO L290 TraceCheckUtils]: 5: Hoare triple {16041#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {16125#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:53:21,997 INFO L272 TraceCheckUtils]: 4: Hoare triple {16041#true} call #t~ret7 := main(); {16041#true} is VALID [2022-04-28 03:53:21,997 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {16041#true} {16041#true} #48#return; {16041#true} is VALID [2022-04-28 03:53:21,997 INFO L290 TraceCheckUtils]: 2: Hoare triple {16041#true} assume true; {16041#true} is VALID [2022-04-28 03:53:21,997 INFO L290 TraceCheckUtils]: 1: Hoare triple {16041#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {16041#true} is VALID [2022-04-28 03:53:21,997 INFO L272 TraceCheckUtils]: 0: Hoare triple {16041#true} call ULTIMATE.init(); {16041#true} is VALID [2022-04-28 03:53:21,997 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:53:21,997 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [412922065] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:53:21,997 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:53:21,997 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 7] total 13 [2022-04-28 03:53:22,881 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:53:22,881 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1552586139] [2022-04-28 03:53:22,881 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1552586139] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:53:22,881 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:53:22,881 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [31] imperfect sequences [] total 31 [2022-04-28 03:53:22,881 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [883619629] [2022-04-28 03:53:22,881 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:53:22,882 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 3.6451612903225805) internal successors, (113), 30 states have internal predecessors, (113), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 117 [2022-04-28 03:53:22,882 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:53:22,882 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 31 states, 31 states have (on average 3.6451612903225805) internal successors, (113), 30 states have internal predecessors, (113), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:22,962 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 117 edges. 117 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:53:22,962 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-04-28 03:53:22,962 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:53:22,962 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-04-28 03:53:22,962 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=221, Invalid=1419, Unknown=0, NotChecked=0, Total=1640 [2022-04-28 03:53:22,963 INFO L87 Difference]: Start difference. First operand 120 states and 124 transitions. Second operand has 31 states, 31 states have (on average 3.6451612903225805) internal successors, (113), 30 states have internal predecessors, (113), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:28,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:28,527 INFO L93 Difference]: Finished difference Result 147 states and 156 transitions. [2022-04-28 03:53:28,527 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-04-28 03:53:28,527 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 3.6451612903225805) internal successors, (113), 30 states have internal predecessors, (113), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 117 [2022-04-28 03:53:28,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:53:28,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 31 states have (on average 3.6451612903225805) internal successors, (113), 30 states have internal predecessors, (113), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:28,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 136 transitions. [2022-04-28 03:53:28,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 31 states have (on average 3.6451612903225805) internal successors, (113), 30 states have internal predecessors, (113), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:28,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 136 transitions. [2022-04-28 03:53:28,530 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 31 states and 136 transitions. [2022-04-28 03:53:28,632 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 136 edges. 136 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:53:28,633 INFO L225 Difference]: With dead ends: 147 [2022-04-28 03:53:28,633 INFO L226 Difference]: Without dead ends: 129 [2022-04-28 03:53:28,634 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 178 GetRequests, 108 SyntacticMatches, 3 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 895 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=454, Invalid=4238, Unknown=0, NotChecked=0, Total=4692 [2022-04-28 03:53:28,634 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 90 mSDsluCounter, 132 mSDsCounter, 0 mSdLazyCounter, 2922 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 169 SdHoareTripleChecker+Invalid, 2953 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 2922 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-04-28 03:53:28,634 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 169 Invalid, 2953 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 2922 Invalid, 0 Unknown, 0 Unchecked, 2.1s Time] [2022-04-28 03:53:28,635 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 129 states. [2022-04-28 03:53:29,886 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 129 to 124. [2022-04-28 03:53:29,887 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:53:29,887 INFO L82 GeneralOperation]: Start isEquivalent. First operand 129 states. Second operand has 124 states, 119 states have (on average 1.0420168067226891) internal successors, (124), 119 states have internal predecessors, (124), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:29,887 INFO L74 IsIncluded]: Start isIncluded. First operand 129 states. Second operand has 124 states, 119 states have (on average 1.0420168067226891) internal successors, (124), 119 states have internal predecessors, (124), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:29,887 INFO L87 Difference]: Start difference. First operand 129 states. Second operand has 124 states, 119 states have (on average 1.0420168067226891) internal successors, (124), 119 states have internal predecessors, (124), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:29,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:29,889 INFO L93 Difference]: Finished difference Result 129 states and 133 transitions. [2022-04-28 03:53:29,889 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 133 transitions. [2022-04-28 03:53:29,889 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:53:29,889 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:53:29,889 INFO L74 IsIncluded]: Start isIncluded. First operand has 124 states, 119 states have (on average 1.0420168067226891) internal successors, (124), 119 states have internal predecessors, (124), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 129 states. [2022-04-28 03:53:29,889 INFO L87 Difference]: Start difference. First operand has 124 states, 119 states have (on average 1.0420168067226891) internal successors, (124), 119 states have internal predecessors, (124), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 129 states. [2022-04-28 03:53:29,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:29,891 INFO L93 Difference]: Finished difference Result 129 states and 133 transitions. [2022-04-28 03:53:29,891 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 133 transitions. [2022-04-28 03:53:29,891 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:53:29,891 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:53:29,891 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:53:29,891 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:53:29,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 124 states, 119 states have (on average 1.0420168067226891) internal successors, (124), 119 states have internal predecessors, (124), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:29,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 124 states to 124 states and 128 transitions. [2022-04-28 03:53:29,893 INFO L78 Accepts]: Start accepts. Automaton has 124 states and 128 transitions. Word has length 117 [2022-04-28 03:53:29,893 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:53:29,893 INFO L495 AbstractCegarLoop]: Abstraction has 124 states and 128 transitions. [2022-04-28 03:53:29,894 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 3.6451612903225805) internal successors, (113), 30 states have internal predecessors, (113), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:29,894 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 124 states and 128 transitions. [2022-04-28 03:53:30,151 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 128 edges. 128 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:53:30,151 INFO L276 IsEmpty]: Start isEmpty. Operand 124 states and 128 transitions. [2022-04-28 03:53:30,152 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2022-04-28 03:53:30,152 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:53:30,152 INFO L195 NwaCegarLoop]: trace histogram [28, 27, 27, 26, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:53:30,169 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-04-28 03:53:30,352 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-04-28 03:53:30,352 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:53:30,352 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:53:30,352 INFO L85 PathProgramCache]: Analyzing trace with hash 1136388086, now seen corresponding path program 25 times [2022-04-28 03:53:30,352 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:53:30,352 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1341669903] [2022-04-28 03:53:34,421 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:53:34,467 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:37,503 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:53:37,608 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:37,815 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:37,816 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:53:37,819 INFO L85 PathProgramCache]: Analyzing trace with hash -2005402905, now seen corresponding path program 1 times [2022-04-28 03:53:37,819 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:53:37,819 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [845497479] [2022-04-28 03:53:37,819 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:53:37,819 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:53:37,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:37,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:53:37,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:37,893 INFO L290 TraceCheckUtils]: 0: Hoare triple {17047#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {17036#true} is VALID [2022-04-28 03:53:37,893 INFO L290 TraceCheckUtils]: 1: Hoare triple {17036#true} assume true; {17036#true} is VALID [2022-04-28 03:53:37,893 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17036#true} {17036#true} #48#return; {17036#true} is VALID [2022-04-28 03:53:37,894 INFO L272 TraceCheckUtils]: 0: Hoare triple {17036#true} call ULTIMATE.init(); {17047#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:53:37,894 INFO L290 TraceCheckUtils]: 1: Hoare triple {17047#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {17036#true} is VALID [2022-04-28 03:53:37,894 INFO L290 TraceCheckUtils]: 2: Hoare triple {17036#true} assume true; {17036#true} is VALID [2022-04-28 03:53:37,894 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {17036#true} {17036#true} #48#return; {17036#true} is VALID [2022-04-28 03:53:37,894 INFO L272 TraceCheckUtils]: 4: Hoare triple {17036#true} call #t~ret7 := main(); {17036#true} is VALID [2022-04-28 03:53:37,894 INFO L290 TraceCheckUtils]: 5: Hoare triple {17036#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {17041#(= main_~x~0 0)} is VALID [2022-04-28 03:53:37,895 INFO L290 TraceCheckUtils]: 6: Hoare triple {17041#(= main_~x~0 0)} [204] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_184| |v_main_#t~post4_183|)) (.cse1 (= v_main_~x~0_989 v_main_~x~0_988))) (or (and .cse0 .cse1 (not (< v_main_~x~0_989 500000))) (and .cse0 .cse1) (and (< v_main_~x~0_988 500001) (< v_main_~x~0_989 v_main_~x~0_988)))) InVars {main_~x~0=v_main_~x~0_989, main_#t~post4=|v_main_#t~post4_184|} OutVars{main_~x~0=v_main_~x~0_988, main_#t~post4=|v_main_#t~post4_183|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {17042#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:37,895 INFO L290 TraceCheckUtils]: 7: Hoare triple {17042#(<= main_~x~0 500000)} [205] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {17042#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:37,896 INFO L290 TraceCheckUtils]: 8: Hoare triple {17042#(<= main_~x~0 500000)} [206] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_991 v_main_~x~0_990)) (.cse1 (= v_main_~y~0_723 v_main_~y~0_722)) (.cse2 (= |v_main_#t~post6_324| |v_main_#t~post6_322|)) (.cse3 (<= 750000 v_main_~x~0_991))) (or (and .cse0 .cse1 .cse2) (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_991 1000000)) (not .cse3))) (and (< v_main_~y~0_722 (+ v_main_~y~0_723 (div (+ 999999 (* v_main_~x~0_991 (- 1))) 2) 2)) (< v_main_~y~0_723 v_main_~y~0_722) (= (+ v_main_~x~0_990 (* v_main_~y~0_723 2)) (+ v_main_~x~0_991 (* v_main_~y~0_722 2))) .cse3))) InVars {main_~y~0=v_main_~y~0_723, main_~x~0=v_main_~x~0_991, main_#t~post6=|v_main_#t~post6_324|} OutVars{main_~y~0=v_main_~y~0_722, main_~x~0=v_main_~x~0_990, main_#t~post6=|v_main_#t~post6_322|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {17042#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:37,897 INFO L290 TraceCheckUtils]: 9: Hoare triple {17042#(<= main_~x~0 500000)} [207] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {17042#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:37,898 INFO L290 TraceCheckUtils]: 10: Hoare triple {17042#(<= main_~x~0 500000)} [208] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_725 v_main_~y~0_724)) (.cse1 (= |v_main_#t~post6_327| |v_main_#t~post6_323|)) (.cse2 (= |v_main_#t~post5_155| |v_main_#t~post5_154|)) (.cse3 (= v_main_~x~0_993 v_main_~x~0_992)) (.cse4 (<= 500000 v_main_~x~0_993))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 (or (not (< v_main_~x~0_993 750000)) (not .cse4)) .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_993 v_main_~y~0_724))) (and (= .cse5 (+ v_main_~x~0_992 v_main_~y~0_725)) (< v_main_~y~0_725 v_main_~y~0_724) .cse4 (< .cse5 (+ 750001 v_main_~y~0_725)))))) InVars {main_~y~0=v_main_~y~0_725, main_#t~post5=|v_main_#t~post5_155|, main_~x~0=v_main_~x~0_993, main_#t~post6=|v_main_#t~post6_327|} OutVars{main_~y~0=v_main_~y~0_724, main_#t~post5=|v_main_#t~post5_154|, main_~x~0=v_main_~x~0_992, main_#t~post6=|v_main_#t~post6_323|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {17043#(<= main_~x~0 1000000)} is VALID [2022-04-28 03:53:37,898 INFO L290 TraceCheckUtils]: 11: Hoare triple {17043#(<= main_~x~0 1000000)} [203] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {17044#(and (<= main_~x~0 1000000) (< 999999 main_~x~0))} is VALID [2022-04-28 03:53:37,899 INFO L272 TraceCheckUtils]: 12: Hoare triple {17044#(and (<= main_~x~0 1000000) (< 999999 main_~x~0))} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {17045#(not (= |__VERIFIER_assert_#in~cond| 0))} is VALID [2022-04-28 03:53:37,899 INFO L290 TraceCheckUtils]: 13: Hoare triple {17045#(not (= |__VERIFIER_assert_#in~cond| 0))} ~cond := #in~cond; {17046#(not (= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:53:37,900 INFO L290 TraceCheckUtils]: 14: Hoare triple {17046#(not (= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {17037#false} is VALID [2022-04-28 03:53:37,900 INFO L290 TraceCheckUtils]: 15: Hoare triple {17037#false} assume !false; {17037#false} is VALID [2022-04-28 03:53:37,900 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:53:37,900 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:53:37,900 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [845497479] [2022-04-28 03:53:37,900 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [845497479] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:53:37,900 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [64760396] [2022-04-28 03:53:37,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:53:37,900 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:53:37,901 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:53:37,904 INFO L229 MonitoredProcess]: Starting monitored process 27 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:53:37,908 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-04-28 03:53:37,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:37,937 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:53:37,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:37,947 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:53:38,138 INFO L272 TraceCheckUtils]: 0: Hoare triple {17036#true} call ULTIMATE.init(); {17036#true} is VALID [2022-04-28 03:53:38,138 INFO L290 TraceCheckUtils]: 1: Hoare triple {17036#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {17036#true} is VALID [2022-04-28 03:53:38,138 INFO L290 TraceCheckUtils]: 2: Hoare triple {17036#true} assume true; {17036#true} is VALID [2022-04-28 03:53:38,138 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {17036#true} {17036#true} #48#return; {17036#true} is VALID [2022-04-28 03:53:38,138 INFO L272 TraceCheckUtils]: 4: Hoare triple {17036#true} call #t~ret7 := main(); {17036#true} is VALID [2022-04-28 03:53:38,139 INFO L290 TraceCheckUtils]: 5: Hoare triple {17036#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {17066#(<= main_~x~0 0)} is VALID [2022-04-28 03:53:38,139 INFO L290 TraceCheckUtils]: 6: Hoare triple {17066#(<= main_~x~0 0)} [204] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_184| |v_main_#t~post4_183|)) (.cse1 (= v_main_~x~0_989 v_main_~x~0_988))) (or (and .cse0 .cse1 (not (< v_main_~x~0_989 500000))) (and .cse0 .cse1) (and (< v_main_~x~0_988 500001) (< v_main_~x~0_989 v_main_~x~0_988)))) InVars {main_~x~0=v_main_~x~0_989, main_#t~post4=|v_main_#t~post4_184|} OutVars{main_~x~0=v_main_~x~0_988, main_#t~post4=|v_main_#t~post4_183|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {17042#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:38,139 INFO L290 TraceCheckUtils]: 7: Hoare triple {17042#(<= main_~x~0 500000)} [205] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {17042#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:38,140 INFO L290 TraceCheckUtils]: 8: Hoare triple {17042#(<= main_~x~0 500000)} [206] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_991 v_main_~x~0_990)) (.cse1 (= v_main_~y~0_723 v_main_~y~0_722)) (.cse2 (= |v_main_#t~post6_324| |v_main_#t~post6_322|)) (.cse3 (<= 750000 v_main_~x~0_991))) (or (and .cse0 .cse1 .cse2) (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_991 1000000)) (not .cse3))) (and (< v_main_~y~0_722 (+ v_main_~y~0_723 (div (+ 999999 (* v_main_~x~0_991 (- 1))) 2) 2)) (< v_main_~y~0_723 v_main_~y~0_722) (= (+ v_main_~x~0_990 (* v_main_~y~0_723 2)) (+ v_main_~x~0_991 (* v_main_~y~0_722 2))) .cse3))) InVars {main_~y~0=v_main_~y~0_723, main_~x~0=v_main_~x~0_991, main_#t~post6=|v_main_#t~post6_324|} OutVars{main_~y~0=v_main_~y~0_722, main_~x~0=v_main_~x~0_990, main_#t~post6=|v_main_#t~post6_322|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {17042#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:38,141 INFO L290 TraceCheckUtils]: 9: Hoare triple {17042#(<= main_~x~0 500000)} [207] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {17042#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:38,141 INFO L290 TraceCheckUtils]: 10: Hoare triple {17042#(<= main_~x~0 500000)} [208] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_725 v_main_~y~0_724)) (.cse1 (= |v_main_#t~post6_327| |v_main_#t~post6_323|)) (.cse2 (= |v_main_#t~post5_155| |v_main_#t~post5_154|)) (.cse3 (= v_main_~x~0_993 v_main_~x~0_992)) (.cse4 (<= 500000 v_main_~x~0_993))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 (or (not (< v_main_~x~0_993 750000)) (not .cse4)) .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_993 v_main_~y~0_724))) (and (= .cse5 (+ v_main_~x~0_992 v_main_~y~0_725)) (< v_main_~y~0_725 v_main_~y~0_724) .cse4 (< .cse5 (+ 750001 v_main_~y~0_725)))))) InVars {main_~y~0=v_main_~y~0_725, main_#t~post5=|v_main_#t~post5_155|, main_~x~0=v_main_~x~0_993, main_#t~post6=|v_main_#t~post6_327|} OutVars{main_~y~0=v_main_~y~0_724, main_#t~post5=|v_main_#t~post5_154|, main_~x~0=v_main_~x~0_992, main_#t~post6=|v_main_#t~post6_323|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {17082#(< main_~x~0 750001)} is VALID [2022-04-28 03:53:38,142 INFO L290 TraceCheckUtils]: 11: Hoare triple {17082#(< main_~x~0 750001)} [203] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {17037#false} is VALID [2022-04-28 03:53:38,142 INFO L272 TraceCheckUtils]: 12: Hoare triple {17037#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {17037#false} is VALID [2022-04-28 03:53:38,142 INFO L290 TraceCheckUtils]: 13: Hoare triple {17037#false} ~cond := #in~cond; {17037#false} is VALID [2022-04-28 03:53:38,142 INFO L290 TraceCheckUtils]: 14: Hoare triple {17037#false} assume 0 == ~cond; {17037#false} is VALID [2022-04-28 03:53:38,142 INFO L290 TraceCheckUtils]: 15: Hoare triple {17037#false} assume !false; {17037#false} is VALID [2022-04-28 03:53:38,142 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:53:38,142 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:53:38,550 INFO L290 TraceCheckUtils]: 15: Hoare triple {17037#false} assume !false; {17037#false} is VALID [2022-04-28 03:53:38,551 INFO L290 TraceCheckUtils]: 14: Hoare triple {17101#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {17037#false} is VALID [2022-04-28 03:53:38,551 INFO L290 TraceCheckUtils]: 13: Hoare triple {17105#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {17101#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:53:38,555 INFO L272 TraceCheckUtils]: 12: Hoare triple {17044#(and (<= main_~x~0 1000000) (< 999999 main_~x~0))} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {17105#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:53:38,556 INFO L290 TraceCheckUtils]: 11: Hoare triple {17043#(<= main_~x~0 1000000)} [203] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {17044#(and (<= main_~x~0 1000000) (< 999999 main_~x~0))} is VALID [2022-04-28 03:53:38,557 INFO L290 TraceCheckUtils]: 10: Hoare triple {17043#(<= main_~x~0 1000000)} [208] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_725 v_main_~y~0_724)) (.cse1 (= |v_main_#t~post6_327| |v_main_#t~post6_323|)) (.cse2 (= |v_main_#t~post5_155| |v_main_#t~post5_154|)) (.cse3 (= v_main_~x~0_993 v_main_~x~0_992)) (.cse4 (<= 500000 v_main_~x~0_993))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 (or (not (< v_main_~x~0_993 750000)) (not .cse4)) .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_993 v_main_~y~0_724))) (and (= .cse5 (+ v_main_~x~0_992 v_main_~y~0_725)) (< v_main_~y~0_725 v_main_~y~0_724) .cse4 (< .cse5 (+ 750001 v_main_~y~0_725)))))) InVars {main_~y~0=v_main_~y~0_725, main_#t~post5=|v_main_#t~post5_155|, main_~x~0=v_main_~x~0_993, main_#t~post6=|v_main_#t~post6_327|} OutVars{main_~y~0=v_main_~y~0_724, main_#t~post5=|v_main_#t~post5_154|, main_~x~0=v_main_~x~0_992, main_#t~post6=|v_main_#t~post6_323|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {17043#(<= main_~x~0 1000000)} is VALID [2022-04-28 03:53:38,557 INFO L290 TraceCheckUtils]: 9: Hoare triple {17043#(<= main_~x~0 1000000)} [207] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {17043#(<= main_~x~0 1000000)} is VALID [2022-04-28 03:53:38,559 INFO L290 TraceCheckUtils]: 8: Hoare triple {17121#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (<= main_~x~0 1000000))} [206] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_991 v_main_~x~0_990)) (.cse1 (= v_main_~y~0_723 v_main_~y~0_722)) (.cse2 (= |v_main_#t~post6_324| |v_main_#t~post6_322|)) (.cse3 (<= 750000 v_main_~x~0_991))) (or (and .cse0 .cse1 .cse2) (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_991 1000000)) (not .cse3))) (and (< v_main_~y~0_722 (+ v_main_~y~0_723 (div (+ 999999 (* v_main_~x~0_991 (- 1))) 2) 2)) (< v_main_~y~0_723 v_main_~y~0_722) (= (+ v_main_~x~0_990 (* v_main_~y~0_723 2)) (+ v_main_~x~0_991 (* v_main_~y~0_722 2))) .cse3))) InVars {main_~y~0=v_main_~y~0_723, main_~x~0=v_main_~x~0_991, main_#t~post6=|v_main_#t~post6_324|} OutVars{main_~y~0=v_main_~y~0_722, main_~x~0=v_main_~x~0_990, main_#t~post6=|v_main_#t~post6_322|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {17043#(<= main_~x~0 1000000)} is VALID [2022-04-28 03:53:38,559 INFO L290 TraceCheckUtils]: 7: Hoare triple {17121#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (<= main_~x~0 1000000))} [205] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {17121#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (<= main_~x~0 1000000))} is VALID [2022-04-28 03:53:38,561 INFO L290 TraceCheckUtils]: 6: Hoare triple {17121#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (<= main_~x~0 1000000))} [204] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_184| |v_main_#t~post4_183|)) (.cse1 (= v_main_~x~0_989 v_main_~x~0_988))) (or (and .cse0 .cse1 (not (< v_main_~x~0_989 500000))) (and .cse0 .cse1) (and (< v_main_~x~0_988 500001) (< v_main_~x~0_989 v_main_~x~0_988)))) InVars {main_~x~0=v_main_~x~0_989, main_#t~post4=|v_main_#t~post4_184|} OutVars{main_~x~0=v_main_~x~0_988, main_#t~post4=|v_main_#t~post4_183|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {17121#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (<= main_~x~0 1000000))} is VALID [2022-04-28 03:53:38,561 INFO L290 TraceCheckUtils]: 5: Hoare triple {17036#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {17121#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (<= main_~x~0 1000000))} is VALID [2022-04-28 03:53:38,561 INFO L272 TraceCheckUtils]: 4: Hoare triple {17036#true} call #t~ret7 := main(); {17036#true} is VALID [2022-04-28 03:53:38,561 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {17036#true} {17036#true} #48#return; {17036#true} is VALID [2022-04-28 03:53:38,561 INFO L290 TraceCheckUtils]: 2: Hoare triple {17036#true} assume true; {17036#true} is VALID [2022-04-28 03:53:38,561 INFO L290 TraceCheckUtils]: 1: Hoare triple {17036#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {17036#true} is VALID [2022-04-28 03:53:38,562 INFO L272 TraceCheckUtils]: 0: Hoare triple {17036#true} call ULTIMATE.init(); {17036#true} is VALID [2022-04-28 03:53:38,562 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:53:38,562 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [64760396] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:53:38,562 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:53:38,562 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 7] total 14 [2022-04-28 03:53:39,521 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:53:39,521 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1341669903] [2022-04-28 03:53:39,521 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1341669903] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:53:39,521 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:53:39,521 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [35] imperfect sequences [] total 35 [2022-04-28 03:53:39,521 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [18188544] [2022-04-28 03:53:39,521 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:53:39,522 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 3.4411764705882355) internal successors, (117), 33 states have internal predecessors, (117), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 121 [2022-04-28 03:53:39,522 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:53:39,522 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 35 states, 34 states have (on average 3.4411764705882355) internal successors, (117), 33 states have internal predecessors, (117), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:39,602 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 121 edges. 121 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:53:39,602 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-04-28 03:53:39,602 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:53:39,602 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-04-28 03:53:39,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=196, Invalid=1610, Unknown=0, NotChecked=0, Total=1806 [2022-04-28 03:53:39,602 INFO L87 Difference]: Start difference. First operand 124 states and 128 transitions. Second operand has 35 states, 34 states have (on average 3.4411764705882355) internal successors, (117), 33 states have internal predecessors, (117), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:45,992 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:45,992 INFO L93 Difference]: Finished difference Result 151 states and 160 transitions. [2022-04-28 03:53:45,992 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-04-28 03:53:45,992 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 3.4411764705882355) internal successors, (117), 33 states have internal predecessors, (117), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 121 [2022-04-28 03:53:45,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:53:45,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 34 states have (on average 3.4411764705882355) internal successors, (117), 33 states have internal predecessors, (117), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:45,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 140 transitions. [2022-04-28 03:53:45,994 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 34 states have (on average 3.4411764705882355) internal successors, (117), 33 states have internal predecessors, (117), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:45,995 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 140 transitions. [2022-04-28 03:53:45,995 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 32 states and 140 transitions. [2022-04-28 03:53:46,107 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 140 edges. 140 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:53:46,109 INFO L225 Difference]: With dead ends: 151 [2022-04-28 03:53:46,109 INFO L226 Difference]: Without dead ends: 133 [2022-04-28 03:53:46,109 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 110 SyntacticMatches, 3 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 983 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=408, Invalid=4704, Unknown=0, NotChecked=0, Total=5112 [2022-04-28 03:53:46,110 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 93 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 3491 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 3523 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 3491 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2022-04-28 03:53:46,110 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [93 Valid, 190 Invalid, 3523 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 3491 Invalid, 0 Unknown, 0 Unchecked, 2.5s Time] [2022-04-28 03:53:46,110 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133 states. [2022-04-28 03:53:47,418 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133 to 128. [2022-04-28 03:53:47,418 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:53:47,418 INFO L82 GeneralOperation]: Start isEquivalent. First operand 133 states. Second operand has 128 states, 123 states have (on average 1.0406504065040652) internal successors, (128), 123 states have internal predecessors, (128), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:47,418 INFO L74 IsIncluded]: Start isIncluded. First operand 133 states. Second operand has 128 states, 123 states have (on average 1.0406504065040652) internal successors, (128), 123 states have internal predecessors, (128), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:47,418 INFO L87 Difference]: Start difference. First operand 133 states. Second operand has 128 states, 123 states have (on average 1.0406504065040652) internal successors, (128), 123 states have internal predecessors, (128), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:47,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:47,420 INFO L93 Difference]: Finished difference Result 133 states and 137 transitions. [2022-04-28 03:53:47,420 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 137 transitions. [2022-04-28 03:53:47,420 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:53:47,420 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:53:47,421 INFO L74 IsIncluded]: Start isIncluded. First operand has 128 states, 123 states have (on average 1.0406504065040652) internal successors, (128), 123 states have internal predecessors, (128), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 133 states. [2022-04-28 03:53:47,421 INFO L87 Difference]: Start difference. First operand has 128 states, 123 states have (on average 1.0406504065040652) internal successors, (128), 123 states have internal predecessors, (128), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 133 states. [2022-04-28 03:53:47,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:47,422 INFO L93 Difference]: Finished difference Result 133 states and 137 transitions. [2022-04-28 03:53:47,422 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 137 transitions. [2022-04-28 03:53:47,423 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:53:47,423 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:53:47,423 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:53:47,423 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:53:47,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 128 states, 123 states have (on average 1.0406504065040652) internal successors, (128), 123 states have internal predecessors, (128), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:47,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 128 states to 128 states and 132 transitions. [2022-04-28 03:53:47,424 INFO L78 Accepts]: Start accepts. Automaton has 128 states and 132 transitions. Word has length 121 [2022-04-28 03:53:47,425 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:53:47,425 INFO L495 AbstractCegarLoop]: Abstraction has 128 states and 132 transitions. [2022-04-28 03:53:47,425 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 3.4411764705882355) internal successors, (117), 33 states have internal predecessors, (117), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:47,425 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 128 states and 132 transitions. [2022-04-28 03:53:47,656 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 132 edges. 132 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:53:47,656 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 132 transitions. [2022-04-28 03:53:47,657 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2022-04-28 03:53:47,657 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:53:47,657 INFO L195 NwaCegarLoop]: trace histogram [29, 28, 28, 27, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:53:47,672 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-04-28 03:53:47,857 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-04-28 03:53:47,858 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:53:47,858 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:53:47,858 INFO L85 PathProgramCache]: Analyzing trace with hash 1613681741, now seen corresponding path program 26 times [2022-04-28 03:53:47,858 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:53:47,858 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [912551863] [2022-04-28 03:53:47,997 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:48,236 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:48,478 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:48,479 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:53:48,485 INFO L85 PathProgramCache]: Analyzing trace with hash 1929989415, now seen corresponding path program 1 times [2022-04-28 03:53:48,486 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:53:48,486 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [373752799] [2022-04-28 03:53:48,486 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:53:48,486 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:53:48,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:48,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:53:48,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:48,548 INFO L290 TraceCheckUtils]: 0: Hoare triple {18067#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {18059#true} is VALID [2022-04-28 03:53:48,548 INFO L290 TraceCheckUtils]: 1: Hoare triple {18059#true} assume true; {18059#true} is VALID [2022-04-28 03:53:48,548 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18059#true} {18059#true} #48#return; {18059#true} is VALID [2022-04-28 03:53:48,548 INFO L272 TraceCheckUtils]: 0: Hoare triple {18059#true} call ULTIMATE.init(); {18067#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:53:48,549 INFO L290 TraceCheckUtils]: 1: Hoare triple {18067#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {18059#true} is VALID [2022-04-28 03:53:48,549 INFO L290 TraceCheckUtils]: 2: Hoare triple {18059#true} assume true; {18059#true} is VALID [2022-04-28 03:53:48,549 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {18059#true} {18059#true} #48#return; {18059#true} is VALID [2022-04-28 03:53:48,549 INFO L272 TraceCheckUtils]: 4: Hoare triple {18059#true} call #t~ret7 := main(); {18059#true} is VALID [2022-04-28 03:53:48,549 INFO L290 TraceCheckUtils]: 5: Hoare triple {18059#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {18064#(= main_~x~0 0)} is VALID [2022-04-28 03:53:48,550 INFO L290 TraceCheckUtils]: 6: Hoare triple {18064#(= main_~x~0 0)} [210] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_191| |v_main_#t~post4_190|)) (.cse1 (= v_main_~x~0_1041 v_main_~x~0_1040))) (or (and (< v_main_~x~0_1041 v_main_~x~0_1040) (< v_main_~x~0_1040 500001)) (and .cse0 .cse1) (and .cse0 (not (< v_main_~x~0_1041 500000)) .cse1))) InVars {main_~x~0=v_main_~x~0_1041, main_#t~post4=|v_main_#t~post4_191|} OutVars{main_~x~0=v_main_~x~0_1040, main_#t~post4=|v_main_#t~post4_190|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {18065#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:48,550 INFO L290 TraceCheckUtils]: 7: Hoare triple {18065#(<= main_~x~0 500000)} [211] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {18065#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:48,551 INFO L290 TraceCheckUtils]: 8: Hoare triple {18065#(<= main_~x~0 500000)} [212] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1043)) (.cse1 (= v_main_~x~0_1043 v_main_~x~0_1042)) (.cse2 (= v_main_~y~0_765 v_main_~y~0_764)) (.cse3 (= |v_main_#t~post6_337| |v_main_#t~post6_335|))) (or (and .cse0 (< v_main_~y~0_764 (+ v_main_~y~0_765 2 (div (+ 999999 (* (- 1) v_main_~x~0_1043)) 2))) (< v_main_~y~0_765 v_main_~y~0_764) (= (+ v_main_~x~0_1043 (* v_main_~y~0_764 2)) (+ v_main_~x~0_1042 (* v_main_~y~0_765 2)))) (and .cse1 .cse2 .cse3) (and (or (not (< v_main_~x~0_1043 1000000)) (not .cse0)) .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_765, main_~x~0=v_main_~x~0_1043, main_#t~post6=|v_main_#t~post6_337|} OutVars{main_~y~0=v_main_~y~0_764, main_~x~0=v_main_~x~0_1042, main_#t~post6=|v_main_#t~post6_335|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {18065#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:48,552 INFO L290 TraceCheckUtils]: 9: Hoare triple {18065#(<= main_~x~0 500000)} [213] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {18065#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:48,553 INFO L290 TraceCheckUtils]: 10: Hoare triple {18065#(<= main_~x~0 500000)} [214] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1045)) (.cse2 (= v_main_~y~0_767 v_main_~y~0_766)) (.cse3 (= v_main_~x~0_1045 v_main_~x~0_1044)) (.cse4 (= |v_main_#t~post5_161| |v_main_#t~post5_160|))) (or (let ((.cse1 (+ v_main_~x~0_1045 v_main_~y~0_766))) (and .cse0 (< .cse1 (+ 750001 v_main_~y~0_767)) (= .cse1 (+ v_main_~x~0_1044 v_main_~y~0_767)) (< v_main_~y~0_767 v_main_~y~0_766))) (and .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_1045 750000))) (= |v_main_#t~post6_336| |v_main_#t~post6_340|) .cse4) (and .cse2 .cse3 (= |v_main_#t~post6_340| |v_main_#t~post6_336|) .cse4))) InVars {main_~y~0=v_main_~y~0_767, main_#t~post5=|v_main_#t~post5_161|, main_~x~0=v_main_~x~0_1045, main_#t~post6=|v_main_#t~post6_340|} OutVars{main_~y~0=v_main_~y~0_766, main_#t~post5=|v_main_#t~post5_160|, main_~x~0=v_main_~x~0_1044, main_#t~post6=|v_main_#t~post6_336|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {18066#(<= main_~x~0 750000)} is VALID [2022-04-28 03:53:48,553 INFO L290 TraceCheckUtils]: 11: Hoare triple {18066#(<= main_~x~0 750000)} [209] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {18060#false} is VALID [2022-04-28 03:53:48,553 INFO L272 TraceCheckUtils]: 12: Hoare triple {18060#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {18060#false} is VALID [2022-04-28 03:53:48,553 INFO L290 TraceCheckUtils]: 13: Hoare triple {18060#false} ~cond := #in~cond; {18060#false} is VALID [2022-04-28 03:53:48,553 INFO L290 TraceCheckUtils]: 14: Hoare triple {18060#false} assume 0 == ~cond; {18060#false} is VALID [2022-04-28 03:53:48,553 INFO L290 TraceCheckUtils]: 15: Hoare triple {18060#false} assume !false; {18060#false} is VALID [2022-04-28 03:53:48,554 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:53:48,554 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:53:48,554 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [373752799] [2022-04-28 03:53:48,554 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [373752799] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:53:48,554 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1802947229] [2022-04-28 03:53:48,554 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:53:48,554 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:53:48,554 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:53:48,556 INFO L229 MonitoredProcess]: Starting monitored process 28 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:53:48,583 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-04-28 03:53:48,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:48,596 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:53:48,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:48,606 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:53:48,798 INFO L272 TraceCheckUtils]: 0: Hoare triple {18059#true} call ULTIMATE.init(); {18059#true} is VALID [2022-04-28 03:53:48,798 INFO L290 TraceCheckUtils]: 1: Hoare triple {18059#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {18059#true} is VALID [2022-04-28 03:53:48,798 INFO L290 TraceCheckUtils]: 2: Hoare triple {18059#true} assume true; {18059#true} is VALID [2022-04-28 03:53:48,798 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {18059#true} {18059#true} #48#return; {18059#true} is VALID [2022-04-28 03:53:48,798 INFO L272 TraceCheckUtils]: 4: Hoare triple {18059#true} call #t~ret7 := main(); {18059#true} is VALID [2022-04-28 03:53:48,799 INFO L290 TraceCheckUtils]: 5: Hoare triple {18059#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {18086#(<= main_~x~0 0)} is VALID [2022-04-28 03:53:48,799 INFO L290 TraceCheckUtils]: 6: Hoare triple {18086#(<= main_~x~0 0)} [210] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_191| |v_main_#t~post4_190|)) (.cse1 (= v_main_~x~0_1041 v_main_~x~0_1040))) (or (and (< v_main_~x~0_1041 v_main_~x~0_1040) (< v_main_~x~0_1040 500001)) (and .cse0 .cse1) (and .cse0 (not (< v_main_~x~0_1041 500000)) .cse1))) InVars {main_~x~0=v_main_~x~0_1041, main_#t~post4=|v_main_#t~post4_191|} OutVars{main_~x~0=v_main_~x~0_1040, main_#t~post4=|v_main_#t~post4_190|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {18065#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:48,800 INFO L290 TraceCheckUtils]: 7: Hoare triple {18065#(<= main_~x~0 500000)} [211] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {18065#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:48,800 INFO L290 TraceCheckUtils]: 8: Hoare triple {18065#(<= main_~x~0 500000)} [212] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1043)) (.cse1 (= v_main_~x~0_1043 v_main_~x~0_1042)) (.cse2 (= v_main_~y~0_765 v_main_~y~0_764)) (.cse3 (= |v_main_#t~post6_337| |v_main_#t~post6_335|))) (or (and .cse0 (< v_main_~y~0_764 (+ v_main_~y~0_765 2 (div (+ 999999 (* (- 1) v_main_~x~0_1043)) 2))) (< v_main_~y~0_765 v_main_~y~0_764) (= (+ v_main_~x~0_1043 (* v_main_~y~0_764 2)) (+ v_main_~x~0_1042 (* v_main_~y~0_765 2)))) (and .cse1 .cse2 .cse3) (and (or (not (< v_main_~x~0_1043 1000000)) (not .cse0)) .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_765, main_~x~0=v_main_~x~0_1043, main_#t~post6=|v_main_#t~post6_337|} OutVars{main_~y~0=v_main_~y~0_764, main_~x~0=v_main_~x~0_1042, main_#t~post6=|v_main_#t~post6_335|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {18065#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:48,801 INFO L290 TraceCheckUtils]: 9: Hoare triple {18065#(<= main_~x~0 500000)} [213] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {18065#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:48,801 INFO L290 TraceCheckUtils]: 10: Hoare triple {18065#(<= main_~x~0 500000)} [214] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1045)) (.cse2 (= v_main_~y~0_767 v_main_~y~0_766)) (.cse3 (= v_main_~x~0_1045 v_main_~x~0_1044)) (.cse4 (= |v_main_#t~post5_161| |v_main_#t~post5_160|))) (or (let ((.cse1 (+ v_main_~x~0_1045 v_main_~y~0_766))) (and .cse0 (< .cse1 (+ 750001 v_main_~y~0_767)) (= .cse1 (+ v_main_~x~0_1044 v_main_~y~0_767)) (< v_main_~y~0_767 v_main_~y~0_766))) (and .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_1045 750000))) (= |v_main_#t~post6_336| |v_main_#t~post6_340|) .cse4) (and .cse2 .cse3 (= |v_main_#t~post6_340| |v_main_#t~post6_336|) .cse4))) InVars {main_~y~0=v_main_~y~0_767, main_#t~post5=|v_main_#t~post5_161|, main_~x~0=v_main_~x~0_1045, main_#t~post6=|v_main_#t~post6_340|} OutVars{main_~y~0=v_main_~y~0_766, main_#t~post5=|v_main_#t~post5_160|, main_~x~0=v_main_~x~0_1044, main_#t~post6=|v_main_#t~post6_336|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {18066#(<= main_~x~0 750000)} is VALID [2022-04-28 03:53:48,802 INFO L290 TraceCheckUtils]: 11: Hoare triple {18066#(<= main_~x~0 750000)} [209] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {18060#false} is VALID [2022-04-28 03:53:48,802 INFO L272 TraceCheckUtils]: 12: Hoare triple {18060#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {18060#false} is VALID [2022-04-28 03:53:48,802 INFO L290 TraceCheckUtils]: 13: Hoare triple {18060#false} ~cond := #in~cond; {18060#false} is VALID [2022-04-28 03:53:48,802 INFO L290 TraceCheckUtils]: 14: Hoare triple {18060#false} assume 0 == ~cond; {18060#false} is VALID [2022-04-28 03:53:48,802 INFO L290 TraceCheckUtils]: 15: Hoare triple {18060#false} assume !false; {18060#false} is VALID [2022-04-28 03:53:48,802 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:53:48,802 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:53:49,280 INFO L290 TraceCheckUtils]: 15: Hoare triple {18060#false} assume !false; {18060#false} is VALID [2022-04-28 03:53:49,280 INFO L290 TraceCheckUtils]: 14: Hoare triple {18120#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {18060#false} is VALID [2022-04-28 03:53:49,281 INFO L290 TraceCheckUtils]: 13: Hoare triple {18124#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {18120#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:53:49,281 INFO L272 TraceCheckUtils]: 12: Hoare triple {18128#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {18124#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:53:49,281 INFO L290 TraceCheckUtils]: 11: Hoare triple {18132#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [209] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {18128#(= main_~x~0 1000000)} is VALID [2022-04-28 03:53:49,282 INFO L290 TraceCheckUtils]: 10: Hoare triple {18132#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [214] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1045)) (.cse2 (= v_main_~y~0_767 v_main_~y~0_766)) (.cse3 (= v_main_~x~0_1045 v_main_~x~0_1044)) (.cse4 (= |v_main_#t~post5_161| |v_main_#t~post5_160|))) (or (let ((.cse1 (+ v_main_~x~0_1045 v_main_~y~0_766))) (and .cse0 (< .cse1 (+ 750001 v_main_~y~0_767)) (= .cse1 (+ v_main_~x~0_1044 v_main_~y~0_767)) (< v_main_~y~0_767 v_main_~y~0_766))) (and .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_1045 750000))) (= |v_main_#t~post6_336| |v_main_#t~post6_340|) .cse4) (and .cse2 .cse3 (= |v_main_#t~post6_340| |v_main_#t~post6_336|) .cse4))) InVars {main_~y~0=v_main_~y~0_767, main_#t~post5=|v_main_#t~post5_161|, main_~x~0=v_main_~x~0_1045, main_#t~post6=|v_main_#t~post6_340|} OutVars{main_~y~0=v_main_~y~0_766, main_#t~post5=|v_main_#t~post5_160|, main_~x~0=v_main_~x~0_1044, main_#t~post6=|v_main_#t~post6_336|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {18132#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:53:49,283 INFO L290 TraceCheckUtils]: 9: Hoare triple {18132#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [213] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {18132#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:53:49,284 INFO L290 TraceCheckUtils]: 8: Hoare triple {18142#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [212] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1043)) (.cse1 (= v_main_~x~0_1043 v_main_~x~0_1042)) (.cse2 (= v_main_~y~0_765 v_main_~y~0_764)) (.cse3 (= |v_main_#t~post6_337| |v_main_#t~post6_335|))) (or (and .cse0 (< v_main_~y~0_764 (+ v_main_~y~0_765 2 (div (+ 999999 (* (- 1) v_main_~x~0_1043)) 2))) (< v_main_~y~0_765 v_main_~y~0_764) (= (+ v_main_~x~0_1043 (* v_main_~y~0_764 2)) (+ v_main_~x~0_1042 (* v_main_~y~0_765 2)))) (and .cse1 .cse2 .cse3) (and (or (not (< v_main_~x~0_1043 1000000)) (not .cse0)) .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_765, main_~x~0=v_main_~x~0_1043, main_#t~post6=|v_main_#t~post6_337|} OutVars{main_~y~0=v_main_~y~0_764, main_~x~0=v_main_~x~0_1042, main_#t~post6=|v_main_#t~post6_335|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {18132#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:53:49,284 INFO L290 TraceCheckUtils]: 7: Hoare triple {18142#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [211] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {18142#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:53:49,285 INFO L290 TraceCheckUtils]: 6: Hoare triple {18142#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [210] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_191| |v_main_#t~post4_190|)) (.cse1 (= v_main_~x~0_1041 v_main_~x~0_1040))) (or (and (< v_main_~x~0_1041 v_main_~x~0_1040) (< v_main_~x~0_1040 500001)) (and .cse0 .cse1) (and .cse0 (not (< v_main_~x~0_1041 500000)) .cse1))) InVars {main_~x~0=v_main_~x~0_1041, main_#t~post4=|v_main_#t~post4_191|} OutVars{main_~x~0=v_main_~x~0_1040, main_#t~post4=|v_main_#t~post4_190|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {18142#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:53:49,286 INFO L290 TraceCheckUtils]: 5: Hoare triple {18059#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {18142#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:53:49,286 INFO L272 TraceCheckUtils]: 4: Hoare triple {18059#true} call #t~ret7 := main(); {18059#true} is VALID [2022-04-28 03:53:49,286 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {18059#true} {18059#true} #48#return; {18059#true} is VALID [2022-04-28 03:53:49,286 INFO L290 TraceCheckUtils]: 2: Hoare triple {18059#true} assume true; {18059#true} is VALID [2022-04-28 03:53:49,286 INFO L290 TraceCheckUtils]: 1: Hoare triple {18059#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {18059#true} is VALID [2022-04-28 03:53:49,286 INFO L272 TraceCheckUtils]: 0: Hoare triple {18059#true} call ULTIMATE.init(); {18059#true} is VALID [2022-04-28 03:53:49,286 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:53:49,286 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1802947229] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:53:49,287 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:53:49,287 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:53:50,240 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:53:50,240 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [912551863] [2022-04-28 03:53:50,240 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [912551863] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:53:50,240 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:53:50,240 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [33] imperfect sequences [] total 33 [2022-04-28 03:53:50,240 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2131014330] [2022-04-28 03:53:50,240 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:53:50,241 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 3.6666666666666665) internal successors, (121), 32 states have internal predecessors, (121), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 125 [2022-04-28 03:53:50,241 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:53:50,241 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 33 states, 33 states have (on average 3.6666666666666665) internal successors, (121), 32 states have internal predecessors, (121), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:50,343 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 125 edges. 125 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:53:50,343 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-04-28 03:53:50,343 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:53:50,343 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-04-28 03:53:50,344 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=195, Invalid=1527, Unknown=0, NotChecked=0, Total=1722 [2022-04-28 03:53:50,344 INFO L87 Difference]: Start difference. First operand 128 states and 132 transitions. Second operand has 33 states, 33 states have (on average 3.6666666666666665) internal successors, (121), 32 states have internal predecessors, (121), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:56,907 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:56,907 INFO L93 Difference]: Finished difference Result 155 states and 164 transitions. [2022-04-28 03:53:56,907 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-04-28 03:53:56,908 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 3.6666666666666665) internal successors, (121), 32 states have internal predecessors, (121), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 125 [2022-04-28 03:53:56,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:53:56,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 33 states have (on average 3.6666666666666665) internal successors, (121), 32 states have internal predecessors, (121), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:56,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 144 transitions. [2022-04-28 03:53:56,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 33 states have (on average 3.6666666666666665) internal successors, (121), 32 states have internal predecessors, (121), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:56,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 144 transitions. [2022-04-28 03:53:56,910 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 33 states and 144 transitions. [2022-04-28 03:53:57,017 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 144 edges. 144 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:53:57,018 INFO L225 Difference]: With dead ends: 155 [2022-04-28 03:53:57,019 INFO L226 Difference]: Without dead ends: 137 [2022-04-28 03:53:57,019 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 188 GetRequests, 115 SyntacticMatches, 3 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 919 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=414, Invalid=4698, Unknown=0, NotChecked=0, Total=5112 [2022-04-28 03:53:57,019 INFO L413 NwaCegarLoop]: 39 mSDtfsCounter, 95 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 3484 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 186 SdHoareTripleChecker+Invalid, 3517 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 3484 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2022-04-28 03:53:57,020 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [95 Valid, 186 Invalid, 3517 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 3484 Invalid, 0 Unknown, 0 Unchecked, 2.5s Time] [2022-04-28 03:53:57,020 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2022-04-28 03:53:58,443 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 132. [2022-04-28 03:53:58,443 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:53:58,443 INFO L82 GeneralOperation]: Start isEquivalent. First operand 137 states. Second operand has 132 states, 127 states have (on average 1.0393700787401574) internal successors, (132), 127 states have internal predecessors, (132), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:58,444 INFO L74 IsIncluded]: Start isIncluded. First operand 137 states. Second operand has 132 states, 127 states have (on average 1.0393700787401574) internal successors, (132), 127 states have internal predecessors, (132), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:58,444 INFO L87 Difference]: Start difference. First operand 137 states. Second operand has 132 states, 127 states have (on average 1.0393700787401574) internal successors, (132), 127 states have internal predecessors, (132), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:58,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:58,445 INFO L93 Difference]: Finished difference Result 137 states and 141 transitions. [2022-04-28 03:53:58,445 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 141 transitions. [2022-04-28 03:53:58,445 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:53:58,445 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:53:58,445 INFO L74 IsIncluded]: Start isIncluded. First operand has 132 states, 127 states have (on average 1.0393700787401574) internal successors, (132), 127 states have internal predecessors, (132), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 137 states. [2022-04-28 03:53:58,445 INFO L87 Difference]: Start difference. First operand has 132 states, 127 states have (on average 1.0393700787401574) internal successors, (132), 127 states have internal predecessors, (132), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 137 states. [2022-04-28 03:53:58,447 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:53:58,447 INFO L93 Difference]: Finished difference Result 137 states and 141 transitions. [2022-04-28 03:53:58,447 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 141 transitions. [2022-04-28 03:53:58,447 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:53:58,447 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:53:58,447 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:53:58,447 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:53:58,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 132 states, 127 states have (on average 1.0393700787401574) internal successors, (132), 127 states have internal predecessors, (132), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:58,449 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 132 states to 132 states and 136 transitions. [2022-04-28 03:53:58,449 INFO L78 Accepts]: Start accepts. Automaton has 132 states and 136 transitions. Word has length 125 [2022-04-28 03:53:58,449 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:53:58,449 INFO L495 AbstractCegarLoop]: Abstraction has 132 states and 136 transitions. [2022-04-28 03:53:58,450 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 3.6666666666666665) internal successors, (121), 32 states have internal predecessors, (121), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:53:58,450 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 132 states and 136 transitions. [2022-04-28 03:53:58,705 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 136 edges. 136 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:53:58,705 INFO L276 IsEmpty]: Start isEmpty. Operand 132 states and 136 transitions. [2022-04-28 03:53:58,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 130 [2022-04-28 03:53:58,706 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:53:58,706 INFO L195 NwaCegarLoop]: trace histogram [30, 29, 29, 28, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:53:58,728 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Ended with exit code 0 [2022-04-28 03:53:58,929 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-04-28 03:53:58,929 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:53:58,929 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:53:58,929 INFO L85 PathProgramCache]: Analyzing trace with hash -166347484, now seen corresponding path program 27 times [2022-04-28 03:53:58,929 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:53:58,929 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [854958482] [2022-04-28 03:53:59,026 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:59,569 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:59,774 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:53:59,775 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:53:59,778 INFO L85 PathProgramCache]: Analyzing trace with hash 1570414439, now seen corresponding path program 1 times [2022-04-28 03:53:59,778 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:53:59,778 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1901563480] [2022-04-28 03:53:59,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:53:59,779 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:53:59,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:59,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:53:59,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:59,836 INFO L290 TraceCheckUtils]: 0: Hoare triple {19115#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {19107#true} is VALID [2022-04-28 03:53:59,836 INFO L290 TraceCheckUtils]: 1: Hoare triple {19107#true} assume true; {19107#true} is VALID [2022-04-28 03:53:59,836 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19107#true} {19107#true} #48#return; {19107#true} is VALID [2022-04-28 03:53:59,837 INFO L272 TraceCheckUtils]: 0: Hoare triple {19107#true} call ULTIMATE.init(); {19115#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:53:59,837 INFO L290 TraceCheckUtils]: 1: Hoare triple {19115#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {19107#true} is VALID [2022-04-28 03:53:59,837 INFO L290 TraceCheckUtils]: 2: Hoare triple {19107#true} assume true; {19107#true} is VALID [2022-04-28 03:53:59,837 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {19107#true} {19107#true} #48#return; {19107#true} is VALID [2022-04-28 03:53:59,837 INFO L272 TraceCheckUtils]: 4: Hoare triple {19107#true} call #t~ret7 := main(); {19107#true} is VALID [2022-04-28 03:53:59,837 INFO L290 TraceCheckUtils]: 5: Hoare triple {19107#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {19112#(= main_~x~0 0)} is VALID [2022-04-28 03:53:59,838 INFO L290 TraceCheckUtils]: 6: Hoare triple {19112#(= main_~x~0 0)} [216] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_198| |v_main_#t~post4_197|))) (or (and (< v_main_~x~0_1094 v_main_~x~0_1093) (< v_main_~x~0_1093 500001)) (and (not (< v_main_~x~0_1094 500000)) (= v_main_~x~0_1093 v_main_~x~0_1094) .cse0) (and .cse0 (= v_main_~x~0_1094 v_main_~x~0_1093)))) InVars {main_~x~0=v_main_~x~0_1094, main_#t~post4=|v_main_#t~post4_198|} OutVars{main_~x~0=v_main_~x~0_1093, main_#t~post4=|v_main_#t~post4_197|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {19113#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:59,838 INFO L290 TraceCheckUtils]: 7: Hoare triple {19113#(<= main_~x~0 500000)} [217] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {19113#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:59,839 INFO L290 TraceCheckUtils]: 8: Hoare triple {19113#(<= main_~x~0 500000)} [218] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1096)) (.cse1 (= v_main_~y~0_808 v_main_~y~0_807)) (.cse2 (= v_main_~x~0_1096 v_main_~x~0_1095)) (.cse3 (= |v_main_#t~post6_350| |v_main_#t~post6_348|))) (or (and (< v_main_~y~0_808 v_main_~y~0_807) .cse0 (< v_main_~y~0_807 (+ (div (+ (* (- 1) v_main_~x~0_1096) 999999) 2) v_main_~y~0_808 2)) (= (+ v_main_~x~0_1096 (* v_main_~y~0_807 2)) (+ v_main_~x~0_1095 (* v_main_~y~0_808 2)))) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_1096 1000000)))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_808, main_~x~0=v_main_~x~0_1096, main_#t~post6=|v_main_#t~post6_350|} OutVars{main_~y~0=v_main_~y~0_807, main_~x~0=v_main_~x~0_1095, main_#t~post6=|v_main_#t~post6_348|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {19113#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:59,839 INFO L290 TraceCheckUtils]: 9: Hoare triple {19113#(<= main_~x~0 500000)} [219] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {19113#(<= main_~x~0 500000)} is VALID [2022-04-28 03:53:59,840 INFO L290 TraceCheckUtils]: 10: Hoare triple {19113#(<= main_~x~0 500000)} [220] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_1098)) (.cse2 (= |v_main_#t~post6_353| |v_main_#t~post6_349|)) (.cse3 (= v_main_~y~0_810 v_main_~y~0_809)) (.cse4 (= |v_main_#t~post5_167| |v_main_#t~post5_166|)) (.cse5 (= v_main_~x~0_1098 v_main_~x~0_1097))) (or (let ((.cse0 (+ v_main_~x~0_1098 v_main_~y~0_809))) (and (< .cse0 (+ 750001 v_main_~y~0_810)) (< v_main_~y~0_810 v_main_~y~0_809) (= .cse0 (+ v_main_~x~0_1097 v_main_~y~0_810)) .cse1)) (and .cse2 .cse3 .cse4 (or (not (< v_main_~x~0_1098 750000)) (not .cse1)) .cse5) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_810, main_#t~post5=|v_main_#t~post5_167|, main_~x~0=v_main_~x~0_1098, main_#t~post6=|v_main_#t~post6_353|} OutVars{main_~y~0=v_main_~y~0_809, main_#t~post5=|v_main_#t~post5_166|, main_~x~0=v_main_~x~0_1097, main_#t~post6=|v_main_#t~post6_349|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {19114#(<= main_~x~0 750000)} is VALID [2022-04-28 03:53:59,840 INFO L290 TraceCheckUtils]: 11: Hoare triple {19114#(<= main_~x~0 750000)} [215] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {19108#false} is VALID [2022-04-28 03:53:59,840 INFO L272 TraceCheckUtils]: 12: Hoare triple {19108#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {19108#false} is VALID [2022-04-28 03:53:59,840 INFO L290 TraceCheckUtils]: 13: Hoare triple {19108#false} ~cond := #in~cond; {19108#false} is VALID [2022-04-28 03:53:59,840 INFO L290 TraceCheckUtils]: 14: Hoare triple {19108#false} assume 0 == ~cond; {19108#false} is VALID [2022-04-28 03:53:59,840 INFO L290 TraceCheckUtils]: 15: Hoare triple {19108#false} assume !false; {19108#false} is VALID [2022-04-28 03:53:59,841 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:53:59,841 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:53:59,841 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1901563480] [2022-04-28 03:53:59,841 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1901563480] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:53:59,841 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1008207252] [2022-04-28 03:53:59,841 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:53:59,841 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:53:59,841 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:53:59,842 INFO L229 MonitoredProcess]: Starting monitored process 29 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:53:59,843 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-04-28 03:53:59,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:59,870 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 9 conjunts are in the unsatisfiable core [2022-04-28 03:53:59,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:53:59,890 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:54:00,156 INFO L272 TraceCheckUtils]: 0: Hoare triple {19107#true} call ULTIMATE.init(); {19107#true} is VALID [2022-04-28 03:54:00,156 INFO L290 TraceCheckUtils]: 1: Hoare triple {19107#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {19107#true} is VALID [2022-04-28 03:54:00,156 INFO L290 TraceCheckUtils]: 2: Hoare triple {19107#true} assume true; {19107#true} is VALID [2022-04-28 03:54:00,156 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {19107#true} {19107#true} #48#return; {19107#true} is VALID [2022-04-28 03:54:00,157 INFO L272 TraceCheckUtils]: 4: Hoare triple {19107#true} call #t~ret7 := main(); {19107#true} is VALID [2022-04-28 03:54:00,157 INFO L290 TraceCheckUtils]: 5: Hoare triple {19107#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {19112#(= main_~x~0 0)} is VALID [2022-04-28 03:54:00,157 INFO L290 TraceCheckUtils]: 6: Hoare triple {19112#(= main_~x~0 0)} [216] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_198| |v_main_#t~post4_197|))) (or (and (< v_main_~x~0_1094 v_main_~x~0_1093) (< v_main_~x~0_1093 500001)) (and (not (< v_main_~x~0_1094 500000)) (= v_main_~x~0_1093 v_main_~x~0_1094) .cse0) (and .cse0 (= v_main_~x~0_1094 v_main_~x~0_1093)))) InVars {main_~x~0=v_main_~x~0_1094, main_#t~post4=|v_main_#t~post4_198|} OutVars{main_~x~0=v_main_~x~0_1093, main_#t~post4=|v_main_#t~post4_197|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {19137#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:54:00,158 INFO L290 TraceCheckUtils]: 7: Hoare triple {19137#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [217] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {19137#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:54:00,159 INFO L290 TraceCheckUtils]: 8: Hoare triple {19137#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [218] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1096)) (.cse1 (= v_main_~y~0_808 v_main_~y~0_807)) (.cse2 (= v_main_~x~0_1096 v_main_~x~0_1095)) (.cse3 (= |v_main_#t~post6_350| |v_main_#t~post6_348|))) (or (and (< v_main_~y~0_808 v_main_~y~0_807) .cse0 (< v_main_~y~0_807 (+ (div (+ (* (- 1) v_main_~x~0_1096) 999999) 2) v_main_~y~0_808 2)) (= (+ v_main_~x~0_1096 (* v_main_~y~0_807 2)) (+ v_main_~x~0_1095 (* v_main_~y~0_808 2)))) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_1096 1000000)))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_808, main_~x~0=v_main_~x~0_1096, main_#t~post6=|v_main_#t~post6_350|} OutVars{main_~y~0=v_main_~y~0_807, main_~x~0=v_main_~x~0_1095, main_#t~post6=|v_main_#t~post6_348|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {19137#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:54:00,159 INFO L290 TraceCheckUtils]: 9: Hoare triple {19137#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [219] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {19137#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:54:00,160 INFO L290 TraceCheckUtils]: 10: Hoare triple {19137#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [220] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_1098)) (.cse2 (= |v_main_#t~post6_353| |v_main_#t~post6_349|)) (.cse3 (= v_main_~y~0_810 v_main_~y~0_809)) (.cse4 (= |v_main_#t~post5_167| |v_main_#t~post5_166|)) (.cse5 (= v_main_~x~0_1098 v_main_~x~0_1097))) (or (let ((.cse0 (+ v_main_~x~0_1098 v_main_~y~0_809))) (and (< .cse0 (+ 750001 v_main_~y~0_810)) (< v_main_~y~0_810 v_main_~y~0_809) (= .cse0 (+ v_main_~x~0_1097 v_main_~y~0_810)) .cse1)) (and .cse2 .cse3 .cse4 (or (not (< v_main_~x~0_1098 750000)) (not .cse1)) .cse5) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_810, main_#t~post5=|v_main_#t~post5_167|, main_~x~0=v_main_~x~0_1098, main_#t~post6=|v_main_#t~post6_353|} OutVars{main_~y~0=v_main_~y~0_809, main_#t~post5=|v_main_#t~post5_166|, main_~x~0=v_main_~x~0_1097, main_#t~post6=|v_main_#t~post6_349|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {19150#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} is VALID [2022-04-28 03:54:00,160 INFO L290 TraceCheckUtils]: 11: Hoare triple {19150#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} [215] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {19108#false} is VALID [2022-04-28 03:54:00,160 INFO L272 TraceCheckUtils]: 12: Hoare triple {19108#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {19108#false} is VALID [2022-04-28 03:54:00,160 INFO L290 TraceCheckUtils]: 13: Hoare triple {19108#false} ~cond := #in~cond; {19108#false} is VALID [2022-04-28 03:54:00,160 INFO L290 TraceCheckUtils]: 14: Hoare triple {19108#false} assume 0 == ~cond; {19108#false} is VALID [2022-04-28 03:54:00,161 INFO L290 TraceCheckUtils]: 15: Hoare triple {19108#false} assume !false; {19108#false} is VALID [2022-04-28 03:54:00,161 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:54:00,161 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:54:00,626 INFO L290 TraceCheckUtils]: 15: Hoare triple {19108#false} assume !false; {19108#false} is VALID [2022-04-28 03:54:00,626 INFO L290 TraceCheckUtils]: 14: Hoare triple {19169#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {19108#false} is VALID [2022-04-28 03:54:00,627 INFO L290 TraceCheckUtils]: 13: Hoare triple {19173#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {19169#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:54:00,627 INFO L272 TraceCheckUtils]: 12: Hoare triple {19177#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {19173#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:54:00,628 INFO L290 TraceCheckUtils]: 11: Hoare triple {19181#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [215] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {19177#(= main_~x~0 1000000)} is VALID [2022-04-28 03:54:00,629 INFO L290 TraceCheckUtils]: 10: Hoare triple {19181#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [220] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_1098)) (.cse2 (= |v_main_#t~post6_353| |v_main_#t~post6_349|)) (.cse3 (= v_main_~y~0_810 v_main_~y~0_809)) (.cse4 (= |v_main_#t~post5_167| |v_main_#t~post5_166|)) (.cse5 (= v_main_~x~0_1098 v_main_~x~0_1097))) (or (let ((.cse0 (+ v_main_~x~0_1098 v_main_~y~0_809))) (and (< .cse0 (+ 750001 v_main_~y~0_810)) (< v_main_~y~0_810 v_main_~y~0_809) (= .cse0 (+ v_main_~x~0_1097 v_main_~y~0_810)) .cse1)) (and .cse2 .cse3 .cse4 (or (not (< v_main_~x~0_1098 750000)) (not .cse1)) .cse5) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_810, main_#t~post5=|v_main_#t~post5_167|, main_~x~0=v_main_~x~0_1098, main_#t~post6=|v_main_#t~post6_353|} OutVars{main_~y~0=v_main_~y~0_809, main_#t~post5=|v_main_#t~post5_166|, main_~x~0=v_main_~x~0_1097, main_#t~post6=|v_main_#t~post6_349|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {19181#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:54:00,629 INFO L290 TraceCheckUtils]: 9: Hoare triple {19181#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [219] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {19181#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:54:00,630 INFO L290 TraceCheckUtils]: 8: Hoare triple {19191#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [218] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1096)) (.cse1 (= v_main_~y~0_808 v_main_~y~0_807)) (.cse2 (= v_main_~x~0_1096 v_main_~x~0_1095)) (.cse3 (= |v_main_#t~post6_350| |v_main_#t~post6_348|))) (or (and (< v_main_~y~0_808 v_main_~y~0_807) .cse0 (< v_main_~y~0_807 (+ (div (+ (* (- 1) v_main_~x~0_1096) 999999) 2) v_main_~y~0_808 2)) (= (+ v_main_~x~0_1096 (* v_main_~y~0_807 2)) (+ v_main_~x~0_1095 (* v_main_~y~0_808 2)))) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_1096 1000000)))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_808, main_~x~0=v_main_~x~0_1096, main_#t~post6=|v_main_#t~post6_350|} OutVars{main_~y~0=v_main_~y~0_807, main_~x~0=v_main_~x~0_1095, main_#t~post6=|v_main_#t~post6_348|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {19181#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:54:00,631 INFO L290 TraceCheckUtils]: 7: Hoare triple {19191#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [217] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {19191#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 03:54:00,632 INFO L290 TraceCheckUtils]: 6: Hoare triple {19191#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [216] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_198| |v_main_#t~post4_197|))) (or (and (< v_main_~x~0_1094 v_main_~x~0_1093) (< v_main_~x~0_1093 500001)) (and (not (< v_main_~x~0_1094 500000)) (= v_main_~x~0_1093 v_main_~x~0_1094) .cse0) (and .cse0 (= v_main_~x~0_1094 v_main_~x~0_1093)))) InVars {main_~x~0=v_main_~x~0_1094, main_#t~post4=|v_main_#t~post4_198|} OutVars{main_~x~0=v_main_~x~0_1093, main_#t~post4=|v_main_#t~post4_197|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {19191#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 03:54:00,632 INFO L290 TraceCheckUtils]: 5: Hoare triple {19107#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {19191#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 03:54:00,633 INFO L272 TraceCheckUtils]: 4: Hoare triple {19107#true} call #t~ret7 := main(); {19107#true} is VALID [2022-04-28 03:54:00,633 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {19107#true} {19107#true} #48#return; {19107#true} is VALID [2022-04-28 03:54:00,633 INFO L290 TraceCheckUtils]: 2: Hoare triple {19107#true} assume true; {19107#true} is VALID [2022-04-28 03:54:00,633 INFO L290 TraceCheckUtils]: 1: Hoare triple {19107#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {19107#true} is VALID [2022-04-28 03:54:00,633 INFO L272 TraceCheckUtils]: 0: Hoare triple {19107#true} call ULTIMATE.init(); {19107#true} is VALID [2022-04-28 03:54:00,633 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:54:00,633 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1008207252] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:54:00,633 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:54:00,633 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:54:01,627 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:54:01,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [854958482] [2022-04-28 03:54:01,627 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [854958482] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:54:01,627 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:54:01,627 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [34] imperfect sequences [] total 34 [2022-04-28 03:54:01,627 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [334966672] [2022-04-28 03:54:01,627 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:54:01,628 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 34 states have (on average 3.676470588235294) internal successors, (125), 33 states have internal predecessors, (125), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 129 [2022-04-28 03:54:01,628 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:54:01,628 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 34 states, 34 states have (on average 3.676470588235294) internal successors, (125), 33 states have internal predecessors, (125), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:01,737 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 129 edges. 129 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:54:01,738 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-04-28 03:54:01,738 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:54:01,738 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-04-28 03:54:01,738 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=230, Invalid=1576, Unknown=0, NotChecked=0, Total=1806 [2022-04-28 03:54:01,739 INFO L87 Difference]: Start difference. First operand 132 states and 136 transitions. Second operand has 34 states, 34 states have (on average 3.676470588235294) internal successors, (125), 33 states have internal predecessors, (125), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:08,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:54:08,927 INFO L93 Difference]: Finished difference Result 159 states and 168 transitions. [2022-04-28 03:54:08,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-04-28 03:54:08,927 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 34 states have (on average 3.676470588235294) internal successors, (125), 33 states have internal predecessors, (125), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 129 [2022-04-28 03:54:08,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:54:08,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 34 states have (on average 3.676470588235294) internal successors, (125), 33 states have internal predecessors, (125), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:08,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 148 transitions. [2022-04-28 03:54:08,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 34 states have (on average 3.676470588235294) internal successors, (125), 33 states have internal predecessors, (125), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:08,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 148 transitions. [2022-04-28 03:54:08,929 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 34 states and 148 transitions. [2022-04-28 03:54:09,046 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 148 edges. 148 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:54:09,047 INFO L225 Difference]: With dead ends: 159 [2022-04-28 03:54:09,047 INFO L226 Difference]: Without dead ends: 141 [2022-04-28 03:54:09,048 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 193 GetRequests, 120 SyntacticMatches, 1 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 914 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=487, Invalid=4915, Unknown=0, NotChecked=0, Total=5402 [2022-04-28 03:54:09,048 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 98 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 3724 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 192 SdHoareTripleChecker+Invalid, 3758 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 3724 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2022-04-28 03:54:09,049 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [98 Valid, 192 Invalid, 3758 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 3724 Invalid, 0 Unknown, 0 Unchecked, 2.7s Time] [2022-04-28 03:54:09,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 141 states. [2022-04-28 03:54:10,563 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 141 to 136. [2022-04-28 03:54:10,563 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:54:10,563 INFO L82 GeneralOperation]: Start isEquivalent. First operand 141 states. Second operand has 136 states, 131 states have (on average 1.0381679389312977) internal successors, (136), 131 states have internal predecessors, (136), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:10,563 INFO L74 IsIncluded]: Start isIncluded. First operand 141 states. Second operand has 136 states, 131 states have (on average 1.0381679389312977) internal successors, (136), 131 states have internal predecessors, (136), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:10,563 INFO L87 Difference]: Start difference. First operand 141 states. Second operand has 136 states, 131 states have (on average 1.0381679389312977) internal successors, (136), 131 states have internal predecessors, (136), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:10,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:54:10,567 INFO L93 Difference]: Finished difference Result 141 states and 145 transitions. [2022-04-28 03:54:10,567 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 145 transitions. [2022-04-28 03:54:10,567 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:54:10,568 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:54:10,568 INFO L74 IsIncluded]: Start isIncluded. First operand has 136 states, 131 states have (on average 1.0381679389312977) internal successors, (136), 131 states have internal predecessors, (136), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 141 states. [2022-04-28 03:54:10,568 INFO L87 Difference]: Start difference. First operand has 136 states, 131 states have (on average 1.0381679389312977) internal successors, (136), 131 states have internal predecessors, (136), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 141 states. [2022-04-28 03:54:10,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:54:10,570 INFO L93 Difference]: Finished difference Result 141 states and 145 transitions. [2022-04-28 03:54:10,570 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 145 transitions. [2022-04-28 03:54:10,570 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:54:10,570 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:54:10,570 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:54:10,570 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:54:10,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 136 states, 131 states have (on average 1.0381679389312977) internal successors, (136), 131 states have internal predecessors, (136), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:10,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136 states to 136 states and 140 transitions. [2022-04-28 03:54:10,572 INFO L78 Accepts]: Start accepts. Automaton has 136 states and 140 transitions. Word has length 129 [2022-04-28 03:54:10,572 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:54:10,572 INFO L495 AbstractCegarLoop]: Abstraction has 136 states and 140 transitions. [2022-04-28 03:54:10,572 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 34 states have (on average 3.676470588235294) internal successors, (125), 33 states have internal predecessors, (125), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:10,572 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 136 states and 140 transitions. [2022-04-28 03:54:10,840 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 140 edges. 140 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:54:10,840 INFO L276 IsEmpty]: Start isEmpty. Operand 136 states and 140 transitions. [2022-04-28 03:54:10,840 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2022-04-28 03:54:10,840 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:54:10,840 INFO L195 NwaCegarLoop]: trace histogram [31, 30, 30, 29, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:54:10,856 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-04-28 03:54:11,041 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,29 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:54:11,042 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:54:11,043 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:54:11,043 INFO L85 PathProgramCache]: Analyzing trace with hash -98672005, now seen corresponding path program 28 times [2022-04-28 03:54:11,043 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:54:11,043 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1909889810] [2022-04-28 03:54:15,112 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:54:15,159 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:54:15,373 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:54:15,589 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:54:15,590 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:54:15,593 INFO L85 PathProgramCache]: Analyzing trace with hash 1210839463, now seen corresponding path program 1 times [2022-04-28 03:54:15,593 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:54:15,593 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [507333148] [2022-04-28 03:54:15,593 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:54:15,593 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:54:15,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:54:15,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:54:15,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:54:15,639 INFO L290 TraceCheckUtils]: 0: Hoare triple {20190#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {20182#true} is VALID [2022-04-28 03:54:15,639 INFO L290 TraceCheckUtils]: 1: Hoare triple {20182#true} assume true; {20182#true} is VALID [2022-04-28 03:54:15,640 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20182#true} {20182#true} #48#return; {20182#true} is VALID [2022-04-28 03:54:15,640 INFO L272 TraceCheckUtils]: 0: Hoare triple {20182#true} call ULTIMATE.init(); {20190#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:54:15,640 INFO L290 TraceCheckUtils]: 1: Hoare triple {20190#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {20182#true} is VALID [2022-04-28 03:54:15,640 INFO L290 TraceCheckUtils]: 2: Hoare triple {20182#true} assume true; {20182#true} is VALID [2022-04-28 03:54:15,640 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {20182#true} {20182#true} #48#return; {20182#true} is VALID [2022-04-28 03:54:15,640 INFO L272 TraceCheckUtils]: 4: Hoare triple {20182#true} call #t~ret7 := main(); {20182#true} is VALID [2022-04-28 03:54:15,640 INFO L290 TraceCheckUtils]: 5: Hoare triple {20182#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {20187#(= main_~x~0 0)} is VALID [2022-04-28 03:54:15,641 INFO L290 TraceCheckUtils]: 6: Hoare triple {20187#(= main_~x~0 0)} [222] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_205| |v_main_#t~post4_204|)) (.cse1 (= v_main_~x~0_1148 v_main_~x~0_1147))) (or (and .cse0 .cse1) (and .cse0 (not (< v_main_~x~0_1148 500000)) .cse1) (and (< v_main_~x~0_1147 500001) (< v_main_~x~0_1148 v_main_~x~0_1147)))) InVars {main_~x~0=v_main_~x~0_1148, main_#t~post4=|v_main_#t~post4_205|} OutVars{main_~x~0=v_main_~x~0_1147, main_#t~post4=|v_main_#t~post4_204|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {20188#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:15,641 INFO L290 TraceCheckUtils]: 7: Hoare triple {20188#(<= main_~x~0 500000)} [223] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {20188#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:15,642 INFO L290 TraceCheckUtils]: 8: Hoare triple {20188#(<= main_~x~0 500000)} [224] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1150)) (.cse1 (= |v_main_#t~post6_363| |v_main_#t~post6_361|)) (.cse2 (= v_main_~y~0_852 v_main_~y~0_851)) (.cse3 (= v_main_~x~0_1150 v_main_~x~0_1149))) (or (and (< v_main_~y~0_851 (+ v_main_~y~0_852 2 (div (+ 999999 (* (- 1) v_main_~x~0_1150)) 2))) (< v_main_~y~0_852 v_main_~y~0_851) (= (+ (* v_main_~y~0_852 2) v_main_~x~0_1149) (+ v_main_~x~0_1150 (* v_main_~y~0_851 2))) .cse0) (and .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_1150 1000000)) (not .cse0))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_852, main_~x~0=v_main_~x~0_1150, main_#t~post6=|v_main_#t~post6_363|} OutVars{main_~y~0=v_main_~y~0_851, main_~x~0=v_main_~x~0_1149, main_#t~post6=|v_main_#t~post6_361|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {20189#(<= main_~x~0 999999)} is VALID [2022-04-28 03:54:15,642 INFO L290 TraceCheckUtils]: 9: Hoare triple {20189#(<= main_~x~0 999999)} [225] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {20189#(<= main_~x~0 999999)} is VALID [2022-04-28 03:54:15,643 INFO L290 TraceCheckUtils]: 10: Hoare triple {20189#(<= main_~x~0 999999)} [226] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1152)) (.cse1 (= v_main_~x~0_1152 v_main_~x~0_1151)) (.cse2 (= v_main_~y~0_854 v_main_~y~0_853)) (.cse3 (= |v_main_#t~post5_173| |v_main_#t~post5_172|)) (.cse4 (= |v_main_#t~post6_366| |v_main_#t~post6_362|))) (or (and (< v_main_~x~0_1151 750001) (= (+ v_main_~x~0_1151 v_main_~y~0_854) (+ v_main_~x~0_1152 v_main_~y~0_853)) .cse0 (< v_main_~x~0_1152 v_main_~x~0_1151)) (and .cse1 .cse2 .cse3 .cse4) (and (or (not (< v_main_~x~0_1152 750000)) (not .cse0)) .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_854, main_#t~post5=|v_main_#t~post5_173|, main_~x~0=v_main_~x~0_1152, main_#t~post6=|v_main_#t~post6_366|} OutVars{main_~y~0=v_main_~y~0_853, main_#t~post5=|v_main_#t~post5_172|, main_~x~0=v_main_~x~0_1151, main_#t~post6=|v_main_#t~post6_362|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {20189#(<= main_~x~0 999999)} is VALID [2022-04-28 03:54:15,643 INFO L290 TraceCheckUtils]: 11: Hoare triple {20189#(<= main_~x~0 999999)} [221] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {20183#false} is VALID [2022-04-28 03:54:15,643 INFO L272 TraceCheckUtils]: 12: Hoare triple {20183#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {20183#false} is VALID [2022-04-28 03:54:15,643 INFO L290 TraceCheckUtils]: 13: Hoare triple {20183#false} ~cond := #in~cond; {20183#false} is VALID [2022-04-28 03:54:15,644 INFO L290 TraceCheckUtils]: 14: Hoare triple {20183#false} assume 0 == ~cond; {20183#false} is VALID [2022-04-28 03:54:15,644 INFO L290 TraceCheckUtils]: 15: Hoare triple {20183#false} assume !false; {20183#false} is VALID [2022-04-28 03:54:15,644 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:54:15,644 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:54:15,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [507333148] [2022-04-28 03:54:15,644 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [507333148] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:54:15,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [87250869] [2022-04-28 03:54:15,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:54:15,644 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:54:15,644 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:54:15,645 INFO L229 MonitoredProcess]: Starting monitored process 30 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:54:15,646 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-04-28 03:54:15,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:54:15,671 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:54:15,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:54:15,680 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:54:15,865 INFO L272 TraceCheckUtils]: 0: Hoare triple {20182#true} call ULTIMATE.init(); {20182#true} is VALID [2022-04-28 03:54:15,865 INFO L290 TraceCheckUtils]: 1: Hoare triple {20182#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {20182#true} is VALID [2022-04-28 03:54:15,865 INFO L290 TraceCheckUtils]: 2: Hoare triple {20182#true} assume true; {20182#true} is VALID [2022-04-28 03:54:15,865 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {20182#true} {20182#true} #48#return; {20182#true} is VALID [2022-04-28 03:54:15,865 INFO L272 TraceCheckUtils]: 4: Hoare triple {20182#true} call #t~ret7 := main(); {20182#true} is VALID [2022-04-28 03:54:15,865 INFO L290 TraceCheckUtils]: 5: Hoare triple {20182#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {20209#(<= main_~x~0 0)} is VALID [2022-04-28 03:54:15,866 INFO L290 TraceCheckUtils]: 6: Hoare triple {20209#(<= main_~x~0 0)} [222] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_205| |v_main_#t~post4_204|)) (.cse1 (= v_main_~x~0_1148 v_main_~x~0_1147))) (or (and .cse0 .cse1) (and .cse0 (not (< v_main_~x~0_1148 500000)) .cse1) (and (< v_main_~x~0_1147 500001) (< v_main_~x~0_1148 v_main_~x~0_1147)))) InVars {main_~x~0=v_main_~x~0_1148, main_#t~post4=|v_main_#t~post4_205|} OutVars{main_~x~0=v_main_~x~0_1147, main_#t~post4=|v_main_#t~post4_204|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {20188#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:15,866 INFO L290 TraceCheckUtils]: 7: Hoare triple {20188#(<= main_~x~0 500000)} [223] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {20188#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:15,867 INFO L290 TraceCheckUtils]: 8: Hoare triple {20188#(<= main_~x~0 500000)} [224] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1150)) (.cse1 (= |v_main_#t~post6_363| |v_main_#t~post6_361|)) (.cse2 (= v_main_~y~0_852 v_main_~y~0_851)) (.cse3 (= v_main_~x~0_1150 v_main_~x~0_1149))) (or (and (< v_main_~y~0_851 (+ v_main_~y~0_852 2 (div (+ 999999 (* (- 1) v_main_~x~0_1150)) 2))) (< v_main_~y~0_852 v_main_~y~0_851) (= (+ (* v_main_~y~0_852 2) v_main_~x~0_1149) (+ v_main_~x~0_1150 (* v_main_~y~0_851 2))) .cse0) (and .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_1150 1000000)) (not .cse0))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_852, main_~x~0=v_main_~x~0_1150, main_#t~post6=|v_main_#t~post6_363|} OutVars{main_~y~0=v_main_~y~0_851, main_~x~0=v_main_~x~0_1149, main_#t~post6=|v_main_#t~post6_361|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {20188#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:15,867 INFO L290 TraceCheckUtils]: 9: Hoare triple {20188#(<= main_~x~0 500000)} [225] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {20188#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:15,868 INFO L290 TraceCheckUtils]: 10: Hoare triple {20188#(<= main_~x~0 500000)} [226] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1152)) (.cse1 (= v_main_~x~0_1152 v_main_~x~0_1151)) (.cse2 (= v_main_~y~0_854 v_main_~y~0_853)) (.cse3 (= |v_main_#t~post5_173| |v_main_#t~post5_172|)) (.cse4 (= |v_main_#t~post6_366| |v_main_#t~post6_362|))) (or (and (< v_main_~x~0_1151 750001) (= (+ v_main_~x~0_1151 v_main_~y~0_854) (+ v_main_~x~0_1152 v_main_~y~0_853)) .cse0 (< v_main_~x~0_1152 v_main_~x~0_1151)) (and .cse1 .cse2 .cse3 .cse4) (and (or (not (< v_main_~x~0_1152 750000)) (not .cse0)) .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_854, main_#t~post5=|v_main_#t~post5_173|, main_~x~0=v_main_~x~0_1152, main_#t~post6=|v_main_#t~post6_366|} OutVars{main_~y~0=v_main_~y~0_853, main_#t~post5=|v_main_#t~post5_172|, main_~x~0=v_main_~x~0_1151, main_#t~post6=|v_main_#t~post6_362|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {20225#(< main_~x~0 750001)} is VALID [2022-04-28 03:54:15,868 INFO L290 TraceCheckUtils]: 11: Hoare triple {20225#(< main_~x~0 750001)} [221] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {20183#false} is VALID [2022-04-28 03:54:15,868 INFO L272 TraceCheckUtils]: 12: Hoare triple {20183#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {20183#false} is VALID [2022-04-28 03:54:15,868 INFO L290 TraceCheckUtils]: 13: Hoare triple {20183#false} ~cond := #in~cond; {20183#false} is VALID [2022-04-28 03:54:15,868 INFO L290 TraceCheckUtils]: 14: Hoare triple {20183#false} assume 0 == ~cond; {20183#false} is VALID [2022-04-28 03:54:15,869 INFO L290 TraceCheckUtils]: 15: Hoare triple {20183#false} assume !false; {20183#false} is VALID [2022-04-28 03:54:15,869 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:54:15,869 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:54:16,319 INFO L290 TraceCheckUtils]: 15: Hoare triple {20183#false} assume !false; {20183#false} is VALID [2022-04-28 03:54:16,320 INFO L290 TraceCheckUtils]: 14: Hoare triple {20244#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {20183#false} is VALID [2022-04-28 03:54:16,320 INFO L290 TraceCheckUtils]: 13: Hoare triple {20248#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {20244#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:54:16,321 INFO L272 TraceCheckUtils]: 12: Hoare triple {20252#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {20248#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:54:16,321 INFO L290 TraceCheckUtils]: 11: Hoare triple {20256#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [221] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {20252#(= main_~x~0 1000000)} is VALID [2022-04-28 03:54:16,322 INFO L290 TraceCheckUtils]: 10: Hoare triple {20256#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [226] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1152)) (.cse1 (= v_main_~x~0_1152 v_main_~x~0_1151)) (.cse2 (= v_main_~y~0_854 v_main_~y~0_853)) (.cse3 (= |v_main_#t~post5_173| |v_main_#t~post5_172|)) (.cse4 (= |v_main_#t~post6_366| |v_main_#t~post6_362|))) (or (and (< v_main_~x~0_1151 750001) (= (+ v_main_~x~0_1151 v_main_~y~0_854) (+ v_main_~x~0_1152 v_main_~y~0_853)) .cse0 (< v_main_~x~0_1152 v_main_~x~0_1151)) (and .cse1 .cse2 .cse3 .cse4) (and (or (not (< v_main_~x~0_1152 750000)) (not .cse0)) .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_854, main_#t~post5=|v_main_#t~post5_173|, main_~x~0=v_main_~x~0_1152, main_#t~post6=|v_main_#t~post6_366|} OutVars{main_~y~0=v_main_~y~0_853, main_#t~post5=|v_main_#t~post5_172|, main_~x~0=v_main_~x~0_1151, main_#t~post6=|v_main_#t~post6_362|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {20256#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:54:16,322 INFO L290 TraceCheckUtils]: 9: Hoare triple {20256#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [225] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {20256#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:54:16,323 INFO L290 TraceCheckUtils]: 8: Hoare triple {20266#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [224] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1150)) (.cse1 (= |v_main_#t~post6_363| |v_main_#t~post6_361|)) (.cse2 (= v_main_~y~0_852 v_main_~y~0_851)) (.cse3 (= v_main_~x~0_1150 v_main_~x~0_1149))) (or (and (< v_main_~y~0_851 (+ v_main_~y~0_852 2 (div (+ 999999 (* (- 1) v_main_~x~0_1150)) 2))) (< v_main_~y~0_852 v_main_~y~0_851) (= (+ (* v_main_~y~0_852 2) v_main_~x~0_1149) (+ v_main_~x~0_1150 (* v_main_~y~0_851 2))) .cse0) (and .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_1150 1000000)) (not .cse0))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_852, main_~x~0=v_main_~x~0_1150, main_#t~post6=|v_main_#t~post6_363|} OutVars{main_~y~0=v_main_~y~0_851, main_~x~0=v_main_~x~0_1149, main_#t~post6=|v_main_#t~post6_361|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {20256#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:54:16,324 INFO L290 TraceCheckUtils]: 7: Hoare triple {20266#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [223] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {20266#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:54:16,325 INFO L290 TraceCheckUtils]: 6: Hoare triple {20266#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [222] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_205| |v_main_#t~post4_204|)) (.cse1 (= v_main_~x~0_1148 v_main_~x~0_1147))) (or (and .cse0 .cse1) (and .cse0 (not (< v_main_~x~0_1148 500000)) .cse1) (and (< v_main_~x~0_1147 500001) (< v_main_~x~0_1148 v_main_~x~0_1147)))) InVars {main_~x~0=v_main_~x~0_1148, main_#t~post4=|v_main_#t~post4_205|} OutVars{main_~x~0=v_main_~x~0_1147, main_#t~post4=|v_main_#t~post4_204|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {20266#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:54:16,325 INFO L290 TraceCheckUtils]: 5: Hoare triple {20182#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {20266#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:54:16,325 INFO L272 TraceCheckUtils]: 4: Hoare triple {20182#true} call #t~ret7 := main(); {20182#true} is VALID [2022-04-28 03:54:16,325 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {20182#true} {20182#true} #48#return; {20182#true} is VALID [2022-04-28 03:54:16,325 INFO L290 TraceCheckUtils]: 2: Hoare triple {20182#true} assume true; {20182#true} is VALID [2022-04-28 03:54:16,326 INFO L290 TraceCheckUtils]: 1: Hoare triple {20182#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {20182#true} is VALID [2022-04-28 03:54:16,326 INFO L272 TraceCheckUtils]: 0: Hoare triple {20182#true} call ULTIMATE.init(); {20182#true} is VALID [2022-04-28 03:54:16,326 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:54:16,326 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [87250869] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:54:16,326 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:54:16,326 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:54:17,422 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:54:17,422 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1909889810] [2022-04-28 03:54:17,422 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1909889810] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:54:17,422 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:54:17,422 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [35] imperfect sequences [] total 35 [2022-04-28 03:54:17,422 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1040026324] [2022-04-28 03:54:17,422 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:54:17,423 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 35 states have (on average 3.6857142857142855) internal successors, (129), 34 states have internal predecessors, (129), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 133 [2022-04-28 03:54:17,423 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:54:17,423 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 35 states, 35 states have (on average 3.6857142857142855) internal successors, (129), 34 states have internal predecessors, (129), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:17,511 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 133 edges. 133 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:54:17,511 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-04-28 03:54:17,511 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:54:17,512 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-04-28 03:54:17,512 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=244, Invalid=1736, Unknown=0, NotChecked=0, Total=1980 [2022-04-28 03:54:17,512 INFO L87 Difference]: Start difference. First operand 136 states and 140 transitions. Second operand has 35 states, 35 states have (on average 3.6857142857142855) internal successors, (129), 34 states have internal predecessors, (129), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:24,763 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:54:24,763 INFO L93 Difference]: Finished difference Result 163 states and 172 transitions. [2022-04-28 03:54:24,763 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2022-04-28 03:54:24,763 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 35 states have (on average 3.6857142857142855) internal successors, (129), 34 states have internal predecessors, (129), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 133 [2022-04-28 03:54:24,763 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:54:24,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 35 states have (on average 3.6857142857142855) internal successors, (129), 34 states have internal predecessors, (129), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:24,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 152 transitions. [2022-04-28 03:54:24,764 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 35 states have (on average 3.6857142857142855) internal successors, (129), 34 states have internal predecessors, (129), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:24,765 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 152 transitions. [2022-04-28 03:54:24,765 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 35 states and 152 transitions. [2022-04-28 03:54:24,878 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 152 edges. 152 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:54:24,879 INFO L225 Difference]: With dead ends: 163 [2022-04-28 03:54:24,879 INFO L226 Difference]: Without dead ends: 145 [2022-04-28 03:54:24,880 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 198 GetRequests, 121 SyntacticMatches, 2 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1059 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=509, Invalid=5343, Unknown=0, NotChecked=0, Total=5852 [2022-04-28 03:54:24,880 INFO L413 NwaCegarLoop]: 41 mSDtfsCounter, 102 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 3850 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 3885 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 3850 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2022-04-28 03:54:24,880 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 193 Invalid, 3885 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 3850 Invalid, 0 Unknown, 0 Unchecked, 2.7s Time] [2022-04-28 03:54:24,880 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 145 states. [2022-04-28 03:54:26,498 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 145 to 140. [2022-04-28 03:54:26,498 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:54:26,499 INFO L82 GeneralOperation]: Start isEquivalent. First operand 145 states. Second operand has 140 states, 135 states have (on average 1.037037037037037) internal successors, (140), 135 states have internal predecessors, (140), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:26,499 INFO L74 IsIncluded]: Start isIncluded. First operand 145 states. Second operand has 140 states, 135 states have (on average 1.037037037037037) internal successors, (140), 135 states have internal predecessors, (140), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:26,499 INFO L87 Difference]: Start difference. First operand 145 states. Second operand has 140 states, 135 states have (on average 1.037037037037037) internal successors, (140), 135 states have internal predecessors, (140), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:26,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:54:26,501 INFO L93 Difference]: Finished difference Result 145 states and 149 transitions. [2022-04-28 03:54:26,501 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 149 transitions. [2022-04-28 03:54:26,501 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:54:26,501 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:54:26,501 INFO L74 IsIncluded]: Start isIncluded. First operand has 140 states, 135 states have (on average 1.037037037037037) internal successors, (140), 135 states have internal predecessors, (140), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 145 states. [2022-04-28 03:54:26,501 INFO L87 Difference]: Start difference. First operand has 140 states, 135 states have (on average 1.037037037037037) internal successors, (140), 135 states have internal predecessors, (140), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 145 states. [2022-04-28 03:54:26,503 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:54:26,503 INFO L93 Difference]: Finished difference Result 145 states and 149 transitions. [2022-04-28 03:54:26,503 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 149 transitions. [2022-04-28 03:54:26,503 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:54:26,503 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:54:26,503 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:54:26,504 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:54:26,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 140 states, 135 states have (on average 1.037037037037037) internal successors, (140), 135 states have internal predecessors, (140), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:26,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140 states to 140 states and 144 transitions. [2022-04-28 03:54:26,505 INFO L78 Accepts]: Start accepts. Automaton has 140 states and 144 transitions. Word has length 133 [2022-04-28 03:54:26,506 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:54:26,506 INFO L495 AbstractCegarLoop]: Abstraction has 140 states and 144 transitions. [2022-04-28 03:54:26,506 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 35 states have (on average 3.6857142857142855) internal successors, (129), 34 states have internal predecessors, (129), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:26,506 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 140 states and 144 transitions. [2022-04-28 03:54:26,779 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 144 edges. 144 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:54:26,779 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 144 transitions. [2022-04-28 03:54:26,779 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 138 [2022-04-28 03:54:26,779 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:54:26,780 INFO L195 NwaCegarLoop]: trace histogram [32, 31, 31, 30, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:54:26,801 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-04-28 03:54:27,001 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,30 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:54:27,001 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:54:27,001 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:54:27,002 INFO L85 PathProgramCache]: Analyzing trace with hash -736721838, now seen corresponding path program 29 times [2022-04-28 03:54:27,002 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:54:27,002 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1739857559] [2022-04-28 03:54:31,066 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:54:31,113 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:54:31,345 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:54:31,568 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:54:31,569 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:54:31,572 INFO L85 PathProgramCache]: Analyzing trace with hash 851264487, now seen corresponding path program 1 times [2022-04-28 03:54:31,572 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:54:31,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1464834043] [2022-04-28 03:54:31,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:54:31,572 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:54:31,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:54:31,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:54:31,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:54:31,625 INFO L290 TraceCheckUtils]: 0: Hoare triple {21293#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {21285#true} is VALID [2022-04-28 03:54:31,625 INFO L290 TraceCheckUtils]: 1: Hoare triple {21285#true} assume true; {21285#true} is VALID [2022-04-28 03:54:31,625 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21285#true} {21285#true} #48#return; {21285#true} is VALID [2022-04-28 03:54:31,625 INFO L272 TraceCheckUtils]: 0: Hoare triple {21285#true} call ULTIMATE.init(); {21293#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:54:31,625 INFO L290 TraceCheckUtils]: 1: Hoare triple {21293#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {21285#true} is VALID [2022-04-28 03:54:31,625 INFO L290 TraceCheckUtils]: 2: Hoare triple {21285#true} assume true; {21285#true} is VALID [2022-04-28 03:54:31,625 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {21285#true} {21285#true} #48#return; {21285#true} is VALID [2022-04-28 03:54:31,626 INFO L272 TraceCheckUtils]: 4: Hoare triple {21285#true} call #t~ret7 := main(); {21285#true} is VALID [2022-04-28 03:54:31,626 INFO L290 TraceCheckUtils]: 5: Hoare triple {21285#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {21290#(= main_~x~0 0)} is VALID [2022-04-28 03:54:31,626 INFO L290 TraceCheckUtils]: 6: Hoare triple {21290#(= main_~x~0 0)} [228] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_212| |v_main_#t~post4_211|)) (.cse1 (= v_main_~x~0_1203 v_main_~x~0_1202))) (or (and (<= 500000 v_main_~x~0_1203) .cse0 .cse1) (and .cse0 .cse1) (and (< v_main_~x~0_1203 v_main_~x~0_1202) (< v_main_~x~0_1202 500001)))) InVars {main_~x~0=v_main_~x~0_1203, main_#t~post4=|v_main_#t~post4_212|} OutVars{main_~x~0=v_main_~x~0_1202, main_#t~post4=|v_main_#t~post4_211|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {21291#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:31,627 INFO L290 TraceCheckUtils]: 7: Hoare triple {21291#(<= main_~x~0 500000)} [229] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {21291#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:31,627 INFO L290 TraceCheckUtils]: 8: Hoare triple {21291#(<= main_~x~0 500000)} [230] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~y~0_897 v_main_~y~0_896)) (.cse2 (= v_main_~x~0_1205 v_main_~x~0_1204)) (.cse3 (= |v_main_#t~post6_376| |v_main_#t~post6_374|)) (.cse0 (<= 750000 v_main_~x~0_1205))) (or (and (< v_main_~y~0_897 v_main_~y~0_896) .cse0 (= (+ (* v_main_~y~0_896 2) v_main_~x~0_1205) (+ v_main_~x~0_1204 (* v_main_~y~0_897 2))) (< v_main_~y~0_896 (+ (div (+ (* (- 1) v_main_~x~0_1205) 999999) 2) v_main_~y~0_897 2))) (and .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_1205 1000000)))))) InVars {main_~y~0=v_main_~y~0_897, main_~x~0=v_main_~x~0_1205, main_#t~post6=|v_main_#t~post6_376|} OutVars{main_~y~0=v_main_~y~0_896, main_~x~0=v_main_~x~0_1204, main_#t~post6=|v_main_#t~post6_374|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {21292#(<= main_~x~0 999999)} is VALID [2022-04-28 03:54:31,628 INFO L290 TraceCheckUtils]: 9: Hoare triple {21292#(<= main_~x~0 999999)} [231] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {21292#(<= main_~x~0 999999)} is VALID [2022-04-28 03:54:31,628 INFO L290 TraceCheckUtils]: 10: Hoare triple {21292#(<= main_~x~0 999999)} [232] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1207 v_main_~x~0_1206)) (.cse1 (= |v_main_#t~post6_379| |v_main_#t~post6_375|)) (.cse2 (= |v_main_#t~post5_179| |v_main_#t~post5_178|)) (.cse3 (= v_main_~y~0_899 v_main_~y~0_898)) (.cse4 (<= 500000 v_main_~x~0_1207))) (or (and .cse0 .cse1 .cse2 .cse3 (or (not .cse4) (not (< v_main_~x~0_1207 750000)))) (and .cse0 .cse1 .cse2 .cse3) (and (= (+ v_main_~x~0_1207 v_main_~y~0_898) (+ v_main_~x~0_1206 v_main_~y~0_899)) (< v_main_~x~0_1207 v_main_~x~0_1206) .cse4 (< v_main_~x~0_1206 750001)))) InVars {main_~y~0=v_main_~y~0_899, main_#t~post5=|v_main_#t~post5_179|, main_~x~0=v_main_~x~0_1207, main_#t~post6=|v_main_#t~post6_379|} OutVars{main_~y~0=v_main_~y~0_898, main_#t~post5=|v_main_#t~post5_178|, main_~x~0=v_main_~x~0_1206, main_#t~post6=|v_main_#t~post6_375|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {21292#(<= main_~x~0 999999)} is VALID [2022-04-28 03:54:31,629 INFO L290 TraceCheckUtils]: 11: Hoare triple {21292#(<= main_~x~0 999999)} [227] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {21286#false} is VALID [2022-04-28 03:54:31,629 INFO L272 TraceCheckUtils]: 12: Hoare triple {21286#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {21286#false} is VALID [2022-04-28 03:54:31,629 INFO L290 TraceCheckUtils]: 13: Hoare triple {21286#false} ~cond := #in~cond; {21286#false} is VALID [2022-04-28 03:54:31,629 INFO L290 TraceCheckUtils]: 14: Hoare triple {21286#false} assume 0 == ~cond; {21286#false} is VALID [2022-04-28 03:54:31,629 INFO L290 TraceCheckUtils]: 15: Hoare triple {21286#false} assume !false; {21286#false} is VALID [2022-04-28 03:54:31,629 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:54:31,629 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:54:31,629 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1464834043] [2022-04-28 03:54:31,629 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1464834043] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:54:31,629 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [784256752] [2022-04-28 03:54:31,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:54:31,629 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:54:31,629 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:54:31,630 INFO L229 MonitoredProcess]: Starting monitored process 31 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:54:31,631 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-04-28 03:54:31,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:54:31,658 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:54:31,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:54:31,667 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:54:31,833 INFO L272 TraceCheckUtils]: 0: Hoare triple {21285#true} call ULTIMATE.init(); {21285#true} is VALID [2022-04-28 03:54:31,834 INFO L290 TraceCheckUtils]: 1: Hoare triple {21285#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {21285#true} is VALID [2022-04-28 03:54:31,834 INFO L290 TraceCheckUtils]: 2: Hoare triple {21285#true} assume true; {21285#true} is VALID [2022-04-28 03:54:31,834 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {21285#true} {21285#true} #48#return; {21285#true} is VALID [2022-04-28 03:54:31,834 INFO L272 TraceCheckUtils]: 4: Hoare triple {21285#true} call #t~ret7 := main(); {21285#true} is VALID [2022-04-28 03:54:31,834 INFO L290 TraceCheckUtils]: 5: Hoare triple {21285#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {21312#(<= main_~x~0 0)} is VALID [2022-04-28 03:54:31,835 INFO L290 TraceCheckUtils]: 6: Hoare triple {21312#(<= main_~x~0 0)} [228] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_212| |v_main_#t~post4_211|)) (.cse1 (= v_main_~x~0_1203 v_main_~x~0_1202))) (or (and (<= 500000 v_main_~x~0_1203) .cse0 .cse1) (and .cse0 .cse1) (and (< v_main_~x~0_1203 v_main_~x~0_1202) (< v_main_~x~0_1202 500001)))) InVars {main_~x~0=v_main_~x~0_1203, main_#t~post4=|v_main_#t~post4_212|} OutVars{main_~x~0=v_main_~x~0_1202, main_#t~post4=|v_main_#t~post4_211|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {21291#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:31,835 INFO L290 TraceCheckUtils]: 7: Hoare triple {21291#(<= main_~x~0 500000)} [229] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {21291#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:31,836 INFO L290 TraceCheckUtils]: 8: Hoare triple {21291#(<= main_~x~0 500000)} [230] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~y~0_897 v_main_~y~0_896)) (.cse2 (= v_main_~x~0_1205 v_main_~x~0_1204)) (.cse3 (= |v_main_#t~post6_376| |v_main_#t~post6_374|)) (.cse0 (<= 750000 v_main_~x~0_1205))) (or (and (< v_main_~y~0_897 v_main_~y~0_896) .cse0 (= (+ (* v_main_~y~0_896 2) v_main_~x~0_1205) (+ v_main_~x~0_1204 (* v_main_~y~0_897 2))) (< v_main_~y~0_896 (+ (div (+ (* (- 1) v_main_~x~0_1205) 999999) 2) v_main_~y~0_897 2))) (and .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_1205 1000000)))))) InVars {main_~y~0=v_main_~y~0_897, main_~x~0=v_main_~x~0_1205, main_#t~post6=|v_main_#t~post6_376|} OutVars{main_~y~0=v_main_~y~0_896, main_~x~0=v_main_~x~0_1204, main_#t~post6=|v_main_#t~post6_374|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {21291#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:31,836 INFO L290 TraceCheckUtils]: 9: Hoare triple {21291#(<= main_~x~0 500000)} [231] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {21291#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:31,837 INFO L290 TraceCheckUtils]: 10: Hoare triple {21291#(<= main_~x~0 500000)} [232] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1207 v_main_~x~0_1206)) (.cse1 (= |v_main_#t~post6_379| |v_main_#t~post6_375|)) (.cse2 (= |v_main_#t~post5_179| |v_main_#t~post5_178|)) (.cse3 (= v_main_~y~0_899 v_main_~y~0_898)) (.cse4 (<= 500000 v_main_~x~0_1207))) (or (and .cse0 .cse1 .cse2 .cse3 (or (not .cse4) (not (< v_main_~x~0_1207 750000)))) (and .cse0 .cse1 .cse2 .cse3) (and (= (+ v_main_~x~0_1207 v_main_~y~0_898) (+ v_main_~x~0_1206 v_main_~y~0_899)) (< v_main_~x~0_1207 v_main_~x~0_1206) .cse4 (< v_main_~x~0_1206 750001)))) InVars {main_~y~0=v_main_~y~0_899, main_#t~post5=|v_main_#t~post5_179|, main_~x~0=v_main_~x~0_1207, main_#t~post6=|v_main_#t~post6_379|} OutVars{main_~y~0=v_main_~y~0_898, main_#t~post5=|v_main_#t~post5_178|, main_~x~0=v_main_~x~0_1206, main_#t~post6=|v_main_#t~post6_375|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {21328#(< main_~x~0 750001)} is VALID [2022-04-28 03:54:31,837 INFO L290 TraceCheckUtils]: 11: Hoare triple {21328#(< main_~x~0 750001)} [227] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {21286#false} is VALID [2022-04-28 03:54:31,837 INFO L272 TraceCheckUtils]: 12: Hoare triple {21286#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {21286#false} is VALID [2022-04-28 03:54:31,837 INFO L290 TraceCheckUtils]: 13: Hoare triple {21286#false} ~cond := #in~cond; {21286#false} is VALID [2022-04-28 03:54:31,837 INFO L290 TraceCheckUtils]: 14: Hoare triple {21286#false} assume 0 == ~cond; {21286#false} is VALID [2022-04-28 03:54:31,838 INFO L290 TraceCheckUtils]: 15: Hoare triple {21286#false} assume !false; {21286#false} is VALID [2022-04-28 03:54:31,838 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:54:31,838 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:54:32,291 INFO L290 TraceCheckUtils]: 15: Hoare triple {21286#false} assume !false; {21286#false} is VALID [2022-04-28 03:54:32,291 INFO L290 TraceCheckUtils]: 14: Hoare triple {21347#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {21286#false} is VALID [2022-04-28 03:54:32,292 INFO L290 TraceCheckUtils]: 13: Hoare triple {21351#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {21347#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:54:32,292 INFO L272 TraceCheckUtils]: 12: Hoare triple {21355#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {21351#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:54:32,292 INFO L290 TraceCheckUtils]: 11: Hoare triple {21359#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [227] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {21355#(= main_~x~0 1000000)} is VALID [2022-04-28 03:54:32,293 INFO L290 TraceCheckUtils]: 10: Hoare triple {21359#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [232] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1207 v_main_~x~0_1206)) (.cse1 (= |v_main_#t~post6_379| |v_main_#t~post6_375|)) (.cse2 (= |v_main_#t~post5_179| |v_main_#t~post5_178|)) (.cse3 (= v_main_~y~0_899 v_main_~y~0_898)) (.cse4 (<= 500000 v_main_~x~0_1207))) (or (and .cse0 .cse1 .cse2 .cse3 (or (not .cse4) (not (< v_main_~x~0_1207 750000)))) (and .cse0 .cse1 .cse2 .cse3) (and (= (+ v_main_~x~0_1207 v_main_~y~0_898) (+ v_main_~x~0_1206 v_main_~y~0_899)) (< v_main_~x~0_1207 v_main_~x~0_1206) .cse4 (< v_main_~x~0_1206 750001)))) InVars {main_~y~0=v_main_~y~0_899, main_#t~post5=|v_main_#t~post5_179|, main_~x~0=v_main_~x~0_1207, main_#t~post6=|v_main_#t~post6_379|} OutVars{main_~y~0=v_main_~y~0_898, main_#t~post5=|v_main_#t~post5_178|, main_~x~0=v_main_~x~0_1206, main_#t~post6=|v_main_#t~post6_375|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {21359#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:54:32,294 INFO L290 TraceCheckUtils]: 9: Hoare triple {21359#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [231] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {21359#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:54:32,295 INFO L290 TraceCheckUtils]: 8: Hoare triple {21369#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [230] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~y~0_897 v_main_~y~0_896)) (.cse2 (= v_main_~x~0_1205 v_main_~x~0_1204)) (.cse3 (= |v_main_#t~post6_376| |v_main_#t~post6_374|)) (.cse0 (<= 750000 v_main_~x~0_1205))) (or (and (< v_main_~y~0_897 v_main_~y~0_896) .cse0 (= (+ (* v_main_~y~0_896 2) v_main_~x~0_1205) (+ v_main_~x~0_1204 (* v_main_~y~0_897 2))) (< v_main_~y~0_896 (+ (div (+ (* (- 1) v_main_~x~0_1205) 999999) 2) v_main_~y~0_897 2))) (and .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_1205 1000000)))))) InVars {main_~y~0=v_main_~y~0_897, main_~x~0=v_main_~x~0_1205, main_#t~post6=|v_main_#t~post6_376|} OutVars{main_~y~0=v_main_~y~0_896, main_~x~0=v_main_~x~0_1204, main_#t~post6=|v_main_#t~post6_374|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {21359#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:54:32,295 INFO L290 TraceCheckUtils]: 7: Hoare triple {21369#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [229] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {21369#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:54:32,296 INFO L290 TraceCheckUtils]: 6: Hoare triple {21369#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [228] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_212| |v_main_#t~post4_211|)) (.cse1 (= v_main_~x~0_1203 v_main_~x~0_1202))) (or (and (<= 500000 v_main_~x~0_1203) .cse0 .cse1) (and .cse0 .cse1) (and (< v_main_~x~0_1203 v_main_~x~0_1202) (< v_main_~x~0_1202 500001)))) InVars {main_~x~0=v_main_~x~0_1203, main_#t~post4=|v_main_#t~post4_212|} OutVars{main_~x~0=v_main_~x~0_1202, main_#t~post4=|v_main_#t~post4_211|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {21369#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:54:32,297 INFO L290 TraceCheckUtils]: 5: Hoare triple {21285#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {21369#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:54:32,297 INFO L272 TraceCheckUtils]: 4: Hoare triple {21285#true} call #t~ret7 := main(); {21285#true} is VALID [2022-04-28 03:54:32,297 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {21285#true} {21285#true} #48#return; {21285#true} is VALID [2022-04-28 03:54:32,297 INFO L290 TraceCheckUtils]: 2: Hoare triple {21285#true} assume true; {21285#true} is VALID [2022-04-28 03:54:32,297 INFO L290 TraceCheckUtils]: 1: Hoare triple {21285#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {21285#true} is VALID [2022-04-28 03:54:32,297 INFO L272 TraceCheckUtils]: 0: Hoare triple {21285#true} call ULTIMATE.init(); {21285#true} is VALID [2022-04-28 03:54:32,297 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:54:32,297 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [784256752] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:54:32,297 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:54:32,297 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:54:33,440 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:54:33,440 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1739857559] [2022-04-28 03:54:33,440 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1739857559] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:54:33,441 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:54:33,441 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [36] imperfect sequences [] total 36 [2022-04-28 03:54:33,441 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [60478756] [2022-04-28 03:54:33,441 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:54:33,441 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 3.6944444444444446) internal successors, (133), 35 states have internal predecessors, (133), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 137 [2022-04-28 03:54:33,441 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:54:33,441 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 36 states, 36 states have (on average 3.6944444444444446) internal successors, (133), 35 states have internal predecessors, (133), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:33,531 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 137 edges. 137 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:54:33,531 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-04-28 03:54:33,531 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:54:33,532 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-04-28 03:54:33,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=250, Invalid=1820, Unknown=0, NotChecked=0, Total=2070 [2022-04-28 03:54:33,532 INFO L87 Difference]: Start difference. First operand 140 states and 144 transitions. Second operand has 36 states, 36 states have (on average 3.6944444444444446) internal successors, (133), 35 states have internal predecessors, (133), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:41,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:54:41,556 INFO L93 Difference]: Finished difference Result 167 states and 176 transitions. [2022-04-28 03:54:41,556 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-04-28 03:54:41,556 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 3.6944444444444446) internal successors, (133), 35 states have internal predecessors, (133), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 137 [2022-04-28 03:54:41,556 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:54:41,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 36 states have (on average 3.6944444444444446) internal successors, (133), 35 states have internal predecessors, (133), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:41,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 156 transitions. [2022-04-28 03:54:41,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 36 states have (on average 3.6944444444444446) internal successors, (133), 35 states have internal predecessors, (133), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:41,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 156 transitions. [2022-04-28 03:54:41,560 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 36 states and 156 transitions. [2022-04-28 03:54:41,678 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 156 edges. 156 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:54:41,679 INFO L225 Difference]: With dead ends: 167 [2022-04-28 03:54:41,679 INFO L226 Difference]: Without dead ends: 149 [2022-04-28 03:54:41,680 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 203 GetRequests, 124 SyntacticMatches, 2 SemanticMatches, 77 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1108 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=523, Invalid=5639, Unknown=0, NotChecked=0, Total=6162 [2022-04-28 03:54:41,680 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 104 mSDsluCounter, 162 mSDsCounter, 0 mSdLazyCounter, 4228 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 204 SdHoareTripleChecker+Invalid, 4264 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 4228 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2022-04-28 03:54:41,680 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [104 Valid, 204 Invalid, 4264 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 4228 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2022-04-28 03:54:41,681 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 149 states. [2022-04-28 03:54:43,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 149 to 144. [2022-04-28 03:54:43,447 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:54:43,448 INFO L82 GeneralOperation]: Start isEquivalent. First operand 149 states. Second operand has 144 states, 139 states have (on average 1.0359712230215827) internal successors, (144), 139 states have internal predecessors, (144), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:43,448 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand has 144 states, 139 states have (on average 1.0359712230215827) internal successors, (144), 139 states have internal predecessors, (144), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:43,448 INFO L87 Difference]: Start difference. First operand 149 states. Second operand has 144 states, 139 states have (on average 1.0359712230215827) internal successors, (144), 139 states have internal predecessors, (144), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:43,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:54:43,449 INFO L93 Difference]: Finished difference Result 149 states and 153 transitions. [2022-04-28 03:54:43,449 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 153 transitions. [2022-04-28 03:54:43,450 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:54:43,450 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:54:43,450 INFO L74 IsIncluded]: Start isIncluded. First operand has 144 states, 139 states have (on average 1.0359712230215827) internal successors, (144), 139 states have internal predecessors, (144), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 149 states. [2022-04-28 03:54:43,450 INFO L87 Difference]: Start difference. First operand has 144 states, 139 states have (on average 1.0359712230215827) internal successors, (144), 139 states have internal predecessors, (144), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 149 states. [2022-04-28 03:54:43,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:54:43,452 INFO L93 Difference]: Finished difference Result 149 states and 153 transitions. [2022-04-28 03:54:43,452 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 153 transitions. [2022-04-28 03:54:43,452 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:54:43,452 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:54:43,452 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:54:43,452 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:54:43,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 139 states have (on average 1.0359712230215827) internal successors, (144), 139 states have internal predecessors, (144), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:43,454 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 148 transitions. [2022-04-28 03:54:43,454 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 148 transitions. Word has length 137 [2022-04-28 03:54:43,454 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:54:43,454 INFO L495 AbstractCegarLoop]: Abstraction has 144 states and 148 transitions. [2022-04-28 03:54:43,455 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 3.6944444444444446) internal successors, (133), 35 states have internal predecessors, (133), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:43,455 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 144 states and 148 transitions. [2022-04-28 03:54:43,845 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 148 edges. 148 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:54:43,845 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 148 transitions. [2022-04-28 03:54:43,846 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 142 [2022-04-28 03:54:43,846 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:54:43,846 INFO L195 NwaCegarLoop]: trace histogram [33, 32, 32, 31, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:54:43,869 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-04-28 03:54:44,046 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-04-28 03:54:44,047 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:54:44,047 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:54:44,047 INFO L85 PathProgramCache]: Analyzing trace with hash -823401815, now seen corresponding path program 30 times [2022-04-28 03:54:44,047 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:54:44,047 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1816063058] [2022-04-28 03:54:48,111 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:54:48,159 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:54:48,400 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:54:48,634 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:54:48,635 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:54:48,638 INFO L85 PathProgramCache]: Analyzing trace with hash 491689511, now seen corresponding path program 1 times [2022-04-28 03:54:48,638 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:54:48,638 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [868705622] [2022-04-28 03:54:48,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:54:48,638 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:54:48,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:54:48,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:54:48,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:54:48,689 INFO L290 TraceCheckUtils]: 0: Hoare triple {22423#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {22415#true} is VALID [2022-04-28 03:54:48,689 INFO L290 TraceCheckUtils]: 1: Hoare triple {22415#true} assume true; {22415#true} is VALID [2022-04-28 03:54:48,689 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22415#true} {22415#true} #48#return; {22415#true} is VALID [2022-04-28 03:54:48,689 INFO L272 TraceCheckUtils]: 0: Hoare triple {22415#true} call ULTIMATE.init(); {22423#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:54:48,690 INFO L290 TraceCheckUtils]: 1: Hoare triple {22423#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {22415#true} is VALID [2022-04-28 03:54:48,690 INFO L290 TraceCheckUtils]: 2: Hoare triple {22415#true} assume true; {22415#true} is VALID [2022-04-28 03:54:48,690 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {22415#true} {22415#true} #48#return; {22415#true} is VALID [2022-04-28 03:54:48,690 INFO L272 TraceCheckUtils]: 4: Hoare triple {22415#true} call #t~ret7 := main(); {22415#true} is VALID [2022-04-28 03:54:48,690 INFO L290 TraceCheckUtils]: 5: Hoare triple {22415#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {22420#(= main_~x~0 0)} is VALID [2022-04-28 03:54:48,691 INFO L290 TraceCheckUtils]: 6: Hoare triple {22420#(= main_~x~0 0)} [234] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1259 v_main_~x~0_1258)) (.cse1 (= |v_main_#t~post4_219| |v_main_#t~post4_218|))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_1259)) (and .cse0 .cse1) (and (< v_main_~x~0_1258 500001) (< v_main_~x~0_1259 v_main_~x~0_1258)))) InVars {main_~x~0=v_main_~x~0_1259, main_#t~post4=|v_main_#t~post4_219|} OutVars{main_~x~0=v_main_~x~0_1258, main_#t~post4=|v_main_#t~post4_218|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {22421#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:48,691 INFO L290 TraceCheckUtils]: 7: Hoare triple {22421#(<= main_~x~0 500000)} [235] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {22421#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:48,692 INFO L290 TraceCheckUtils]: 8: Hoare triple {22421#(<= main_~x~0 500000)} [236] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_943 v_main_~y~0_942)) (.cse1 (= |v_main_#t~post6_389| |v_main_#t~post6_387|)) (.cse3 (= v_main_~x~0_1261 v_main_~x~0_1260)) (.cse2 (<= 750000 v_main_~x~0_1261))) (or (and .cse0 .cse1 (or (not (< v_main_~x~0_1261 1000000)) (not .cse2)) .cse3) (and .cse0 .cse1 .cse3) (and (= (+ v_main_~x~0_1260 (* v_main_~y~0_943 2)) (+ v_main_~x~0_1261 (* v_main_~y~0_942 2))) (< v_main_~y~0_943 v_main_~y~0_942) (< v_main_~y~0_942 (+ v_main_~y~0_943 2 (div (+ 999999 (* (- 1) v_main_~x~0_1261)) 2))) .cse2))) InVars {main_~y~0=v_main_~y~0_943, main_~x~0=v_main_~x~0_1261, main_#t~post6=|v_main_#t~post6_389|} OutVars{main_~y~0=v_main_~y~0_942, main_~x~0=v_main_~x~0_1260, main_#t~post6=|v_main_#t~post6_387|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {22422#(<= main_~x~0 999999)} is VALID [2022-04-28 03:54:48,692 INFO L290 TraceCheckUtils]: 9: Hoare triple {22422#(<= main_~x~0 999999)} [237] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {22422#(<= main_~x~0 999999)} is VALID [2022-04-28 03:54:48,693 INFO L290 TraceCheckUtils]: 10: Hoare triple {22422#(<= main_~x~0 999999)} [238] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1263)) (.cse1 (= v_main_~x~0_1263 v_main_~x~0_1262)) (.cse2 (= v_main_~y~0_945 v_main_~y~0_944)) (.cse3 (= |v_main_#t~post5_185| |v_main_#t~post5_184|)) (.cse4 (= |v_main_#t~post6_392| |v_main_#t~post6_388|))) (or (and .cse0 (< v_main_~x~0_1263 v_main_~x~0_1262) (= (+ v_main_~x~0_1263 v_main_~y~0_944) (+ v_main_~x~0_1262 v_main_~y~0_945)) (< v_main_~x~0_1262 750001)) (and .cse1 .cse2 .cse3 .cse4) (and (or (not .cse0) (not (< v_main_~x~0_1263 750000))) .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_945, main_#t~post5=|v_main_#t~post5_185|, main_~x~0=v_main_~x~0_1263, main_#t~post6=|v_main_#t~post6_392|} OutVars{main_~y~0=v_main_~y~0_944, main_#t~post5=|v_main_#t~post5_184|, main_~x~0=v_main_~x~0_1262, main_#t~post6=|v_main_#t~post6_388|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {22422#(<= main_~x~0 999999)} is VALID [2022-04-28 03:54:48,693 INFO L290 TraceCheckUtils]: 11: Hoare triple {22422#(<= main_~x~0 999999)} [233] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {22416#false} is VALID [2022-04-28 03:54:48,694 INFO L272 TraceCheckUtils]: 12: Hoare triple {22416#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {22416#false} is VALID [2022-04-28 03:54:48,694 INFO L290 TraceCheckUtils]: 13: Hoare triple {22416#false} ~cond := #in~cond; {22416#false} is VALID [2022-04-28 03:54:48,694 INFO L290 TraceCheckUtils]: 14: Hoare triple {22416#false} assume 0 == ~cond; {22416#false} is VALID [2022-04-28 03:54:48,694 INFO L290 TraceCheckUtils]: 15: Hoare triple {22416#false} assume !false; {22416#false} is VALID [2022-04-28 03:54:48,694 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:54:48,694 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:54:48,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [868705622] [2022-04-28 03:54:48,694 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [868705622] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:54:48,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1396280635] [2022-04-28 03:54:48,694 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:54:48,694 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:54:48,695 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:54:48,696 INFO L229 MonitoredProcess]: Starting monitored process 32 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:54:48,718 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-04-28 03:54:48,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:54:48,730 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:54:48,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:54:48,739 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:54:48,937 INFO L272 TraceCheckUtils]: 0: Hoare triple {22415#true} call ULTIMATE.init(); {22415#true} is VALID [2022-04-28 03:54:48,938 INFO L290 TraceCheckUtils]: 1: Hoare triple {22415#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {22415#true} is VALID [2022-04-28 03:54:48,938 INFO L290 TraceCheckUtils]: 2: Hoare triple {22415#true} assume true; {22415#true} is VALID [2022-04-28 03:54:48,938 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {22415#true} {22415#true} #48#return; {22415#true} is VALID [2022-04-28 03:54:48,938 INFO L272 TraceCheckUtils]: 4: Hoare triple {22415#true} call #t~ret7 := main(); {22415#true} is VALID [2022-04-28 03:54:48,938 INFO L290 TraceCheckUtils]: 5: Hoare triple {22415#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {22442#(<= main_~x~0 0)} is VALID [2022-04-28 03:54:48,939 INFO L290 TraceCheckUtils]: 6: Hoare triple {22442#(<= main_~x~0 0)} [234] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1259 v_main_~x~0_1258)) (.cse1 (= |v_main_#t~post4_219| |v_main_#t~post4_218|))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_1259)) (and .cse0 .cse1) (and (< v_main_~x~0_1258 500001) (< v_main_~x~0_1259 v_main_~x~0_1258)))) InVars {main_~x~0=v_main_~x~0_1259, main_#t~post4=|v_main_#t~post4_219|} OutVars{main_~x~0=v_main_~x~0_1258, main_#t~post4=|v_main_#t~post4_218|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {22421#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:48,939 INFO L290 TraceCheckUtils]: 7: Hoare triple {22421#(<= main_~x~0 500000)} [235] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {22421#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:48,940 INFO L290 TraceCheckUtils]: 8: Hoare triple {22421#(<= main_~x~0 500000)} [236] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_943 v_main_~y~0_942)) (.cse1 (= |v_main_#t~post6_389| |v_main_#t~post6_387|)) (.cse3 (= v_main_~x~0_1261 v_main_~x~0_1260)) (.cse2 (<= 750000 v_main_~x~0_1261))) (or (and .cse0 .cse1 (or (not (< v_main_~x~0_1261 1000000)) (not .cse2)) .cse3) (and .cse0 .cse1 .cse3) (and (= (+ v_main_~x~0_1260 (* v_main_~y~0_943 2)) (+ v_main_~x~0_1261 (* v_main_~y~0_942 2))) (< v_main_~y~0_943 v_main_~y~0_942) (< v_main_~y~0_942 (+ v_main_~y~0_943 2 (div (+ 999999 (* (- 1) v_main_~x~0_1261)) 2))) .cse2))) InVars {main_~y~0=v_main_~y~0_943, main_~x~0=v_main_~x~0_1261, main_#t~post6=|v_main_#t~post6_389|} OutVars{main_~y~0=v_main_~y~0_942, main_~x~0=v_main_~x~0_1260, main_#t~post6=|v_main_#t~post6_387|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {22421#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:48,940 INFO L290 TraceCheckUtils]: 9: Hoare triple {22421#(<= main_~x~0 500000)} [237] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {22421#(<= main_~x~0 500000)} is VALID [2022-04-28 03:54:48,941 INFO L290 TraceCheckUtils]: 10: Hoare triple {22421#(<= main_~x~0 500000)} [238] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1263)) (.cse1 (= v_main_~x~0_1263 v_main_~x~0_1262)) (.cse2 (= v_main_~y~0_945 v_main_~y~0_944)) (.cse3 (= |v_main_#t~post5_185| |v_main_#t~post5_184|)) (.cse4 (= |v_main_#t~post6_392| |v_main_#t~post6_388|))) (or (and .cse0 (< v_main_~x~0_1263 v_main_~x~0_1262) (= (+ v_main_~x~0_1263 v_main_~y~0_944) (+ v_main_~x~0_1262 v_main_~y~0_945)) (< v_main_~x~0_1262 750001)) (and .cse1 .cse2 .cse3 .cse4) (and (or (not .cse0) (not (< v_main_~x~0_1263 750000))) .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_945, main_#t~post5=|v_main_#t~post5_185|, main_~x~0=v_main_~x~0_1263, main_#t~post6=|v_main_#t~post6_392|} OutVars{main_~y~0=v_main_~y~0_944, main_#t~post5=|v_main_#t~post5_184|, main_~x~0=v_main_~x~0_1262, main_#t~post6=|v_main_#t~post6_388|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {22458#(< main_~x~0 750001)} is VALID [2022-04-28 03:54:48,941 INFO L290 TraceCheckUtils]: 11: Hoare triple {22458#(< main_~x~0 750001)} [233] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {22416#false} is VALID [2022-04-28 03:54:48,941 INFO L272 TraceCheckUtils]: 12: Hoare triple {22416#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {22416#false} is VALID [2022-04-28 03:54:48,941 INFO L290 TraceCheckUtils]: 13: Hoare triple {22416#false} ~cond := #in~cond; {22416#false} is VALID [2022-04-28 03:54:48,941 INFO L290 TraceCheckUtils]: 14: Hoare triple {22416#false} assume 0 == ~cond; {22416#false} is VALID [2022-04-28 03:54:48,941 INFO L290 TraceCheckUtils]: 15: Hoare triple {22416#false} assume !false; {22416#false} is VALID [2022-04-28 03:54:48,941 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:54:48,941 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:54:49,388 INFO L290 TraceCheckUtils]: 15: Hoare triple {22416#false} assume !false; {22416#false} is VALID [2022-04-28 03:54:49,389 INFO L290 TraceCheckUtils]: 14: Hoare triple {22477#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {22416#false} is VALID [2022-04-28 03:54:49,389 INFO L290 TraceCheckUtils]: 13: Hoare triple {22481#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {22477#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:54:49,389 INFO L272 TraceCheckUtils]: 12: Hoare triple {22485#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {22481#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:54:49,390 INFO L290 TraceCheckUtils]: 11: Hoare triple {22489#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [233] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {22485#(= main_~x~0 1000000)} is VALID [2022-04-28 03:54:49,391 INFO L290 TraceCheckUtils]: 10: Hoare triple {22489#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [238] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1263)) (.cse1 (= v_main_~x~0_1263 v_main_~x~0_1262)) (.cse2 (= v_main_~y~0_945 v_main_~y~0_944)) (.cse3 (= |v_main_#t~post5_185| |v_main_#t~post5_184|)) (.cse4 (= |v_main_#t~post6_392| |v_main_#t~post6_388|))) (or (and .cse0 (< v_main_~x~0_1263 v_main_~x~0_1262) (= (+ v_main_~x~0_1263 v_main_~y~0_944) (+ v_main_~x~0_1262 v_main_~y~0_945)) (< v_main_~x~0_1262 750001)) (and .cse1 .cse2 .cse3 .cse4) (and (or (not .cse0) (not (< v_main_~x~0_1263 750000))) .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_945, main_#t~post5=|v_main_#t~post5_185|, main_~x~0=v_main_~x~0_1263, main_#t~post6=|v_main_#t~post6_392|} OutVars{main_~y~0=v_main_~y~0_944, main_#t~post5=|v_main_#t~post5_184|, main_~x~0=v_main_~x~0_1262, main_#t~post6=|v_main_#t~post6_388|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {22489#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:54:49,391 INFO L290 TraceCheckUtils]: 9: Hoare triple {22489#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [237] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {22489#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:54:49,392 INFO L290 TraceCheckUtils]: 8: Hoare triple {22499#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [236] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_943 v_main_~y~0_942)) (.cse1 (= |v_main_#t~post6_389| |v_main_#t~post6_387|)) (.cse3 (= v_main_~x~0_1261 v_main_~x~0_1260)) (.cse2 (<= 750000 v_main_~x~0_1261))) (or (and .cse0 .cse1 (or (not (< v_main_~x~0_1261 1000000)) (not .cse2)) .cse3) (and .cse0 .cse1 .cse3) (and (= (+ v_main_~x~0_1260 (* v_main_~y~0_943 2)) (+ v_main_~x~0_1261 (* v_main_~y~0_942 2))) (< v_main_~y~0_943 v_main_~y~0_942) (< v_main_~y~0_942 (+ v_main_~y~0_943 2 (div (+ 999999 (* (- 1) v_main_~x~0_1261)) 2))) .cse2))) InVars {main_~y~0=v_main_~y~0_943, main_~x~0=v_main_~x~0_1261, main_#t~post6=|v_main_#t~post6_389|} OutVars{main_~y~0=v_main_~y~0_942, main_~x~0=v_main_~x~0_1260, main_#t~post6=|v_main_#t~post6_387|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {22489#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:54:49,393 INFO L290 TraceCheckUtils]: 7: Hoare triple {22499#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [235] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {22499#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:54:49,394 INFO L290 TraceCheckUtils]: 6: Hoare triple {22499#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [234] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1259 v_main_~x~0_1258)) (.cse1 (= |v_main_#t~post4_219| |v_main_#t~post4_218|))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_1259)) (and .cse0 .cse1) (and (< v_main_~x~0_1258 500001) (< v_main_~x~0_1259 v_main_~x~0_1258)))) InVars {main_~x~0=v_main_~x~0_1259, main_#t~post4=|v_main_#t~post4_219|} OutVars{main_~x~0=v_main_~x~0_1258, main_#t~post4=|v_main_#t~post4_218|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {22499#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:54:49,394 INFO L290 TraceCheckUtils]: 5: Hoare triple {22415#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {22499#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:54:49,394 INFO L272 TraceCheckUtils]: 4: Hoare triple {22415#true} call #t~ret7 := main(); {22415#true} is VALID [2022-04-28 03:54:49,394 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {22415#true} {22415#true} #48#return; {22415#true} is VALID [2022-04-28 03:54:49,394 INFO L290 TraceCheckUtils]: 2: Hoare triple {22415#true} assume true; {22415#true} is VALID [2022-04-28 03:54:49,394 INFO L290 TraceCheckUtils]: 1: Hoare triple {22415#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {22415#true} is VALID [2022-04-28 03:54:49,394 INFO L272 TraceCheckUtils]: 0: Hoare triple {22415#true} call ULTIMATE.init(); {22415#true} is VALID [2022-04-28 03:54:49,395 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:54:49,395 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1396280635] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:54:49,395 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:54:49,395 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:54:50,559 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:54:50,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1816063058] [2022-04-28 03:54:50,559 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1816063058] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:54:50,559 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:54:50,559 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [37] imperfect sequences [] total 37 [2022-04-28 03:54:50,559 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [467715400] [2022-04-28 03:54:50,559 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:54:50,560 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 37 states have (on average 3.7027027027027026) internal successors, (137), 36 states have internal predecessors, (137), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 141 [2022-04-28 03:54:50,560 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:54:50,560 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 37 states, 37 states have (on average 3.7027027027027026) internal successors, (137), 36 states have internal predecessors, (137), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:50,653 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 141 edges. 141 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:54:50,653 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-04-28 03:54:50,653 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:54:50,654 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-04-28 03:54:50,654 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=256, Invalid=1906, Unknown=0, NotChecked=0, Total=2162 [2022-04-28 03:54:50,654 INFO L87 Difference]: Start difference. First operand 144 states and 148 transitions. Second operand has 37 states, 37 states have (on average 3.7027027027027026) internal successors, (137), 36 states have internal predecessors, (137), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:59,030 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:54:59,030 INFO L93 Difference]: Finished difference Result 171 states and 180 transitions. [2022-04-28 03:54:59,030 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-04-28 03:54:59,030 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 37 states have (on average 3.7027027027027026) internal successors, (137), 36 states have internal predecessors, (137), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 141 [2022-04-28 03:54:59,031 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:54:59,031 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 37 states have (on average 3.7027027027027026) internal successors, (137), 36 states have internal predecessors, (137), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:59,032 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 160 transitions. [2022-04-28 03:54:59,032 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 37 states have (on average 3.7027027027027026) internal successors, (137), 36 states have internal predecessors, (137), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:54:59,033 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 160 transitions. [2022-04-28 03:54:59,033 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 37 states and 160 transitions. [2022-04-28 03:54:59,155 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 160 edges. 160 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:54:59,157 INFO L225 Difference]: With dead ends: 171 [2022-04-28 03:54:59,157 INFO L226 Difference]: Without dead ends: 153 [2022-04-28 03:54:59,157 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 208 GetRequests, 127 SyntacticMatches, 2 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1158 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=537, Invalid=5943, Unknown=0, NotChecked=0, Total=6480 [2022-04-28 03:54:59,157 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 107 mSDsluCounter, 167 mSDsCounter, 0 mSdLazyCounter, 4492 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 4529 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 4492 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-04-28 03:54:59,157 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 210 Invalid, 4529 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 4492 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2022-04-28 03:54:59,158 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153 states. [2022-04-28 03:55:01,095 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153 to 148. [2022-04-28 03:55:01,096 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:55:01,096 INFO L82 GeneralOperation]: Start isEquivalent. First operand 153 states. Second operand has 148 states, 143 states have (on average 1.034965034965035) internal successors, (148), 143 states have internal predecessors, (148), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:01,096 INFO L74 IsIncluded]: Start isIncluded. First operand 153 states. Second operand has 148 states, 143 states have (on average 1.034965034965035) internal successors, (148), 143 states have internal predecessors, (148), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:01,096 INFO L87 Difference]: Start difference. First operand 153 states. Second operand has 148 states, 143 states have (on average 1.034965034965035) internal successors, (148), 143 states have internal predecessors, (148), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:01,097 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:55:01,097 INFO L93 Difference]: Finished difference Result 153 states and 157 transitions. [2022-04-28 03:55:01,097 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 157 transitions. [2022-04-28 03:55:01,098 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:55:01,098 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:55:01,098 INFO L74 IsIncluded]: Start isIncluded. First operand has 148 states, 143 states have (on average 1.034965034965035) internal successors, (148), 143 states have internal predecessors, (148), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 153 states. [2022-04-28 03:55:01,098 INFO L87 Difference]: Start difference. First operand has 148 states, 143 states have (on average 1.034965034965035) internal successors, (148), 143 states have internal predecessors, (148), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 153 states. [2022-04-28 03:55:01,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:55:01,100 INFO L93 Difference]: Finished difference Result 153 states and 157 transitions. [2022-04-28 03:55:01,100 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 157 transitions. [2022-04-28 03:55:01,100 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:55:01,100 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:55:01,100 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:55:01,100 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:55:01,101 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 143 states have (on average 1.034965034965035) internal successors, (148), 143 states have internal predecessors, (148), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:01,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 152 transitions. [2022-04-28 03:55:01,102 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 152 transitions. Word has length 141 [2022-04-28 03:55:01,103 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:55:01,103 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 152 transitions. [2022-04-28 03:55:01,103 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 37 states have (on average 3.7027027027027026) internal successors, (137), 36 states have internal predecessors, (137), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:01,103 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 148 states and 152 transitions. [2022-04-28 03:55:01,412 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 152 edges. 152 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:55:01,413 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 152 transitions. [2022-04-28 03:55:01,413 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 146 [2022-04-28 03:55:01,413 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:55:01,413 INFO L195 NwaCegarLoop]: trace histogram [34, 33, 33, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:55:01,431 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-04-28 03:55:01,613 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable32,32 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:55:01,614 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:55:01,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:55:01,614 INFO L85 PathProgramCache]: Analyzing trace with hash -2001977984, now seen corresponding path program 31 times [2022-04-28 03:55:01,614 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:55:01,614 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [2058306501] [2022-04-28 03:55:03,695 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:55:03,749 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:55:03,950 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:55:04,152 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:55:04,153 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:55:04,155 INFO L85 PathProgramCache]: Analyzing trace with hash 132114535, now seen corresponding path program 1 times [2022-04-28 03:55:04,156 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:55:04,156 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [111984456] [2022-04-28 03:55:04,156 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:55:04,156 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:55:04,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:55:04,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:55:04,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:55:04,211 INFO L290 TraceCheckUtils]: 0: Hoare triple {23580#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {23572#true} is VALID [2022-04-28 03:55:04,211 INFO L290 TraceCheckUtils]: 1: Hoare triple {23572#true} assume true; {23572#true} is VALID [2022-04-28 03:55:04,211 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {23572#true} {23572#true} #48#return; {23572#true} is VALID [2022-04-28 03:55:04,212 INFO L272 TraceCheckUtils]: 0: Hoare triple {23572#true} call ULTIMATE.init(); {23580#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:55:04,212 INFO L290 TraceCheckUtils]: 1: Hoare triple {23580#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {23572#true} is VALID [2022-04-28 03:55:04,212 INFO L290 TraceCheckUtils]: 2: Hoare triple {23572#true} assume true; {23572#true} is VALID [2022-04-28 03:55:04,212 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {23572#true} {23572#true} #48#return; {23572#true} is VALID [2022-04-28 03:55:04,212 INFO L272 TraceCheckUtils]: 4: Hoare triple {23572#true} call #t~ret7 := main(); {23572#true} is VALID [2022-04-28 03:55:04,212 INFO L290 TraceCheckUtils]: 5: Hoare triple {23572#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {23577#(= main_~x~0 0)} is VALID [2022-04-28 03:55:04,213 INFO L290 TraceCheckUtils]: 6: Hoare triple {23577#(= main_~x~0 0)} [240] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1316 v_main_~x~0_1315)) (.cse1 (= |v_main_#t~post4_226| |v_main_#t~post4_225|))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_1316)) (and .cse0 .cse1) (and (< v_main_~x~0_1315 500001) (< v_main_~x~0_1316 v_main_~x~0_1315)))) InVars {main_~x~0=v_main_~x~0_1316, main_#t~post4=|v_main_#t~post4_226|} OutVars{main_~x~0=v_main_~x~0_1315, main_#t~post4=|v_main_#t~post4_225|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {23578#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:04,213 INFO L290 TraceCheckUtils]: 7: Hoare triple {23578#(<= main_~x~0 500000)} [241] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {23578#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:04,214 INFO L290 TraceCheckUtils]: 8: Hoare triple {23578#(<= main_~x~0 500000)} [242] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1318)) (.cse1 (= |v_main_#t~post6_402| |v_main_#t~post6_400|)) (.cse2 (= v_main_~x~0_1318 v_main_~x~0_1317))) (or (and .cse0 (< v_main_~y~0_990 v_main_~y~0_989) (= (+ v_main_~x~0_1318 (* v_main_~y~0_989 2)) (+ v_main_~x~0_1317 (* v_main_~y~0_990 2))) (< v_main_~y~0_989 (+ v_main_~y~0_990 2 (div (+ 999999 (* (- 1) v_main_~x~0_1318)) 2)))) (and (or (not .cse0) (not (< v_main_~x~0_1318 1000000))) .cse1 (= v_main_~y~0_989 v_main_~y~0_990) .cse2) (and (= v_main_~y~0_990 v_main_~y~0_989) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_990, main_~x~0=v_main_~x~0_1318, main_#t~post6=|v_main_#t~post6_402|} OutVars{main_~y~0=v_main_~y~0_989, main_~x~0=v_main_~x~0_1317, main_#t~post6=|v_main_#t~post6_400|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {23579#(<= main_~x~0 999999)} is VALID [2022-04-28 03:55:04,215 INFO L290 TraceCheckUtils]: 9: Hoare triple {23579#(<= main_~x~0 999999)} [243] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {23579#(<= main_~x~0 999999)} is VALID [2022-04-28 03:55:04,216 INFO L290 TraceCheckUtils]: 10: Hoare triple {23579#(<= main_~x~0 999999)} [244] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= |v_main_#t~post5_191| |v_main_#t~post5_190|)) (.cse2 (= v_main_~y~0_992 v_main_~y~0_991)) (.cse0 (<= 500000 v_main_~x~0_1320)) (.cse3 (= |v_main_#t~post6_405| |v_main_#t~post6_401|))) (or (and .cse0 (< v_main_~x~0_1320 v_main_~x~0_1319) (= (+ v_main_~x~0_1319 v_main_~y~0_992) (+ v_main_~x~0_1320 v_main_~y~0_991)) (< v_main_~x~0_1319 750001)) (and .cse1 .cse2 (= v_main_~x~0_1320 v_main_~x~0_1319) .cse3) (and .cse1 (= v_main_~x~0_1319 v_main_~x~0_1320) .cse2 (or (not (< v_main_~x~0_1320 750000)) (not .cse0)) .cse3))) InVars {main_~y~0=v_main_~y~0_992, main_#t~post5=|v_main_#t~post5_191|, main_~x~0=v_main_~x~0_1320, main_#t~post6=|v_main_#t~post6_405|} OutVars{main_~y~0=v_main_~y~0_991, main_#t~post5=|v_main_#t~post5_190|, main_~x~0=v_main_~x~0_1319, main_#t~post6=|v_main_#t~post6_401|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {23579#(<= main_~x~0 999999)} is VALID [2022-04-28 03:55:04,216 INFO L290 TraceCheckUtils]: 11: Hoare triple {23579#(<= main_~x~0 999999)} [239] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {23573#false} is VALID [2022-04-28 03:55:04,216 INFO L272 TraceCheckUtils]: 12: Hoare triple {23573#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {23573#false} is VALID [2022-04-28 03:55:04,216 INFO L290 TraceCheckUtils]: 13: Hoare triple {23573#false} ~cond := #in~cond; {23573#false} is VALID [2022-04-28 03:55:04,216 INFO L290 TraceCheckUtils]: 14: Hoare triple {23573#false} assume 0 == ~cond; {23573#false} is VALID [2022-04-28 03:55:04,216 INFO L290 TraceCheckUtils]: 15: Hoare triple {23573#false} assume !false; {23573#false} is VALID [2022-04-28 03:55:04,216 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:55:04,217 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:55:04,217 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [111984456] [2022-04-28 03:55:04,217 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [111984456] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:55:04,217 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1570828403] [2022-04-28 03:55:04,217 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:55:04,217 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:55:04,217 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:55:04,220 INFO L229 MonitoredProcess]: Starting monitored process 33 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:55:04,223 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-04-28 03:55:04,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:55:04,248 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:55:04,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:55:04,256 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:55:04,431 INFO L272 TraceCheckUtils]: 0: Hoare triple {23572#true} call ULTIMATE.init(); {23572#true} is VALID [2022-04-28 03:55:04,431 INFO L290 TraceCheckUtils]: 1: Hoare triple {23572#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {23572#true} is VALID [2022-04-28 03:55:04,431 INFO L290 TraceCheckUtils]: 2: Hoare triple {23572#true} assume true; {23572#true} is VALID [2022-04-28 03:55:04,431 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {23572#true} {23572#true} #48#return; {23572#true} is VALID [2022-04-28 03:55:04,431 INFO L272 TraceCheckUtils]: 4: Hoare triple {23572#true} call #t~ret7 := main(); {23572#true} is VALID [2022-04-28 03:55:04,431 INFO L290 TraceCheckUtils]: 5: Hoare triple {23572#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {23599#(<= main_~x~0 0)} is VALID [2022-04-28 03:55:04,432 INFO L290 TraceCheckUtils]: 6: Hoare triple {23599#(<= main_~x~0 0)} [240] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1316 v_main_~x~0_1315)) (.cse1 (= |v_main_#t~post4_226| |v_main_#t~post4_225|))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_1316)) (and .cse0 .cse1) (and (< v_main_~x~0_1315 500001) (< v_main_~x~0_1316 v_main_~x~0_1315)))) InVars {main_~x~0=v_main_~x~0_1316, main_#t~post4=|v_main_#t~post4_226|} OutVars{main_~x~0=v_main_~x~0_1315, main_#t~post4=|v_main_#t~post4_225|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {23578#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:04,432 INFO L290 TraceCheckUtils]: 7: Hoare triple {23578#(<= main_~x~0 500000)} [241] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {23578#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:04,433 INFO L290 TraceCheckUtils]: 8: Hoare triple {23578#(<= main_~x~0 500000)} [242] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1318)) (.cse1 (= |v_main_#t~post6_402| |v_main_#t~post6_400|)) (.cse2 (= v_main_~x~0_1318 v_main_~x~0_1317))) (or (and .cse0 (< v_main_~y~0_990 v_main_~y~0_989) (= (+ v_main_~x~0_1318 (* v_main_~y~0_989 2)) (+ v_main_~x~0_1317 (* v_main_~y~0_990 2))) (< v_main_~y~0_989 (+ v_main_~y~0_990 2 (div (+ 999999 (* (- 1) v_main_~x~0_1318)) 2)))) (and (or (not .cse0) (not (< v_main_~x~0_1318 1000000))) .cse1 (= v_main_~y~0_989 v_main_~y~0_990) .cse2) (and (= v_main_~y~0_990 v_main_~y~0_989) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_990, main_~x~0=v_main_~x~0_1318, main_#t~post6=|v_main_#t~post6_402|} OutVars{main_~y~0=v_main_~y~0_989, main_~x~0=v_main_~x~0_1317, main_#t~post6=|v_main_#t~post6_400|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {23578#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:04,433 INFO L290 TraceCheckUtils]: 9: Hoare triple {23578#(<= main_~x~0 500000)} [243] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {23578#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:04,434 INFO L290 TraceCheckUtils]: 10: Hoare triple {23578#(<= main_~x~0 500000)} [244] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= |v_main_#t~post5_191| |v_main_#t~post5_190|)) (.cse2 (= v_main_~y~0_992 v_main_~y~0_991)) (.cse0 (<= 500000 v_main_~x~0_1320)) (.cse3 (= |v_main_#t~post6_405| |v_main_#t~post6_401|))) (or (and .cse0 (< v_main_~x~0_1320 v_main_~x~0_1319) (= (+ v_main_~x~0_1319 v_main_~y~0_992) (+ v_main_~x~0_1320 v_main_~y~0_991)) (< v_main_~x~0_1319 750001)) (and .cse1 .cse2 (= v_main_~x~0_1320 v_main_~x~0_1319) .cse3) (and .cse1 (= v_main_~x~0_1319 v_main_~x~0_1320) .cse2 (or (not (< v_main_~x~0_1320 750000)) (not .cse0)) .cse3))) InVars {main_~y~0=v_main_~y~0_992, main_#t~post5=|v_main_#t~post5_191|, main_~x~0=v_main_~x~0_1320, main_#t~post6=|v_main_#t~post6_405|} OutVars{main_~y~0=v_main_~y~0_991, main_#t~post5=|v_main_#t~post5_190|, main_~x~0=v_main_~x~0_1319, main_#t~post6=|v_main_#t~post6_401|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {23615#(< main_~x~0 750001)} is VALID [2022-04-28 03:55:04,434 INFO L290 TraceCheckUtils]: 11: Hoare triple {23615#(< main_~x~0 750001)} [239] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {23573#false} is VALID [2022-04-28 03:55:04,434 INFO L272 TraceCheckUtils]: 12: Hoare triple {23573#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {23573#false} is VALID [2022-04-28 03:55:04,434 INFO L290 TraceCheckUtils]: 13: Hoare triple {23573#false} ~cond := #in~cond; {23573#false} is VALID [2022-04-28 03:55:04,434 INFO L290 TraceCheckUtils]: 14: Hoare triple {23573#false} assume 0 == ~cond; {23573#false} is VALID [2022-04-28 03:55:04,434 INFO L290 TraceCheckUtils]: 15: Hoare triple {23573#false} assume !false; {23573#false} is VALID [2022-04-28 03:55:04,435 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:55:04,435 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:55:04,975 INFO L290 TraceCheckUtils]: 15: Hoare triple {23573#false} assume !false; {23573#false} is VALID [2022-04-28 03:55:04,975 INFO L290 TraceCheckUtils]: 14: Hoare triple {23634#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {23573#false} is VALID [2022-04-28 03:55:04,975 INFO L290 TraceCheckUtils]: 13: Hoare triple {23638#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {23634#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:55:04,976 INFO L272 TraceCheckUtils]: 12: Hoare triple {23642#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {23638#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:55:04,976 INFO L290 TraceCheckUtils]: 11: Hoare triple {23646#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [239] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {23642#(= main_~x~0 1000000)} is VALID [2022-04-28 03:55:04,977 INFO L290 TraceCheckUtils]: 10: Hoare triple {23646#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [244] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= |v_main_#t~post5_191| |v_main_#t~post5_190|)) (.cse2 (= v_main_~y~0_992 v_main_~y~0_991)) (.cse0 (<= 500000 v_main_~x~0_1320)) (.cse3 (= |v_main_#t~post6_405| |v_main_#t~post6_401|))) (or (and .cse0 (< v_main_~x~0_1320 v_main_~x~0_1319) (= (+ v_main_~x~0_1319 v_main_~y~0_992) (+ v_main_~x~0_1320 v_main_~y~0_991)) (< v_main_~x~0_1319 750001)) (and .cse1 .cse2 (= v_main_~x~0_1320 v_main_~x~0_1319) .cse3) (and .cse1 (= v_main_~x~0_1319 v_main_~x~0_1320) .cse2 (or (not (< v_main_~x~0_1320 750000)) (not .cse0)) .cse3))) InVars {main_~y~0=v_main_~y~0_992, main_#t~post5=|v_main_#t~post5_191|, main_~x~0=v_main_~x~0_1320, main_#t~post6=|v_main_#t~post6_405|} OutVars{main_~y~0=v_main_~y~0_991, main_#t~post5=|v_main_#t~post5_190|, main_~x~0=v_main_~x~0_1319, main_#t~post6=|v_main_#t~post6_401|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {23646#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:55:04,977 INFO L290 TraceCheckUtils]: 9: Hoare triple {23646#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [243] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {23646#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:55:04,978 INFO L290 TraceCheckUtils]: 8: Hoare triple {23656#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [242] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1318)) (.cse1 (= |v_main_#t~post6_402| |v_main_#t~post6_400|)) (.cse2 (= v_main_~x~0_1318 v_main_~x~0_1317))) (or (and .cse0 (< v_main_~y~0_990 v_main_~y~0_989) (= (+ v_main_~x~0_1318 (* v_main_~y~0_989 2)) (+ v_main_~x~0_1317 (* v_main_~y~0_990 2))) (< v_main_~y~0_989 (+ v_main_~y~0_990 2 (div (+ 999999 (* (- 1) v_main_~x~0_1318)) 2)))) (and (or (not .cse0) (not (< v_main_~x~0_1318 1000000))) .cse1 (= v_main_~y~0_989 v_main_~y~0_990) .cse2) (and (= v_main_~y~0_990 v_main_~y~0_989) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_990, main_~x~0=v_main_~x~0_1318, main_#t~post6=|v_main_#t~post6_402|} OutVars{main_~y~0=v_main_~y~0_989, main_~x~0=v_main_~x~0_1317, main_#t~post6=|v_main_#t~post6_400|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {23646#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:55:04,979 INFO L290 TraceCheckUtils]: 7: Hoare triple {23656#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [241] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {23656#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:55:04,980 INFO L290 TraceCheckUtils]: 6: Hoare triple {23656#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [240] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1316 v_main_~x~0_1315)) (.cse1 (= |v_main_#t~post4_226| |v_main_#t~post4_225|))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_1316)) (and .cse0 .cse1) (and (< v_main_~x~0_1315 500001) (< v_main_~x~0_1316 v_main_~x~0_1315)))) InVars {main_~x~0=v_main_~x~0_1316, main_#t~post4=|v_main_#t~post4_226|} OutVars{main_~x~0=v_main_~x~0_1315, main_#t~post4=|v_main_#t~post4_225|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {23656#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:55:04,980 INFO L290 TraceCheckUtils]: 5: Hoare triple {23572#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {23656#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:55:04,980 INFO L272 TraceCheckUtils]: 4: Hoare triple {23572#true} call #t~ret7 := main(); {23572#true} is VALID [2022-04-28 03:55:04,981 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {23572#true} {23572#true} #48#return; {23572#true} is VALID [2022-04-28 03:55:04,981 INFO L290 TraceCheckUtils]: 2: Hoare triple {23572#true} assume true; {23572#true} is VALID [2022-04-28 03:55:04,981 INFO L290 TraceCheckUtils]: 1: Hoare triple {23572#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {23572#true} is VALID [2022-04-28 03:55:04,981 INFO L272 TraceCheckUtils]: 0: Hoare triple {23572#true} call ULTIMATE.init(); {23572#true} is VALID [2022-04-28 03:55:04,981 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:55:04,981 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1570828403] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:55:04,981 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:55:04,981 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:55:06,227 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:55:06,228 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [2058306501] [2022-04-28 03:55:06,228 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [2058306501] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:55:06,228 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:55:06,228 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [38] imperfect sequences [] total 38 [2022-04-28 03:55:06,228 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [883055897] [2022-04-28 03:55:06,228 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:55:06,228 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 3.710526315789474) internal successors, (141), 37 states have internal predecessors, (141), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 145 [2022-04-28 03:55:06,228 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:55:06,229 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 38 states, 38 states have (on average 3.710526315789474) internal successors, (141), 37 states have internal predecessors, (141), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:06,326 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 145 edges. 145 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:55:06,326 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-04-28 03:55:06,326 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:55:06,327 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-04-28 03:55:06,327 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=262, Invalid=1994, Unknown=0, NotChecked=0, Total=2256 [2022-04-28 03:55:06,327 INFO L87 Difference]: Start difference. First operand 148 states and 152 transitions. Second operand has 38 states, 38 states have (on average 3.710526315789474) internal successors, (141), 37 states have internal predecessors, (141), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:15,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:55:15,083 INFO L93 Difference]: Finished difference Result 175 states and 184 transitions. [2022-04-28 03:55:15,083 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-04-28 03:55:15,083 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 3.710526315789474) internal successors, (141), 37 states have internal predecessors, (141), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 145 [2022-04-28 03:55:15,083 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:55:15,083 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 38 states have (on average 3.710526315789474) internal successors, (141), 37 states have internal predecessors, (141), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:15,084 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 164 transitions. [2022-04-28 03:55:15,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 38 states have (on average 3.710526315789474) internal successors, (141), 37 states have internal predecessors, (141), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:15,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 164 transitions. [2022-04-28 03:55:15,085 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 38 states and 164 transitions. [2022-04-28 03:55:15,209 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 164 edges. 164 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:55:15,211 INFO L225 Difference]: With dead ends: 175 [2022-04-28 03:55:15,211 INFO L226 Difference]: Without dead ends: 157 [2022-04-28 03:55:15,211 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 213 GetRequests, 130 SyntacticMatches, 2 SemanticMatches, 81 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1209 ImplicationChecksByTransitivity, 1.5s TimeCoverageRelationStatistics Valid=551, Invalid=6255, Unknown=0, NotChecked=0, Total=6806 [2022-04-28 03:55:15,212 INFO L413 NwaCegarLoop]: 44 mSDtfsCounter, 111 mSDsluCounter, 167 mSDsCounter, 0 mSdLazyCounter, 4630 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 111 SdHoareTripleChecker+Valid, 211 SdHoareTripleChecker+Invalid, 4668 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 4630 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.3s IncrementalHoareTripleChecker+Time [2022-04-28 03:55:15,212 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [111 Valid, 211 Invalid, 4668 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 4630 Invalid, 0 Unknown, 0 Unchecked, 3.3s Time] [2022-04-28 03:55:15,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2022-04-28 03:55:17,176 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 152. [2022-04-28 03:55:17,176 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:55:17,176 INFO L82 GeneralOperation]: Start isEquivalent. First operand 157 states. Second operand has 152 states, 147 states have (on average 1.034013605442177) internal successors, (152), 147 states have internal predecessors, (152), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:17,177 INFO L74 IsIncluded]: Start isIncluded. First operand 157 states. Second operand has 152 states, 147 states have (on average 1.034013605442177) internal successors, (152), 147 states have internal predecessors, (152), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:17,177 INFO L87 Difference]: Start difference. First operand 157 states. Second operand has 152 states, 147 states have (on average 1.034013605442177) internal successors, (152), 147 states have internal predecessors, (152), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:17,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:55:17,178 INFO L93 Difference]: Finished difference Result 157 states and 161 transitions. [2022-04-28 03:55:17,178 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 161 transitions. [2022-04-28 03:55:17,178 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:55:17,178 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:55:17,178 INFO L74 IsIncluded]: Start isIncluded. First operand has 152 states, 147 states have (on average 1.034013605442177) internal successors, (152), 147 states have internal predecessors, (152), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 157 states. [2022-04-28 03:55:17,179 INFO L87 Difference]: Start difference. First operand has 152 states, 147 states have (on average 1.034013605442177) internal successors, (152), 147 states have internal predecessors, (152), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 157 states. [2022-04-28 03:55:17,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:55:17,180 INFO L93 Difference]: Finished difference Result 157 states and 161 transitions. [2022-04-28 03:55:17,181 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 161 transitions. [2022-04-28 03:55:17,181 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:55:17,181 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:55:17,181 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:55:17,181 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:55:17,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 147 states have (on average 1.034013605442177) internal successors, (152), 147 states have internal predecessors, (152), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:17,183 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 156 transitions. [2022-04-28 03:55:17,183 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 156 transitions. Word has length 145 [2022-04-28 03:55:17,183 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:55:17,183 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 156 transitions. [2022-04-28 03:55:17,184 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 3.710526315789474) internal successors, (141), 37 states have internal predecessors, (141), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:17,184 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 152 states and 156 transitions. [2022-04-28 03:55:17,525 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 156 edges. 156 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:55:17,525 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 156 transitions. [2022-04-28 03:55:17,526 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 150 [2022-04-28 03:55:17,526 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:55:17,526 INFO L195 NwaCegarLoop]: trace histogram [35, 34, 34, 33, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:55:17,541 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Forceful destruction successful, exit code 0 [2022-04-28 03:55:17,726 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable33,33 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:55:17,726 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:55:17,726 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:55:17,727 INFO L85 PathProgramCache]: Analyzing trace with hash 1652905175, now seen corresponding path program 32 times [2022-04-28 03:55:17,727 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:55:17,727 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [542159316] [2022-04-28 03:55:19,853 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:55:20,055 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:55:24,199 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:55:24,324 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:55:24,325 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:55:24,328 INFO L85 PathProgramCache]: Analyzing trace with hash -227460441, now seen corresponding path program 1 times [2022-04-28 03:55:24,328 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:55:24,328 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1071643283] [2022-04-28 03:55:24,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:55:24,328 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:55:24,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:55:24,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:55:24,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:55:24,375 INFO L290 TraceCheckUtils]: 0: Hoare triple {24764#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {24756#true} is VALID [2022-04-28 03:55:24,375 INFO L290 TraceCheckUtils]: 1: Hoare triple {24756#true} assume true; {24756#true} is VALID [2022-04-28 03:55:24,375 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24756#true} {24756#true} #48#return; {24756#true} is VALID [2022-04-28 03:55:24,376 INFO L272 TraceCheckUtils]: 0: Hoare triple {24756#true} call ULTIMATE.init(); {24764#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:55:24,376 INFO L290 TraceCheckUtils]: 1: Hoare triple {24764#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {24756#true} is VALID [2022-04-28 03:55:24,376 INFO L290 TraceCheckUtils]: 2: Hoare triple {24756#true} assume true; {24756#true} is VALID [2022-04-28 03:55:24,376 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {24756#true} {24756#true} #48#return; {24756#true} is VALID [2022-04-28 03:55:24,376 INFO L272 TraceCheckUtils]: 4: Hoare triple {24756#true} call #t~ret7 := main(); {24756#true} is VALID [2022-04-28 03:55:24,377 INFO L290 TraceCheckUtils]: 5: Hoare triple {24756#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {24761#(= main_~x~0 0)} is VALID [2022-04-28 03:55:24,377 INFO L290 TraceCheckUtils]: 6: Hoare triple {24761#(= main_~x~0 0)} [246] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_233| |v_main_#t~post4_232|)) (.cse1 (= v_main_~x~0_1374 v_main_~x~0_1373))) (or (and .cse0 (<= 500000 v_main_~x~0_1374) .cse1) (and (< v_main_~x~0_1373 500001) (< v_main_~x~0_1374 v_main_~x~0_1373)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_1374, main_#t~post4=|v_main_#t~post4_233|} OutVars{main_~x~0=v_main_~x~0_1373, main_#t~post4=|v_main_#t~post4_232|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {24762#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:24,378 INFO L290 TraceCheckUtils]: 7: Hoare triple {24762#(<= main_~x~0 500000)} [247] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {24762#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:24,379 INFO L290 TraceCheckUtils]: 8: Hoare triple {24762#(<= main_~x~0 500000)} [248] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1038 v_main_~y~0_1037)) (.cse1 (= |v_main_#t~post6_415| |v_main_#t~post6_413|)) (.cse3 (= v_main_~x~0_1376 v_main_~x~0_1375)) (.cse2 (<= 750000 v_main_~x~0_1376))) (or (and .cse0 .cse1 (or (not .cse2) (not (< v_main_~x~0_1376 1000000))) .cse3) (and .cse0 .cse1 .cse3) (and (< v_main_~y~0_1037 (+ 2 v_main_~y~0_1038 (div (+ 999999 (* (- 1) v_main_~x~0_1376)) 2))) (= (+ v_main_~x~0_1375 (* 2 v_main_~y~0_1038)) (+ v_main_~x~0_1376 (* 2 v_main_~y~0_1037))) .cse2 (< v_main_~y~0_1038 v_main_~y~0_1037)))) InVars {main_~y~0=v_main_~y~0_1038, main_~x~0=v_main_~x~0_1376, main_#t~post6=|v_main_#t~post6_415|} OutVars{main_~y~0=v_main_~y~0_1037, main_~x~0=v_main_~x~0_1375, main_#t~post6=|v_main_#t~post6_413|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {24762#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:24,379 INFO L290 TraceCheckUtils]: 9: Hoare triple {24762#(<= main_~x~0 500000)} [249] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {24762#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:24,380 INFO L290 TraceCheckUtils]: 10: Hoare triple {24762#(<= main_~x~0 500000)} [250] L11-2-->L10-2_primed: Formula: (let ((.cse3 (<= 500000 v_main_~x~0_1378)) (.cse0 (= |v_main_#t~post5_197| |v_main_#t~post5_196|)) (.cse1 (= v_main_~y~0_1040 v_main_~y~0_1039)) (.cse2 (= v_main_~x~0_1378 v_main_~x~0_1377))) (or (and (= |v_main_#t~post6_414| |v_main_#t~post6_418|) .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_1378 750000)) (not .cse3))) (let ((.cse4 (+ v_main_~x~0_1378 v_main_~y~0_1039))) (and (= (+ v_main_~x~0_1377 v_main_~y~0_1040) .cse4) (< .cse4 (+ 750001 v_main_~y~0_1040)) .cse3 (< v_main_~y~0_1040 v_main_~y~0_1039))) (and .cse0 .cse1 .cse2 (= |v_main_#t~post6_418| |v_main_#t~post6_414|)))) InVars {main_~y~0=v_main_~y~0_1040, main_#t~post5=|v_main_#t~post5_197|, main_~x~0=v_main_~x~0_1378, main_#t~post6=|v_main_#t~post6_418|} OutVars{main_~y~0=v_main_~y~0_1039, main_#t~post5=|v_main_#t~post5_196|, main_~x~0=v_main_~x~0_1377, main_#t~post6=|v_main_#t~post6_414|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {24763#(<= main_~x~0 750000)} is VALID [2022-04-28 03:55:24,381 INFO L290 TraceCheckUtils]: 11: Hoare triple {24763#(<= main_~x~0 750000)} [245] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {24757#false} is VALID [2022-04-28 03:55:24,381 INFO L272 TraceCheckUtils]: 12: Hoare triple {24757#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {24757#false} is VALID [2022-04-28 03:55:24,381 INFO L290 TraceCheckUtils]: 13: Hoare triple {24757#false} ~cond := #in~cond; {24757#false} is VALID [2022-04-28 03:55:24,381 INFO L290 TraceCheckUtils]: 14: Hoare triple {24757#false} assume 0 == ~cond; {24757#false} is VALID [2022-04-28 03:55:24,381 INFO L290 TraceCheckUtils]: 15: Hoare triple {24757#false} assume !false; {24757#false} is VALID [2022-04-28 03:55:24,381 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:55:24,381 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:55:24,381 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1071643283] [2022-04-28 03:55:24,382 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1071643283] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:55:24,382 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1276352770] [2022-04-28 03:55:24,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:55:24,382 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:55:24,382 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:55:24,384 INFO L229 MonitoredProcess]: Starting monitored process 34 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:55:24,409 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-04-28 03:55:24,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:55:24,420 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:55:24,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:55:24,429 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:55:24,627 INFO L272 TraceCheckUtils]: 0: Hoare triple {24756#true} call ULTIMATE.init(); {24756#true} is VALID [2022-04-28 03:55:24,628 INFO L290 TraceCheckUtils]: 1: Hoare triple {24756#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {24756#true} is VALID [2022-04-28 03:55:24,628 INFO L290 TraceCheckUtils]: 2: Hoare triple {24756#true} assume true; {24756#true} is VALID [2022-04-28 03:55:24,628 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {24756#true} {24756#true} #48#return; {24756#true} is VALID [2022-04-28 03:55:24,628 INFO L272 TraceCheckUtils]: 4: Hoare triple {24756#true} call #t~ret7 := main(); {24756#true} is VALID [2022-04-28 03:55:24,628 INFO L290 TraceCheckUtils]: 5: Hoare triple {24756#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {24783#(<= main_~x~0 0)} is VALID [2022-04-28 03:55:24,629 INFO L290 TraceCheckUtils]: 6: Hoare triple {24783#(<= main_~x~0 0)} [246] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_233| |v_main_#t~post4_232|)) (.cse1 (= v_main_~x~0_1374 v_main_~x~0_1373))) (or (and .cse0 (<= 500000 v_main_~x~0_1374) .cse1) (and (< v_main_~x~0_1373 500001) (< v_main_~x~0_1374 v_main_~x~0_1373)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_1374, main_#t~post4=|v_main_#t~post4_233|} OutVars{main_~x~0=v_main_~x~0_1373, main_#t~post4=|v_main_#t~post4_232|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {24762#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:24,629 INFO L290 TraceCheckUtils]: 7: Hoare triple {24762#(<= main_~x~0 500000)} [247] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {24762#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:24,630 INFO L290 TraceCheckUtils]: 8: Hoare triple {24762#(<= main_~x~0 500000)} [248] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1038 v_main_~y~0_1037)) (.cse1 (= |v_main_#t~post6_415| |v_main_#t~post6_413|)) (.cse3 (= v_main_~x~0_1376 v_main_~x~0_1375)) (.cse2 (<= 750000 v_main_~x~0_1376))) (or (and .cse0 .cse1 (or (not .cse2) (not (< v_main_~x~0_1376 1000000))) .cse3) (and .cse0 .cse1 .cse3) (and (< v_main_~y~0_1037 (+ 2 v_main_~y~0_1038 (div (+ 999999 (* (- 1) v_main_~x~0_1376)) 2))) (= (+ v_main_~x~0_1375 (* 2 v_main_~y~0_1038)) (+ v_main_~x~0_1376 (* 2 v_main_~y~0_1037))) .cse2 (< v_main_~y~0_1038 v_main_~y~0_1037)))) InVars {main_~y~0=v_main_~y~0_1038, main_~x~0=v_main_~x~0_1376, main_#t~post6=|v_main_#t~post6_415|} OutVars{main_~y~0=v_main_~y~0_1037, main_~x~0=v_main_~x~0_1375, main_#t~post6=|v_main_#t~post6_413|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {24762#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:24,630 INFO L290 TraceCheckUtils]: 9: Hoare triple {24762#(<= main_~x~0 500000)} [249] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {24762#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:24,631 INFO L290 TraceCheckUtils]: 10: Hoare triple {24762#(<= main_~x~0 500000)} [250] L11-2-->L10-2_primed: Formula: (let ((.cse3 (<= 500000 v_main_~x~0_1378)) (.cse0 (= |v_main_#t~post5_197| |v_main_#t~post5_196|)) (.cse1 (= v_main_~y~0_1040 v_main_~y~0_1039)) (.cse2 (= v_main_~x~0_1378 v_main_~x~0_1377))) (or (and (= |v_main_#t~post6_414| |v_main_#t~post6_418|) .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_1378 750000)) (not .cse3))) (let ((.cse4 (+ v_main_~x~0_1378 v_main_~y~0_1039))) (and (= (+ v_main_~x~0_1377 v_main_~y~0_1040) .cse4) (< .cse4 (+ 750001 v_main_~y~0_1040)) .cse3 (< v_main_~y~0_1040 v_main_~y~0_1039))) (and .cse0 .cse1 .cse2 (= |v_main_#t~post6_418| |v_main_#t~post6_414|)))) InVars {main_~y~0=v_main_~y~0_1040, main_#t~post5=|v_main_#t~post5_197|, main_~x~0=v_main_~x~0_1378, main_#t~post6=|v_main_#t~post6_418|} OutVars{main_~y~0=v_main_~y~0_1039, main_#t~post5=|v_main_#t~post5_196|, main_~x~0=v_main_~x~0_1377, main_#t~post6=|v_main_#t~post6_414|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {24763#(<= main_~x~0 750000)} is VALID [2022-04-28 03:55:24,631 INFO L290 TraceCheckUtils]: 11: Hoare triple {24763#(<= main_~x~0 750000)} [245] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {24757#false} is VALID [2022-04-28 03:55:24,631 INFO L272 TraceCheckUtils]: 12: Hoare triple {24757#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {24757#false} is VALID [2022-04-28 03:55:24,631 INFO L290 TraceCheckUtils]: 13: Hoare triple {24757#false} ~cond := #in~cond; {24757#false} is VALID [2022-04-28 03:55:24,631 INFO L290 TraceCheckUtils]: 14: Hoare triple {24757#false} assume 0 == ~cond; {24757#false} is VALID [2022-04-28 03:55:24,631 INFO L290 TraceCheckUtils]: 15: Hoare triple {24757#false} assume !false; {24757#false} is VALID [2022-04-28 03:55:24,631 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:55:24,631 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:55:25,053 INFO L290 TraceCheckUtils]: 15: Hoare triple {24757#false} assume !false; {24757#false} is VALID [2022-04-28 03:55:25,054 INFO L290 TraceCheckUtils]: 14: Hoare triple {24817#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {24757#false} is VALID [2022-04-28 03:55:25,054 INFO L290 TraceCheckUtils]: 13: Hoare triple {24821#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {24817#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:55:25,055 INFO L272 TraceCheckUtils]: 12: Hoare triple {24825#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {24821#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:55:25,055 INFO L290 TraceCheckUtils]: 11: Hoare triple {24829#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [245] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {24825#(= main_~x~0 1000000)} is VALID [2022-04-28 03:55:25,056 INFO L290 TraceCheckUtils]: 10: Hoare triple {24829#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [250] L11-2-->L10-2_primed: Formula: (let ((.cse3 (<= 500000 v_main_~x~0_1378)) (.cse0 (= |v_main_#t~post5_197| |v_main_#t~post5_196|)) (.cse1 (= v_main_~y~0_1040 v_main_~y~0_1039)) (.cse2 (= v_main_~x~0_1378 v_main_~x~0_1377))) (or (and (= |v_main_#t~post6_414| |v_main_#t~post6_418|) .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_1378 750000)) (not .cse3))) (let ((.cse4 (+ v_main_~x~0_1378 v_main_~y~0_1039))) (and (= (+ v_main_~x~0_1377 v_main_~y~0_1040) .cse4) (< .cse4 (+ 750001 v_main_~y~0_1040)) .cse3 (< v_main_~y~0_1040 v_main_~y~0_1039))) (and .cse0 .cse1 .cse2 (= |v_main_#t~post6_418| |v_main_#t~post6_414|)))) InVars {main_~y~0=v_main_~y~0_1040, main_#t~post5=|v_main_#t~post5_197|, main_~x~0=v_main_~x~0_1378, main_#t~post6=|v_main_#t~post6_418|} OutVars{main_~y~0=v_main_~y~0_1039, main_#t~post5=|v_main_#t~post5_196|, main_~x~0=v_main_~x~0_1377, main_#t~post6=|v_main_#t~post6_414|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {24829#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:55:25,056 INFO L290 TraceCheckUtils]: 9: Hoare triple {24829#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [249] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {24829#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:55:25,057 INFO L290 TraceCheckUtils]: 8: Hoare triple {24839#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [248] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1038 v_main_~y~0_1037)) (.cse1 (= |v_main_#t~post6_415| |v_main_#t~post6_413|)) (.cse3 (= v_main_~x~0_1376 v_main_~x~0_1375)) (.cse2 (<= 750000 v_main_~x~0_1376))) (or (and .cse0 .cse1 (or (not .cse2) (not (< v_main_~x~0_1376 1000000))) .cse3) (and .cse0 .cse1 .cse3) (and (< v_main_~y~0_1037 (+ 2 v_main_~y~0_1038 (div (+ 999999 (* (- 1) v_main_~x~0_1376)) 2))) (= (+ v_main_~x~0_1375 (* 2 v_main_~y~0_1038)) (+ v_main_~x~0_1376 (* 2 v_main_~y~0_1037))) .cse2 (< v_main_~y~0_1038 v_main_~y~0_1037)))) InVars {main_~y~0=v_main_~y~0_1038, main_~x~0=v_main_~x~0_1376, main_#t~post6=|v_main_#t~post6_415|} OutVars{main_~y~0=v_main_~y~0_1037, main_~x~0=v_main_~x~0_1375, main_#t~post6=|v_main_#t~post6_413|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {24829#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:55:25,058 INFO L290 TraceCheckUtils]: 7: Hoare triple {24839#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [247] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {24839#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:55:25,059 INFO L290 TraceCheckUtils]: 6: Hoare triple {24839#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [246] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_233| |v_main_#t~post4_232|)) (.cse1 (= v_main_~x~0_1374 v_main_~x~0_1373))) (or (and .cse0 (<= 500000 v_main_~x~0_1374) .cse1) (and (< v_main_~x~0_1373 500001) (< v_main_~x~0_1374 v_main_~x~0_1373)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_1374, main_#t~post4=|v_main_#t~post4_233|} OutVars{main_~x~0=v_main_~x~0_1373, main_#t~post4=|v_main_#t~post4_232|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {24839#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:55:25,060 INFO L290 TraceCheckUtils]: 5: Hoare triple {24756#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {24839#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:55:25,060 INFO L272 TraceCheckUtils]: 4: Hoare triple {24756#true} call #t~ret7 := main(); {24756#true} is VALID [2022-04-28 03:55:25,060 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {24756#true} {24756#true} #48#return; {24756#true} is VALID [2022-04-28 03:55:25,060 INFO L290 TraceCheckUtils]: 2: Hoare triple {24756#true} assume true; {24756#true} is VALID [2022-04-28 03:55:25,060 INFO L290 TraceCheckUtils]: 1: Hoare triple {24756#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {24756#true} is VALID [2022-04-28 03:55:25,060 INFO L272 TraceCheckUtils]: 0: Hoare triple {24756#true} call ULTIMATE.init(); {24756#true} is VALID [2022-04-28 03:55:25,060 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:55:25,060 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1276352770] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:55:25,060 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:55:25,060 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:55:26,284 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:55:26,284 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [542159316] [2022-04-28 03:55:26,284 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [542159316] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:55:26,284 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:55:26,284 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [39] imperfect sequences [] total 39 [2022-04-28 03:55:26,284 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1640282162] [2022-04-28 03:55:26,284 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:55:26,285 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 39 states have (on average 3.717948717948718) internal successors, (145), 38 states have internal predecessors, (145), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 149 [2022-04-28 03:55:26,285 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:55:26,285 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 39 states, 39 states have (on average 3.717948717948718) internal successors, (145), 38 states have internal predecessors, (145), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:26,382 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 149 edges. 149 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:55:26,382 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2022-04-28 03:55:26,383 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:55:26,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2022-04-28 03:55:26,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=225, Invalid=2031, Unknown=0, NotChecked=0, Total=2256 [2022-04-28 03:55:26,383 INFO L87 Difference]: Start difference. First operand 152 states and 156 transitions. Second operand has 39 states, 39 states have (on average 3.717948717948718) internal successors, (145), 38 states have internal predecessors, (145), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:35,682 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:55:35,682 INFO L93 Difference]: Finished difference Result 179 states and 188 transitions. [2022-04-28 03:55:35,682 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-04-28 03:55:35,682 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 39 states have (on average 3.717948717948718) internal successors, (145), 38 states have internal predecessors, (145), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 149 [2022-04-28 03:55:35,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:55:35,683 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 39 states have (on average 3.717948717948718) internal successors, (145), 38 states have internal predecessors, (145), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:35,684 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 168 transitions. [2022-04-28 03:55:35,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 39 states have (on average 3.717948717948718) internal successors, (145), 38 states have internal predecessors, (145), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:35,685 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 168 transitions. [2022-04-28 03:55:35,685 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 39 states and 168 transitions. [2022-04-28 03:55:35,814 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 168 edges. 168 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:55:35,815 INFO L225 Difference]: With dead ends: 179 [2022-04-28 03:55:35,815 INFO L226 Difference]: Without dead ends: 161 [2022-04-28 03:55:35,816 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 218 GetRequests, 133 SyntacticMatches, 3 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1210 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=486, Invalid=6486, Unknown=0, NotChecked=0, Total=6972 [2022-04-28 03:55:35,816 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 113 mSDsluCounter, 177 mSDsCounter, 0 mSdLazyCounter, 5044 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 113 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 5083 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 5044 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.5s IncrementalHoareTripleChecker+Time [2022-04-28 03:55:35,816 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [113 Valid, 222 Invalid, 5083 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 5044 Invalid, 0 Unknown, 0 Unchecked, 3.5s Time] [2022-04-28 03:55:35,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 161 states. [2022-04-28 03:55:37,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 161 to 156. [2022-04-28 03:55:37,910 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:55:37,910 INFO L82 GeneralOperation]: Start isEquivalent. First operand 161 states. Second operand has 156 states, 151 states have (on average 1.033112582781457) internal successors, (156), 151 states have internal predecessors, (156), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:37,910 INFO L74 IsIncluded]: Start isIncluded. First operand 161 states. Second operand has 156 states, 151 states have (on average 1.033112582781457) internal successors, (156), 151 states have internal predecessors, (156), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:37,910 INFO L87 Difference]: Start difference. First operand 161 states. Second operand has 156 states, 151 states have (on average 1.033112582781457) internal successors, (156), 151 states have internal predecessors, (156), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:37,911 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:55:37,911 INFO L93 Difference]: Finished difference Result 161 states and 165 transitions. [2022-04-28 03:55:37,911 INFO L276 IsEmpty]: Start isEmpty. Operand 161 states and 165 transitions. [2022-04-28 03:55:37,912 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:55:37,912 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:55:37,912 INFO L74 IsIncluded]: Start isIncluded. First operand has 156 states, 151 states have (on average 1.033112582781457) internal successors, (156), 151 states have internal predecessors, (156), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 161 states. [2022-04-28 03:55:37,912 INFO L87 Difference]: Start difference. First operand has 156 states, 151 states have (on average 1.033112582781457) internal successors, (156), 151 states have internal predecessors, (156), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 161 states. [2022-04-28 03:55:37,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:55:37,914 INFO L93 Difference]: Finished difference Result 161 states and 165 transitions. [2022-04-28 03:55:37,914 INFO L276 IsEmpty]: Start isEmpty. Operand 161 states and 165 transitions. [2022-04-28 03:55:37,914 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:55:37,914 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:55:37,914 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:55:37,914 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:55:37,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 151 states have (on average 1.033112582781457) internal successors, (156), 151 states have internal predecessors, (156), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:37,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 160 transitions. [2022-04-28 03:55:37,916 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 160 transitions. Word has length 149 [2022-04-28 03:55:37,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:55:37,916 INFO L495 AbstractCegarLoop]: Abstraction has 156 states and 160 transitions. [2022-04-28 03:55:37,916 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 39 states have (on average 3.717948717948718) internal successors, (145), 38 states have internal predecessors, (145), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:37,916 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 156 states and 160 transitions. [2022-04-28 03:55:38,251 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 160 edges. 160 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:55:38,251 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 160 transitions. [2022-04-28 03:55:38,251 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 154 [2022-04-28 03:55:38,251 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:55:38,252 INFO L195 NwaCegarLoop]: trace histogram [36, 35, 35, 34, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:55:38,268 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Forceful destruction successful, exit code 0 [2022-04-28 03:55:38,452 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 34 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-04-28 03:55:38,452 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:55:38,452 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:55:38,452 INFO L85 PathProgramCache]: Analyzing trace with hash -255530834, now seen corresponding path program 33 times [2022-04-28 03:55:38,452 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:55:38,452 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [2140513021] [2022-04-28 03:55:38,548 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:55:41,910 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:55:42,034 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:55:42,238 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:55:42,239 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:55:42,242 INFO L85 PathProgramCache]: Analyzing trace with hash -587035417, now seen corresponding path program 1 times [2022-04-28 03:55:42,242 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:55:42,242 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1420053075] [2022-04-28 03:55:42,242 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:55:42,242 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:55:42,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:55:42,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:55:42,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:55:42,283 INFO L290 TraceCheckUtils]: 0: Hoare triple {25974#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {25966#true} is VALID [2022-04-28 03:55:42,283 INFO L290 TraceCheckUtils]: 1: Hoare triple {25966#true} assume true; {25966#true} is VALID [2022-04-28 03:55:42,283 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25966#true} {25966#true} #48#return; {25966#true} is VALID [2022-04-28 03:55:42,284 INFO L272 TraceCheckUtils]: 0: Hoare triple {25966#true} call ULTIMATE.init(); {25974#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:55:42,284 INFO L290 TraceCheckUtils]: 1: Hoare triple {25974#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {25966#true} is VALID [2022-04-28 03:55:42,284 INFO L290 TraceCheckUtils]: 2: Hoare triple {25966#true} assume true; {25966#true} is VALID [2022-04-28 03:55:42,284 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {25966#true} {25966#true} #48#return; {25966#true} is VALID [2022-04-28 03:55:42,284 INFO L272 TraceCheckUtils]: 4: Hoare triple {25966#true} call #t~ret7 := main(); {25966#true} is VALID [2022-04-28 03:55:42,284 INFO L290 TraceCheckUtils]: 5: Hoare triple {25966#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {25971#(= main_~x~0 0)} is VALID [2022-04-28 03:55:42,285 INFO L290 TraceCheckUtils]: 6: Hoare triple {25971#(= main_~x~0 0)} [252] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1433 v_main_~x~0_1432))) (or (and (< v_main_~x~0_1432 500001) (< v_main_~x~0_1433 v_main_~x~0_1432)) (and (not (< v_main_~x~0_1433 500000)) .cse0 (= |v_main_#t~post4_239| |v_main_#t~post4_240|)) (and .cse0 (= |v_main_#t~post4_240| |v_main_#t~post4_239|)))) InVars {main_~x~0=v_main_~x~0_1433, main_#t~post4=|v_main_#t~post4_240|} OutVars{main_~x~0=v_main_~x~0_1432, main_#t~post4=|v_main_#t~post4_239|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {25972#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:42,285 INFO L290 TraceCheckUtils]: 7: Hoare triple {25972#(<= main_~x~0 500000)} [253] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {25972#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:42,286 INFO L290 TraceCheckUtils]: 8: Hoare triple {25972#(<= main_~x~0 500000)} [254] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1435)) (.cse1 (= |v_main_#t~post6_428| |v_main_#t~post6_426|)) (.cse2 (= v_main_~y~0_1087 v_main_~y~0_1086)) (.cse3 (= v_main_~x~0_1435 v_main_~x~0_1434))) (or (and (< v_main_~y~0_1086 (+ (div (+ 999999 (* (- 1) v_main_~x~0_1435)) 2) 2 v_main_~y~0_1087)) .cse0 (= (+ v_main_~x~0_1434 (* 2 v_main_~y~0_1087)) (+ v_main_~x~0_1435 (* 2 v_main_~y~0_1086))) (< v_main_~y~0_1087 v_main_~y~0_1086)) (and .cse1 .cse2 .cse3) (and (or (not (< v_main_~x~0_1435 1000000)) (not .cse0)) .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1087, main_~x~0=v_main_~x~0_1435, main_#t~post6=|v_main_#t~post6_428|} OutVars{main_~y~0=v_main_~y~0_1086, main_~x~0=v_main_~x~0_1434, main_#t~post6=|v_main_#t~post6_426|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {25972#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:42,287 INFO L290 TraceCheckUtils]: 9: Hoare triple {25972#(<= main_~x~0 500000)} [255] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {25972#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:42,288 INFO L290 TraceCheckUtils]: 10: Hoare triple {25972#(<= main_~x~0 500000)} [256] L11-2-->L10-2_primed: Formula: (let ((.cse3 (<= 500000 v_main_~x~0_1437)) (.cse0 (= v_main_~y~0_1089 v_main_~y~0_1088)) (.cse1 (= v_main_~x~0_1437 v_main_~x~0_1436)) (.cse2 (= |v_main_#t~post5_203| |v_main_#t~post5_202|))) (or (and .cse0 (= |v_main_#t~post6_431| |v_main_#t~post6_427|) .cse1 .cse2) (and .cse3 (< v_main_~x~0_1436 750001) (< v_main_~x~0_1437 v_main_~x~0_1436) (= (+ v_main_~x~0_1437 v_main_~y~0_1088) (+ v_main_~x~0_1436 v_main_~y~0_1089))) (and (or (not (< v_main_~x~0_1437 750000)) (not .cse3)) .cse0 .cse1 (= |v_main_#t~post6_427| |v_main_#t~post6_431|) .cse2))) InVars {main_~y~0=v_main_~y~0_1089, main_#t~post5=|v_main_#t~post5_203|, main_~x~0=v_main_~x~0_1437, main_#t~post6=|v_main_#t~post6_431|} OutVars{main_~y~0=v_main_~y~0_1088, main_#t~post5=|v_main_#t~post5_202|, main_~x~0=v_main_~x~0_1436, main_#t~post6=|v_main_#t~post6_427|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {25973#(<= main_~x~0 750000)} is VALID [2022-04-28 03:55:42,288 INFO L290 TraceCheckUtils]: 11: Hoare triple {25973#(<= main_~x~0 750000)} [251] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {25967#false} is VALID [2022-04-28 03:55:42,288 INFO L272 TraceCheckUtils]: 12: Hoare triple {25967#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {25967#false} is VALID [2022-04-28 03:55:42,288 INFO L290 TraceCheckUtils]: 13: Hoare triple {25967#false} ~cond := #in~cond; {25967#false} is VALID [2022-04-28 03:55:42,288 INFO L290 TraceCheckUtils]: 14: Hoare triple {25967#false} assume 0 == ~cond; {25967#false} is VALID [2022-04-28 03:55:42,289 INFO L290 TraceCheckUtils]: 15: Hoare triple {25967#false} assume !false; {25967#false} is VALID [2022-04-28 03:55:42,289 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:55:42,289 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:55:42,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1420053075] [2022-04-28 03:55:42,289 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1420053075] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:55:42,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [915317288] [2022-04-28 03:55:42,289 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:55:42,289 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:55:42,290 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:55:42,292 INFO L229 MonitoredProcess]: Starting monitored process 35 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:55:42,317 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-04-28 03:55:42,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:55:42,330 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:55:42,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:55:42,339 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:55:42,521 INFO L272 TraceCheckUtils]: 0: Hoare triple {25966#true} call ULTIMATE.init(); {25966#true} is VALID [2022-04-28 03:55:42,522 INFO L290 TraceCheckUtils]: 1: Hoare triple {25966#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {25966#true} is VALID [2022-04-28 03:55:42,522 INFO L290 TraceCheckUtils]: 2: Hoare triple {25966#true} assume true; {25966#true} is VALID [2022-04-28 03:55:42,522 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {25966#true} {25966#true} #48#return; {25966#true} is VALID [2022-04-28 03:55:42,522 INFO L272 TraceCheckUtils]: 4: Hoare triple {25966#true} call #t~ret7 := main(); {25966#true} is VALID [2022-04-28 03:55:42,522 INFO L290 TraceCheckUtils]: 5: Hoare triple {25966#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {25993#(<= main_~x~0 0)} is VALID [2022-04-28 03:55:42,524 INFO L290 TraceCheckUtils]: 6: Hoare triple {25993#(<= main_~x~0 0)} [252] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1433 v_main_~x~0_1432))) (or (and (< v_main_~x~0_1432 500001) (< v_main_~x~0_1433 v_main_~x~0_1432)) (and (not (< v_main_~x~0_1433 500000)) .cse0 (= |v_main_#t~post4_239| |v_main_#t~post4_240|)) (and .cse0 (= |v_main_#t~post4_240| |v_main_#t~post4_239|)))) InVars {main_~x~0=v_main_~x~0_1433, main_#t~post4=|v_main_#t~post4_240|} OutVars{main_~x~0=v_main_~x~0_1432, main_#t~post4=|v_main_#t~post4_239|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {25972#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:42,524 INFO L290 TraceCheckUtils]: 7: Hoare triple {25972#(<= main_~x~0 500000)} [253] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {25972#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:42,525 INFO L290 TraceCheckUtils]: 8: Hoare triple {25972#(<= main_~x~0 500000)} [254] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1435)) (.cse1 (= |v_main_#t~post6_428| |v_main_#t~post6_426|)) (.cse2 (= v_main_~y~0_1087 v_main_~y~0_1086)) (.cse3 (= v_main_~x~0_1435 v_main_~x~0_1434))) (or (and (< v_main_~y~0_1086 (+ (div (+ 999999 (* (- 1) v_main_~x~0_1435)) 2) 2 v_main_~y~0_1087)) .cse0 (= (+ v_main_~x~0_1434 (* 2 v_main_~y~0_1087)) (+ v_main_~x~0_1435 (* 2 v_main_~y~0_1086))) (< v_main_~y~0_1087 v_main_~y~0_1086)) (and .cse1 .cse2 .cse3) (and (or (not (< v_main_~x~0_1435 1000000)) (not .cse0)) .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1087, main_~x~0=v_main_~x~0_1435, main_#t~post6=|v_main_#t~post6_428|} OutVars{main_~y~0=v_main_~y~0_1086, main_~x~0=v_main_~x~0_1434, main_#t~post6=|v_main_#t~post6_426|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {25972#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:42,525 INFO L290 TraceCheckUtils]: 9: Hoare triple {25972#(<= main_~x~0 500000)} [255] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {25972#(<= main_~x~0 500000)} is VALID [2022-04-28 03:55:42,526 INFO L290 TraceCheckUtils]: 10: Hoare triple {25972#(<= main_~x~0 500000)} [256] L11-2-->L10-2_primed: Formula: (let ((.cse3 (<= 500000 v_main_~x~0_1437)) (.cse0 (= v_main_~y~0_1089 v_main_~y~0_1088)) (.cse1 (= v_main_~x~0_1437 v_main_~x~0_1436)) (.cse2 (= |v_main_#t~post5_203| |v_main_#t~post5_202|))) (or (and .cse0 (= |v_main_#t~post6_431| |v_main_#t~post6_427|) .cse1 .cse2) (and .cse3 (< v_main_~x~0_1436 750001) (< v_main_~x~0_1437 v_main_~x~0_1436) (= (+ v_main_~x~0_1437 v_main_~y~0_1088) (+ v_main_~x~0_1436 v_main_~y~0_1089))) (and (or (not (< v_main_~x~0_1437 750000)) (not .cse3)) .cse0 .cse1 (= |v_main_#t~post6_427| |v_main_#t~post6_431|) .cse2))) InVars {main_~y~0=v_main_~y~0_1089, main_#t~post5=|v_main_#t~post5_203|, main_~x~0=v_main_~x~0_1437, main_#t~post6=|v_main_#t~post6_431|} OutVars{main_~y~0=v_main_~y~0_1088, main_#t~post5=|v_main_#t~post5_202|, main_~x~0=v_main_~x~0_1436, main_#t~post6=|v_main_#t~post6_427|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {25973#(<= main_~x~0 750000)} is VALID [2022-04-28 03:55:42,526 INFO L290 TraceCheckUtils]: 11: Hoare triple {25973#(<= main_~x~0 750000)} [251] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {25967#false} is VALID [2022-04-28 03:55:42,527 INFO L272 TraceCheckUtils]: 12: Hoare triple {25967#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {25967#false} is VALID [2022-04-28 03:55:42,527 INFO L290 TraceCheckUtils]: 13: Hoare triple {25967#false} ~cond := #in~cond; {25967#false} is VALID [2022-04-28 03:55:42,527 INFO L290 TraceCheckUtils]: 14: Hoare triple {25967#false} assume 0 == ~cond; {25967#false} is VALID [2022-04-28 03:55:42,527 INFO L290 TraceCheckUtils]: 15: Hoare triple {25967#false} assume !false; {25967#false} is VALID [2022-04-28 03:55:42,527 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:55:42,527 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:55:42,978 INFO L290 TraceCheckUtils]: 15: Hoare triple {25967#false} assume !false; {25967#false} is VALID [2022-04-28 03:55:42,978 INFO L290 TraceCheckUtils]: 14: Hoare triple {26027#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {25967#false} is VALID [2022-04-28 03:55:42,978 INFO L290 TraceCheckUtils]: 13: Hoare triple {26031#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {26027#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:55:42,979 INFO L272 TraceCheckUtils]: 12: Hoare triple {26035#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {26031#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:55:42,979 INFO L290 TraceCheckUtils]: 11: Hoare triple {26039#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [251] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {26035#(= main_~x~0 1000000)} is VALID [2022-04-28 03:55:42,980 INFO L290 TraceCheckUtils]: 10: Hoare triple {26039#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [256] L11-2-->L10-2_primed: Formula: (let ((.cse3 (<= 500000 v_main_~x~0_1437)) (.cse0 (= v_main_~y~0_1089 v_main_~y~0_1088)) (.cse1 (= v_main_~x~0_1437 v_main_~x~0_1436)) (.cse2 (= |v_main_#t~post5_203| |v_main_#t~post5_202|))) (or (and .cse0 (= |v_main_#t~post6_431| |v_main_#t~post6_427|) .cse1 .cse2) (and .cse3 (< v_main_~x~0_1436 750001) (< v_main_~x~0_1437 v_main_~x~0_1436) (= (+ v_main_~x~0_1437 v_main_~y~0_1088) (+ v_main_~x~0_1436 v_main_~y~0_1089))) (and (or (not (< v_main_~x~0_1437 750000)) (not .cse3)) .cse0 .cse1 (= |v_main_#t~post6_427| |v_main_#t~post6_431|) .cse2))) InVars {main_~y~0=v_main_~y~0_1089, main_#t~post5=|v_main_#t~post5_203|, main_~x~0=v_main_~x~0_1437, main_#t~post6=|v_main_#t~post6_431|} OutVars{main_~y~0=v_main_~y~0_1088, main_#t~post5=|v_main_#t~post5_202|, main_~x~0=v_main_~x~0_1436, main_#t~post6=|v_main_#t~post6_427|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {26039#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:55:42,980 INFO L290 TraceCheckUtils]: 9: Hoare triple {26039#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [255] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {26039#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:55:42,981 INFO L290 TraceCheckUtils]: 8: Hoare triple {26049#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [254] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1435)) (.cse1 (= |v_main_#t~post6_428| |v_main_#t~post6_426|)) (.cse2 (= v_main_~y~0_1087 v_main_~y~0_1086)) (.cse3 (= v_main_~x~0_1435 v_main_~x~0_1434))) (or (and (< v_main_~y~0_1086 (+ (div (+ 999999 (* (- 1) v_main_~x~0_1435)) 2) 2 v_main_~y~0_1087)) .cse0 (= (+ v_main_~x~0_1434 (* 2 v_main_~y~0_1087)) (+ v_main_~x~0_1435 (* 2 v_main_~y~0_1086))) (< v_main_~y~0_1087 v_main_~y~0_1086)) (and .cse1 .cse2 .cse3) (and (or (not (< v_main_~x~0_1435 1000000)) (not .cse0)) .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1087, main_~x~0=v_main_~x~0_1435, main_#t~post6=|v_main_#t~post6_428|} OutVars{main_~y~0=v_main_~y~0_1086, main_~x~0=v_main_~x~0_1434, main_#t~post6=|v_main_#t~post6_426|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {26039#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:55:42,982 INFO L290 TraceCheckUtils]: 7: Hoare triple {26049#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [253] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {26049#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:55:42,983 INFO L290 TraceCheckUtils]: 6: Hoare triple {26049#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [252] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1433 v_main_~x~0_1432))) (or (and (< v_main_~x~0_1432 500001) (< v_main_~x~0_1433 v_main_~x~0_1432)) (and (not (< v_main_~x~0_1433 500000)) .cse0 (= |v_main_#t~post4_239| |v_main_#t~post4_240|)) (and .cse0 (= |v_main_#t~post4_240| |v_main_#t~post4_239|)))) InVars {main_~x~0=v_main_~x~0_1433, main_#t~post4=|v_main_#t~post4_240|} OutVars{main_~x~0=v_main_~x~0_1432, main_#t~post4=|v_main_#t~post4_239|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {26049#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:55:42,983 INFO L290 TraceCheckUtils]: 5: Hoare triple {25966#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {26049#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:55:42,984 INFO L272 TraceCheckUtils]: 4: Hoare triple {25966#true} call #t~ret7 := main(); {25966#true} is VALID [2022-04-28 03:55:42,984 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {25966#true} {25966#true} #48#return; {25966#true} is VALID [2022-04-28 03:55:42,984 INFO L290 TraceCheckUtils]: 2: Hoare triple {25966#true} assume true; {25966#true} is VALID [2022-04-28 03:55:42,984 INFO L290 TraceCheckUtils]: 1: Hoare triple {25966#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {25966#true} is VALID [2022-04-28 03:55:42,984 INFO L272 TraceCheckUtils]: 0: Hoare triple {25966#true} call ULTIMATE.init(); {25966#true} is VALID [2022-04-28 03:55:42,984 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:55:42,984 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [915317288] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:55:42,984 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:55:42,984 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:55:44,246 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:55:44,246 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [2140513021] [2022-04-28 03:55:44,246 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [2140513021] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:55:44,246 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:55:44,246 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [40] imperfect sequences [] total 40 [2022-04-28 03:55:44,246 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1334742581] [2022-04-28 03:55:44,246 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:55:44,246 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 40 states have (on average 3.725) internal successors, (149), 39 states have internal predecessors, (149), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 153 [2022-04-28 03:55:44,247 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:55:44,247 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 40 states, 40 states have (on average 3.725) internal successors, (149), 39 states have internal predecessors, (149), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:44,347 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 153 edges. 153 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:55:44,347 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-04-28 03:55:44,347 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:55:44,347 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-04-28 03:55:44,347 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=230, Invalid=2122, Unknown=0, NotChecked=0, Total=2352 [2022-04-28 03:55:44,348 INFO L87 Difference]: Start difference. First operand 156 states and 160 transitions. Second operand has 40 states, 40 states have (on average 3.725) internal successors, (149), 39 states have internal predecessors, (149), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:54,334 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:55:54,334 INFO L93 Difference]: Finished difference Result 183 states and 192 transitions. [2022-04-28 03:55:54,334 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-04-28 03:55:54,334 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 40 states have (on average 3.725) internal successors, (149), 39 states have internal predecessors, (149), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 153 [2022-04-28 03:55:54,334 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:55:54,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40 states, 40 states have (on average 3.725) internal successors, (149), 39 states have internal predecessors, (149), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:54,335 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 172 transitions. [2022-04-28 03:55:54,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40 states, 40 states have (on average 3.725) internal successors, (149), 39 states have internal predecessors, (149), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:54,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 172 transitions. [2022-04-28 03:55:54,337 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 40 states and 172 transitions. [2022-04-28 03:55:54,466 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 172 edges. 172 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:55:54,467 INFO L225 Difference]: With dead ends: 183 [2022-04-28 03:55:54,467 INFO L226 Difference]: Without dead ends: 165 [2022-04-28 03:55:54,468 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 223 GetRequests, 136 SyntacticMatches, 3 SemanticMatches, 84 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1262 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=498, Invalid=6812, Unknown=0, NotChecked=0, Total=7310 [2022-04-28 03:55:54,468 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 116 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 5332 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 228 SdHoareTripleChecker+Invalid, 5372 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 5332 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2022-04-28 03:55:54,468 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 228 Invalid, 5372 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 5332 Invalid, 0 Unknown, 0 Unchecked, 3.8s Time] [2022-04-28 03:55:54,468 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2022-04-28 03:55:56,652 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 160. [2022-04-28 03:55:56,652 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:55:56,653 INFO L82 GeneralOperation]: Start isEquivalent. First operand 165 states. Second operand has 160 states, 155 states have (on average 1.032258064516129) internal successors, (160), 155 states have internal predecessors, (160), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:56,653 INFO L74 IsIncluded]: Start isIncluded. First operand 165 states. Second operand has 160 states, 155 states have (on average 1.032258064516129) internal successors, (160), 155 states have internal predecessors, (160), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:56,653 INFO L87 Difference]: Start difference. First operand 165 states. Second operand has 160 states, 155 states have (on average 1.032258064516129) internal successors, (160), 155 states have internal predecessors, (160), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:56,654 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:55:56,654 INFO L93 Difference]: Finished difference Result 165 states and 169 transitions. [2022-04-28 03:55:56,654 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 169 transitions. [2022-04-28 03:55:56,654 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:55:56,654 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:55:56,655 INFO L74 IsIncluded]: Start isIncluded. First operand has 160 states, 155 states have (on average 1.032258064516129) internal successors, (160), 155 states have internal predecessors, (160), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 165 states. [2022-04-28 03:55:56,655 INFO L87 Difference]: Start difference. First operand has 160 states, 155 states have (on average 1.032258064516129) internal successors, (160), 155 states have internal predecessors, (160), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 165 states. [2022-04-28 03:55:56,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:55:56,657 INFO L93 Difference]: Finished difference Result 165 states and 169 transitions. [2022-04-28 03:55:56,657 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 169 transitions. [2022-04-28 03:55:56,657 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:55:56,657 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:55:56,657 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:55:56,657 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:55:56,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 155 states have (on average 1.032258064516129) internal successors, (160), 155 states have internal predecessors, (160), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:56,659 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 164 transitions. [2022-04-28 03:55:56,659 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 164 transitions. Word has length 153 [2022-04-28 03:55:56,659 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:55:56,660 INFO L495 AbstractCegarLoop]: Abstraction has 160 states and 164 transitions. [2022-04-28 03:55:56,660 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 40 states have (on average 3.725) internal successors, (149), 39 states have internal predecessors, (149), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:55:56,660 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 160 states and 164 transitions. [2022-04-28 03:55:57,016 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 164 edges. 164 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:55:57,016 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 164 transitions. [2022-04-28 03:55:57,017 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2022-04-28 03:55:57,017 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:55:57,017 INFO L195 NwaCegarLoop]: trace histogram [37, 36, 36, 35, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:55:57,033 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Ended with exit code 0 [2022-04-28 03:55:57,217 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 35 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-04-28 03:55:57,218 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:55:57,218 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:55:57,218 INFO L85 PathProgramCache]: Analyzing trace with hash 1792588037, now seen corresponding path program 34 times [2022-04-28 03:55:57,218 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:55:57,218 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1293076008] [2022-04-28 03:55:57,324 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:55:57,529 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:56:01,657 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:56:01,765 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:56:01,766 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:56:01,769 INFO L85 PathProgramCache]: Analyzing trace with hash -946610393, now seen corresponding path program 1 times [2022-04-28 03:56:01,769 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:56:01,769 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [452767984] [2022-04-28 03:56:01,769 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:56:01,769 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:56:01,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:01,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:56:01,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:01,844 INFO L290 TraceCheckUtils]: 0: Hoare triple {27211#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {27203#true} is VALID [2022-04-28 03:56:01,844 INFO L290 TraceCheckUtils]: 1: Hoare triple {27203#true} assume true; {27203#true} is VALID [2022-04-28 03:56:01,844 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27203#true} {27203#true} #48#return; {27203#true} is VALID [2022-04-28 03:56:01,845 INFO L272 TraceCheckUtils]: 0: Hoare triple {27203#true} call ULTIMATE.init(); {27211#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:56:01,851 INFO L290 TraceCheckUtils]: 1: Hoare triple {27211#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {27203#true} is VALID [2022-04-28 03:56:01,851 INFO L290 TraceCheckUtils]: 2: Hoare triple {27203#true} assume true; {27203#true} is VALID [2022-04-28 03:56:01,851 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {27203#true} {27203#true} #48#return; {27203#true} is VALID [2022-04-28 03:56:01,851 INFO L272 TraceCheckUtils]: 4: Hoare triple {27203#true} call #t~ret7 := main(); {27203#true} is VALID [2022-04-28 03:56:01,852 INFO L290 TraceCheckUtils]: 5: Hoare triple {27203#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {27208#(= main_~x~0 0)} is VALID [2022-04-28 03:56:01,853 INFO L290 TraceCheckUtils]: 6: Hoare triple {27208#(= main_~x~0 0)} [258] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1493 v_main_~x~0_1492)) (.cse1 (= |v_main_#t~post4_247| |v_main_#t~post4_246|))) (or (and .cse0 .cse1) (and (< v_main_~x~0_1493 v_main_~x~0_1492) (< v_main_~x~0_1492 500001)) (and .cse0 (not (< v_main_~x~0_1493 500000)) .cse1))) InVars {main_~x~0=v_main_~x~0_1493, main_#t~post4=|v_main_#t~post4_247|} OutVars{main_~x~0=v_main_~x~0_1492, main_#t~post4=|v_main_#t~post4_246|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {27209#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:01,853 INFO L290 TraceCheckUtils]: 7: Hoare triple {27209#(<= main_~x~0 500000)} [259] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {27209#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:01,854 INFO L290 TraceCheckUtils]: 8: Hoare triple {27209#(<= main_~x~0 500000)} [260] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~x~0_1495 v_main_~x~0_1494)) (.cse2 (= v_main_~y~0_1137 v_main_~y~0_1136)) (.cse0 (<= 750000 v_main_~x~0_1495))) (or (and (or (not (< v_main_~x~0_1495 1000000)) (not .cse0)) (= |v_main_#t~post6_439| |v_main_#t~post6_441|) .cse1 .cse2) (and (= |v_main_#t~post6_441| |v_main_#t~post6_439|) .cse1 .cse2) (and .cse0 (< v_main_~y~0_1136 (+ 2 (div (+ 999999 (* (- 1) v_main_~x~0_1495)) 2) v_main_~y~0_1137)) (= (+ v_main_~x~0_1494 (* 2 v_main_~y~0_1137)) (+ v_main_~x~0_1495 (* 2 v_main_~y~0_1136))) (< v_main_~y~0_1137 v_main_~y~0_1136)))) InVars {main_~y~0=v_main_~y~0_1137, main_~x~0=v_main_~x~0_1495, main_#t~post6=|v_main_#t~post6_441|} OutVars{main_~y~0=v_main_~y~0_1136, main_~x~0=v_main_~x~0_1494, main_#t~post6=|v_main_#t~post6_439|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {27210#(<= main_~x~0 999999)} is VALID [2022-04-28 03:56:01,855 INFO L290 TraceCheckUtils]: 9: Hoare triple {27210#(<= main_~x~0 999999)} [261] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {27210#(<= main_~x~0 999999)} is VALID [2022-04-28 03:56:01,856 INFO L290 TraceCheckUtils]: 10: Hoare triple {27210#(<= main_~x~0 999999)} [262] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_1497)) (.cse2 (= |v_main_#t~post5_209| |v_main_#t~post5_208|)) (.cse3 (= |v_main_#t~post6_444| |v_main_#t~post6_440|)) (.cse4 (= v_main_~y~0_1139 v_main_~y~0_1138)) (.cse5 (= v_main_~x~0_1497 v_main_~x~0_1496))) (or (let ((.cse0 (+ v_main_~x~0_1497 v_main_~y~0_1138))) (and (< .cse0 (+ 750001 v_main_~y~0_1139)) (< v_main_~y~0_1139 v_main_~y~0_1138) .cse1 (= .cse0 (+ v_main_~x~0_1496 v_main_~y~0_1139)))) (and .cse2 .cse3 .cse4 (or (not (< v_main_~x~0_1497 750000)) (not .cse1)) .cse5) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_1139, main_#t~post5=|v_main_#t~post5_209|, main_~x~0=v_main_~x~0_1497, main_#t~post6=|v_main_#t~post6_444|} OutVars{main_~y~0=v_main_~y~0_1138, main_#t~post5=|v_main_#t~post5_208|, main_~x~0=v_main_~x~0_1496, main_#t~post6=|v_main_#t~post6_440|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {27210#(<= main_~x~0 999999)} is VALID [2022-04-28 03:56:01,856 INFO L290 TraceCheckUtils]: 11: Hoare triple {27210#(<= main_~x~0 999999)} [257] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {27204#false} is VALID [2022-04-28 03:56:01,856 INFO L272 TraceCheckUtils]: 12: Hoare triple {27204#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {27204#false} is VALID [2022-04-28 03:56:01,856 INFO L290 TraceCheckUtils]: 13: Hoare triple {27204#false} ~cond := #in~cond; {27204#false} is VALID [2022-04-28 03:56:01,856 INFO L290 TraceCheckUtils]: 14: Hoare triple {27204#false} assume 0 == ~cond; {27204#false} is VALID [2022-04-28 03:56:01,857 INFO L290 TraceCheckUtils]: 15: Hoare triple {27204#false} assume !false; {27204#false} is VALID [2022-04-28 03:56:01,857 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:56:01,857 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:56:01,857 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [452767984] [2022-04-28 03:56:01,857 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [452767984] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:56:01,857 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1368813934] [2022-04-28 03:56:01,857 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:56:01,857 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:56:01,858 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:56:01,860 INFO L229 MonitoredProcess]: Starting monitored process 36 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:56:01,864 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-04-28 03:56:01,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:01,893 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:56:01,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:01,903 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:56:02,113 INFO L272 TraceCheckUtils]: 0: Hoare triple {27203#true} call ULTIMATE.init(); {27203#true} is VALID [2022-04-28 03:56:02,113 INFO L290 TraceCheckUtils]: 1: Hoare triple {27203#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {27203#true} is VALID [2022-04-28 03:56:02,113 INFO L290 TraceCheckUtils]: 2: Hoare triple {27203#true} assume true; {27203#true} is VALID [2022-04-28 03:56:02,113 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {27203#true} {27203#true} #48#return; {27203#true} is VALID [2022-04-28 03:56:02,113 INFO L272 TraceCheckUtils]: 4: Hoare triple {27203#true} call #t~ret7 := main(); {27203#true} is VALID [2022-04-28 03:56:02,114 INFO L290 TraceCheckUtils]: 5: Hoare triple {27203#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {27230#(<= main_~x~0 0)} is VALID [2022-04-28 03:56:02,114 INFO L290 TraceCheckUtils]: 6: Hoare triple {27230#(<= main_~x~0 0)} [258] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1493 v_main_~x~0_1492)) (.cse1 (= |v_main_#t~post4_247| |v_main_#t~post4_246|))) (or (and .cse0 .cse1) (and (< v_main_~x~0_1493 v_main_~x~0_1492) (< v_main_~x~0_1492 500001)) (and .cse0 (not (< v_main_~x~0_1493 500000)) .cse1))) InVars {main_~x~0=v_main_~x~0_1493, main_#t~post4=|v_main_#t~post4_247|} OutVars{main_~x~0=v_main_~x~0_1492, main_#t~post4=|v_main_#t~post4_246|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {27209#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:02,115 INFO L290 TraceCheckUtils]: 7: Hoare triple {27209#(<= main_~x~0 500000)} [259] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {27209#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:02,116 INFO L290 TraceCheckUtils]: 8: Hoare triple {27209#(<= main_~x~0 500000)} [260] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~x~0_1495 v_main_~x~0_1494)) (.cse2 (= v_main_~y~0_1137 v_main_~y~0_1136)) (.cse0 (<= 750000 v_main_~x~0_1495))) (or (and (or (not (< v_main_~x~0_1495 1000000)) (not .cse0)) (= |v_main_#t~post6_439| |v_main_#t~post6_441|) .cse1 .cse2) (and (= |v_main_#t~post6_441| |v_main_#t~post6_439|) .cse1 .cse2) (and .cse0 (< v_main_~y~0_1136 (+ 2 (div (+ 999999 (* (- 1) v_main_~x~0_1495)) 2) v_main_~y~0_1137)) (= (+ v_main_~x~0_1494 (* 2 v_main_~y~0_1137)) (+ v_main_~x~0_1495 (* 2 v_main_~y~0_1136))) (< v_main_~y~0_1137 v_main_~y~0_1136)))) InVars {main_~y~0=v_main_~y~0_1137, main_~x~0=v_main_~x~0_1495, main_#t~post6=|v_main_#t~post6_441|} OutVars{main_~y~0=v_main_~y~0_1136, main_~x~0=v_main_~x~0_1494, main_#t~post6=|v_main_#t~post6_439|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {27209#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:02,116 INFO L290 TraceCheckUtils]: 9: Hoare triple {27209#(<= main_~x~0 500000)} [261] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {27209#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:02,117 INFO L290 TraceCheckUtils]: 10: Hoare triple {27209#(<= main_~x~0 500000)} [262] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_1497)) (.cse2 (= |v_main_#t~post5_209| |v_main_#t~post5_208|)) (.cse3 (= |v_main_#t~post6_444| |v_main_#t~post6_440|)) (.cse4 (= v_main_~y~0_1139 v_main_~y~0_1138)) (.cse5 (= v_main_~x~0_1497 v_main_~x~0_1496))) (or (let ((.cse0 (+ v_main_~x~0_1497 v_main_~y~0_1138))) (and (< .cse0 (+ 750001 v_main_~y~0_1139)) (< v_main_~y~0_1139 v_main_~y~0_1138) .cse1 (= .cse0 (+ v_main_~x~0_1496 v_main_~y~0_1139)))) (and .cse2 .cse3 .cse4 (or (not (< v_main_~x~0_1497 750000)) (not .cse1)) .cse5) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_1139, main_#t~post5=|v_main_#t~post5_209|, main_~x~0=v_main_~x~0_1497, main_#t~post6=|v_main_#t~post6_444|} OutVars{main_~y~0=v_main_~y~0_1138, main_#t~post5=|v_main_#t~post5_208|, main_~x~0=v_main_~x~0_1496, main_#t~post6=|v_main_#t~post6_440|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {27246#(< main_~x~0 750001)} is VALID [2022-04-28 03:56:02,117 INFO L290 TraceCheckUtils]: 11: Hoare triple {27246#(< main_~x~0 750001)} [257] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {27204#false} is VALID [2022-04-28 03:56:02,117 INFO L272 TraceCheckUtils]: 12: Hoare triple {27204#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {27204#false} is VALID [2022-04-28 03:56:02,117 INFO L290 TraceCheckUtils]: 13: Hoare triple {27204#false} ~cond := #in~cond; {27204#false} is VALID [2022-04-28 03:56:02,117 INFO L290 TraceCheckUtils]: 14: Hoare triple {27204#false} assume 0 == ~cond; {27204#false} is VALID [2022-04-28 03:56:02,117 INFO L290 TraceCheckUtils]: 15: Hoare triple {27204#false} assume !false; {27204#false} is VALID [2022-04-28 03:56:02,118 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:56:02,118 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:56:02,570 INFO L290 TraceCheckUtils]: 15: Hoare triple {27204#false} assume !false; {27204#false} is VALID [2022-04-28 03:56:02,571 INFO L290 TraceCheckUtils]: 14: Hoare triple {27265#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {27204#false} is VALID [2022-04-28 03:56:02,571 INFO L290 TraceCheckUtils]: 13: Hoare triple {27269#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {27265#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:56:02,572 INFO L272 TraceCheckUtils]: 12: Hoare triple {27273#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {27269#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:56:02,572 INFO L290 TraceCheckUtils]: 11: Hoare triple {27277#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [257] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {27273#(= main_~x~0 1000000)} is VALID [2022-04-28 03:56:02,574 INFO L290 TraceCheckUtils]: 10: Hoare triple {27277#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [262] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_1497)) (.cse2 (= |v_main_#t~post5_209| |v_main_#t~post5_208|)) (.cse3 (= |v_main_#t~post6_444| |v_main_#t~post6_440|)) (.cse4 (= v_main_~y~0_1139 v_main_~y~0_1138)) (.cse5 (= v_main_~x~0_1497 v_main_~x~0_1496))) (or (let ((.cse0 (+ v_main_~x~0_1497 v_main_~y~0_1138))) (and (< .cse0 (+ 750001 v_main_~y~0_1139)) (< v_main_~y~0_1139 v_main_~y~0_1138) .cse1 (= .cse0 (+ v_main_~x~0_1496 v_main_~y~0_1139)))) (and .cse2 .cse3 .cse4 (or (not (< v_main_~x~0_1497 750000)) (not .cse1)) .cse5) (and .cse2 .cse3 .cse4 .cse5))) InVars {main_~y~0=v_main_~y~0_1139, main_#t~post5=|v_main_#t~post5_209|, main_~x~0=v_main_~x~0_1497, main_#t~post6=|v_main_#t~post6_444|} OutVars{main_~y~0=v_main_~y~0_1138, main_#t~post5=|v_main_#t~post5_208|, main_~x~0=v_main_~x~0_1496, main_#t~post6=|v_main_#t~post6_440|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {27277#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:56:02,574 INFO L290 TraceCheckUtils]: 9: Hoare triple {27277#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [261] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {27277#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:56:02,575 INFO L290 TraceCheckUtils]: 8: Hoare triple {27287#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [260] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~x~0_1495 v_main_~x~0_1494)) (.cse2 (= v_main_~y~0_1137 v_main_~y~0_1136)) (.cse0 (<= 750000 v_main_~x~0_1495))) (or (and (or (not (< v_main_~x~0_1495 1000000)) (not .cse0)) (= |v_main_#t~post6_439| |v_main_#t~post6_441|) .cse1 .cse2) (and (= |v_main_#t~post6_441| |v_main_#t~post6_439|) .cse1 .cse2) (and .cse0 (< v_main_~y~0_1136 (+ 2 (div (+ 999999 (* (- 1) v_main_~x~0_1495)) 2) v_main_~y~0_1137)) (= (+ v_main_~x~0_1494 (* 2 v_main_~y~0_1137)) (+ v_main_~x~0_1495 (* 2 v_main_~y~0_1136))) (< v_main_~y~0_1137 v_main_~y~0_1136)))) InVars {main_~y~0=v_main_~y~0_1137, main_~x~0=v_main_~x~0_1495, main_#t~post6=|v_main_#t~post6_441|} OutVars{main_~y~0=v_main_~y~0_1136, main_~x~0=v_main_~x~0_1494, main_#t~post6=|v_main_#t~post6_439|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {27277#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:56:02,576 INFO L290 TraceCheckUtils]: 7: Hoare triple {27287#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [259] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {27287#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 03:56:02,577 INFO L290 TraceCheckUtils]: 6: Hoare triple {27287#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [258] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1493 v_main_~x~0_1492)) (.cse1 (= |v_main_#t~post4_247| |v_main_#t~post4_246|))) (or (and .cse0 .cse1) (and (< v_main_~x~0_1493 v_main_~x~0_1492) (< v_main_~x~0_1492 500001)) (and .cse0 (not (< v_main_~x~0_1493 500000)) .cse1))) InVars {main_~x~0=v_main_~x~0_1493, main_#t~post4=|v_main_#t~post4_247|} OutVars{main_~x~0=v_main_~x~0_1492, main_#t~post4=|v_main_#t~post4_246|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {27287#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 03:56:02,578 INFO L290 TraceCheckUtils]: 5: Hoare triple {27203#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {27287#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 03:56:02,578 INFO L272 TraceCheckUtils]: 4: Hoare triple {27203#true} call #t~ret7 := main(); {27203#true} is VALID [2022-04-28 03:56:02,578 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {27203#true} {27203#true} #48#return; {27203#true} is VALID [2022-04-28 03:56:02,578 INFO L290 TraceCheckUtils]: 2: Hoare triple {27203#true} assume true; {27203#true} is VALID [2022-04-28 03:56:02,578 INFO L290 TraceCheckUtils]: 1: Hoare triple {27203#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {27203#true} is VALID [2022-04-28 03:56:02,578 INFO L272 TraceCheckUtils]: 0: Hoare triple {27203#true} call ULTIMATE.init(); {27203#true} is VALID [2022-04-28 03:56:02,578 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:56:02,579 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1368813934] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:56:02,579 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:56:02,579 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:56:03,953 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:56:03,953 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1293076008] [2022-04-28 03:56:03,953 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1293076008] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:56:03,953 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:56:03,953 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [41] imperfect sequences [] total 41 [2022-04-28 03:56:03,953 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1382844902] [2022-04-28 03:56:03,953 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:56:03,954 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 41 states have (on average 3.731707317073171) internal successors, (153), 40 states have internal predecessors, (153), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 157 [2022-04-28 03:56:03,954 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:56:03,954 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 41 states, 41 states have (on average 3.731707317073171) internal successors, (153), 40 states have internal predecessors, (153), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:04,058 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 157 edges. 157 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:56:04,058 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2022-04-28 03:56:04,058 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:56:04,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2022-04-28 03:56:04,058 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=280, Invalid=2270, Unknown=0, NotChecked=0, Total=2550 [2022-04-28 03:56:04,059 INFO L87 Difference]: Start difference. First operand 160 states and 164 transitions. Second operand has 41 states, 41 states have (on average 3.731707317073171) internal successors, (153), 40 states have internal predecessors, (153), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:14,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:56:14,301 INFO L93 Difference]: Finished difference Result 187 states and 196 transitions. [2022-04-28 03:56:14,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-04-28 03:56:14,302 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 41 states have (on average 3.731707317073171) internal successors, (153), 40 states have internal predecessors, (153), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 157 [2022-04-28 03:56:14,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:56:14,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 41 states have (on average 3.731707317073171) internal successors, (153), 40 states have internal predecessors, (153), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:14,303 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 176 transitions. [2022-04-28 03:56:14,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 41 states have (on average 3.731707317073171) internal successors, (153), 40 states have internal predecessors, (153), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:14,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 176 transitions. [2022-04-28 03:56:14,304 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 41 states and 176 transitions. [2022-04-28 03:56:14,435 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 176 edges. 176 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:56:14,437 INFO L225 Difference]: With dead ends: 187 [2022-04-28 03:56:14,438 INFO L226 Difference]: Without dead ends: 169 [2022-04-28 03:56:14,438 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 228 GetRequests, 139 SyntacticMatches, 2 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1368 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=593, Invalid=7239, Unknown=0, NotChecked=0, Total=7832 [2022-04-28 03:56:14,438 INFO L413 NwaCegarLoop]: 47 mSDtfsCounter, 120 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 5482 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 229 SdHoareTripleChecker+Invalid, 5523 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 5482 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.9s IncrementalHoareTripleChecker+Time [2022-04-28 03:56:14,439 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 229 Invalid, 5523 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 5482 Invalid, 0 Unknown, 0 Unchecked, 3.9s Time] [2022-04-28 03:56:14,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169 states. [2022-04-28 03:56:16,769 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169 to 164. [2022-04-28 03:56:16,769 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:56:16,769 INFO L82 GeneralOperation]: Start isEquivalent. First operand 169 states. Second operand has 164 states, 159 states have (on average 1.0314465408805031) internal successors, (164), 159 states have internal predecessors, (164), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:16,769 INFO L74 IsIncluded]: Start isIncluded. First operand 169 states. Second operand has 164 states, 159 states have (on average 1.0314465408805031) internal successors, (164), 159 states have internal predecessors, (164), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:16,769 INFO L87 Difference]: Start difference. First operand 169 states. Second operand has 164 states, 159 states have (on average 1.0314465408805031) internal successors, (164), 159 states have internal predecessors, (164), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:16,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:56:16,771 INFO L93 Difference]: Finished difference Result 169 states and 173 transitions. [2022-04-28 03:56:16,771 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 173 transitions. [2022-04-28 03:56:16,771 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:56:16,771 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:56:16,771 INFO L74 IsIncluded]: Start isIncluded. First operand has 164 states, 159 states have (on average 1.0314465408805031) internal successors, (164), 159 states have internal predecessors, (164), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 169 states. [2022-04-28 03:56:16,771 INFO L87 Difference]: Start difference. First operand has 164 states, 159 states have (on average 1.0314465408805031) internal successors, (164), 159 states have internal predecessors, (164), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 169 states. [2022-04-28 03:56:16,773 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:56:16,773 INFO L93 Difference]: Finished difference Result 169 states and 173 transitions. [2022-04-28 03:56:16,773 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 173 transitions. [2022-04-28 03:56:16,773 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:56:16,773 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:56:16,773 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:56:16,773 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:56:16,773 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 159 states have (on average 1.0314465408805031) internal successors, (164), 159 states have internal predecessors, (164), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:16,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 168 transitions. [2022-04-28 03:56:16,774 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 168 transitions. Word has length 157 [2022-04-28 03:56:16,775 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:56:16,775 INFO L495 AbstractCegarLoop]: Abstraction has 164 states and 168 transitions. [2022-04-28 03:56:16,775 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 41 states have (on average 3.731707317073171) internal successors, (153), 40 states have internal predecessors, (153), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:16,775 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 164 states and 168 transitions. [2022-04-28 03:56:17,150 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 168 edges. 168 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:56:17,150 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 168 transitions. [2022-04-28 03:56:17,150 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2022-04-28 03:56:17,150 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:56:17,151 INFO L195 NwaCegarLoop]: trace histogram [38, 37, 37, 36, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:56:17,167 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-04-28 03:56:17,355 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 36 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-04-28 03:56:17,355 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:56:17,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:56:17,356 INFO L85 PathProgramCache]: Analyzing trace with hash 458130908, now seen corresponding path program 35 times [2022-04-28 03:56:17,356 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:56:17,356 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [386496379] [2022-04-28 03:56:17,453 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:56:17,663 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:56:17,879 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:56:17,880 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:56:17,883 INFO L85 PathProgramCache]: Analyzing trace with hash -1306185369, now seen corresponding path program 1 times [2022-04-28 03:56:17,883 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:56:17,883 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [748626369] [2022-04-28 03:56:17,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:56:17,883 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:56:17,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:17,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:56:17,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:17,939 INFO L290 TraceCheckUtils]: 0: Hoare triple {28476#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {28468#true} is VALID [2022-04-28 03:56:17,939 INFO L290 TraceCheckUtils]: 1: Hoare triple {28468#true} assume true; {28468#true} is VALID [2022-04-28 03:56:17,939 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {28468#true} {28468#true} #48#return; {28468#true} is VALID [2022-04-28 03:56:17,939 INFO L272 TraceCheckUtils]: 0: Hoare triple {28468#true} call ULTIMATE.init(); {28476#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:56:17,939 INFO L290 TraceCheckUtils]: 1: Hoare triple {28476#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {28468#true} is VALID [2022-04-28 03:56:17,939 INFO L290 TraceCheckUtils]: 2: Hoare triple {28468#true} assume true; {28468#true} is VALID [2022-04-28 03:56:17,940 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {28468#true} {28468#true} #48#return; {28468#true} is VALID [2022-04-28 03:56:17,940 INFO L272 TraceCheckUtils]: 4: Hoare triple {28468#true} call #t~ret7 := main(); {28468#true} is VALID [2022-04-28 03:56:17,940 INFO L290 TraceCheckUtils]: 5: Hoare triple {28468#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {28473#(= main_~x~0 0)} is VALID [2022-04-28 03:56:17,941 INFO L290 TraceCheckUtils]: 6: Hoare triple {28473#(= main_~x~0 0)} [264] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1554 v_main_~x~0_1553)) (.cse1 (= |v_main_#t~post4_254| |v_main_#t~post4_253|))) (or (and .cse0 .cse1) (and (< v_main_~x~0_1553 500001) (< v_main_~x~0_1554 v_main_~x~0_1553)) (and .cse0 .cse1 (not (< v_main_~x~0_1554 500000))))) InVars {main_~x~0=v_main_~x~0_1554, main_#t~post4=|v_main_#t~post4_254|} OutVars{main_~x~0=v_main_~x~0_1553, main_#t~post4=|v_main_#t~post4_253|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {28474#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:17,941 INFO L290 TraceCheckUtils]: 7: Hoare triple {28474#(<= main_~x~0 500000)} [265] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {28474#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:17,942 INFO L290 TraceCheckUtils]: 8: Hoare triple {28474#(<= main_~x~0 500000)} [266] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1188 v_main_~y~0_1187)) (.cse1 (= |v_main_#t~post6_454| |v_main_#t~post6_452|)) (.cse3 (<= 750000 v_main_~x~0_1556)) (.cse2 (= v_main_~x~0_1556 v_main_~x~0_1555))) (or (and .cse0 .cse1 .cse2) (and .cse3 (= (+ v_main_~x~0_1556 (* 2 v_main_~y~0_1187)) (+ v_main_~x~0_1555 (* 2 v_main_~y~0_1188))) (< v_main_~y~0_1187 (+ (div (+ (* (- 1) v_main_~x~0_1556) 999999) 2) 2 v_main_~y~0_1188)) (< v_main_~y~0_1188 v_main_~y~0_1187)) (and .cse0 .cse1 (or (not .cse3) (not (< v_main_~x~0_1556 1000000))) .cse2))) InVars {main_~y~0=v_main_~y~0_1188, main_~x~0=v_main_~x~0_1556, main_#t~post6=|v_main_#t~post6_454|} OutVars{main_~y~0=v_main_~y~0_1187, main_~x~0=v_main_~x~0_1555, main_#t~post6=|v_main_#t~post6_452|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {28474#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:17,942 INFO L290 TraceCheckUtils]: 9: Hoare triple {28474#(<= main_~x~0 500000)} [267] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {28474#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:17,943 INFO L290 TraceCheckUtils]: 10: Hoare triple {28474#(<= main_~x~0 500000)} [268] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post5_215| |v_main_#t~post5_214|)) (.cse1 (= v_main_~x~0_1558 v_main_~x~0_1557)) (.cse2 (= |v_main_#t~post6_457| |v_main_#t~post6_453|)) (.cse3 (<= 500000 v_main_~x~0_1558))) (or (and .cse0 .cse1 (= v_main_~y~0_1190 v_main_~y~0_1189) .cse2) (and (or (not .cse3) (not (< v_main_~x~0_1558 750000))) .cse0 .cse1 (= v_main_~y~0_1189 v_main_~y~0_1190) .cse2) (let ((.cse4 (+ v_main_~x~0_1558 v_main_~y~0_1189))) (and (= .cse4 (+ v_main_~x~0_1557 v_main_~y~0_1190)) (< v_main_~y~0_1190 v_main_~y~0_1189) (< .cse4 (+ 750001 v_main_~y~0_1190)) .cse3)))) InVars {main_~y~0=v_main_~y~0_1190, main_#t~post5=|v_main_#t~post5_215|, main_~x~0=v_main_~x~0_1558, main_#t~post6=|v_main_#t~post6_457|} OutVars{main_~y~0=v_main_~y~0_1189, main_#t~post5=|v_main_#t~post5_214|, main_~x~0=v_main_~x~0_1557, main_#t~post6=|v_main_#t~post6_453|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {28475#(<= main_~x~0 750000)} is VALID [2022-04-28 03:56:17,944 INFO L290 TraceCheckUtils]: 11: Hoare triple {28475#(<= main_~x~0 750000)} [263] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {28469#false} is VALID [2022-04-28 03:56:17,944 INFO L272 TraceCheckUtils]: 12: Hoare triple {28469#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {28469#false} is VALID [2022-04-28 03:56:17,944 INFO L290 TraceCheckUtils]: 13: Hoare triple {28469#false} ~cond := #in~cond; {28469#false} is VALID [2022-04-28 03:56:17,944 INFO L290 TraceCheckUtils]: 14: Hoare triple {28469#false} assume 0 == ~cond; {28469#false} is VALID [2022-04-28 03:56:17,944 INFO L290 TraceCheckUtils]: 15: Hoare triple {28469#false} assume !false; {28469#false} is VALID [2022-04-28 03:56:17,944 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:56:17,945 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:56:17,945 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [748626369] [2022-04-28 03:56:17,945 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [748626369] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:56:17,945 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2039076624] [2022-04-28 03:56:17,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:56:17,945 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:56:17,945 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:56:17,948 INFO L229 MonitoredProcess]: Starting monitored process 37 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:56:17,971 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-04-28 03:56:17,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:17,984 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 9 conjunts are in the unsatisfiable core [2022-04-28 03:56:17,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:17,993 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:56:18,281 INFO L272 TraceCheckUtils]: 0: Hoare triple {28468#true} call ULTIMATE.init(); {28468#true} is VALID [2022-04-28 03:56:18,281 INFO L290 TraceCheckUtils]: 1: Hoare triple {28468#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {28468#true} is VALID [2022-04-28 03:56:18,281 INFO L290 TraceCheckUtils]: 2: Hoare triple {28468#true} assume true; {28468#true} is VALID [2022-04-28 03:56:18,281 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {28468#true} {28468#true} #48#return; {28468#true} is VALID [2022-04-28 03:56:18,281 INFO L272 TraceCheckUtils]: 4: Hoare triple {28468#true} call #t~ret7 := main(); {28468#true} is VALID [2022-04-28 03:56:18,281 INFO L290 TraceCheckUtils]: 5: Hoare triple {28468#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {28473#(= main_~x~0 0)} is VALID [2022-04-28 03:56:18,282 INFO L290 TraceCheckUtils]: 6: Hoare triple {28473#(= main_~x~0 0)} [264] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1554 v_main_~x~0_1553)) (.cse1 (= |v_main_#t~post4_254| |v_main_#t~post4_253|))) (or (and .cse0 .cse1) (and (< v_main_~x~0_1553 500001) (< v_main_~x~0_1554 v_main_~x~0_1553)) (and .cse0 .cse1 (not (< v_main_~x~0_1554 500000))))) InVars {main_~x~0=v_main_~x~0_1554, main_#t~post4=|v_main_#t~post4_254|} OutVars{main_~x~0=v_main_~x~0_1553, main_#t~post4=|v_main_#t~post4_253|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {28498#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:56:18,282 INFO L290 TraceCheckUtils]: 7: Hoare triple {28498#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [265] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {28498#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:56:18,283 INFO L290 TraceCheckUtils]: 8: Hoare triple {28498#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [266] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1188 v_main_~y~0_1187)) (.cse1 (= |v_main_#t~post6_454| |v_main_#t~post6_452|)) (.cse3 (<= 750000 v_main_~x~0_1556)) (.cse2 (= v_main_~x~0_1556 v_main_~x~0_1555))) (or (and .cse0 .cse1 .cse2) (and .cse3 (= (+ v_main_~x~0_1556 (* 2 v_main_~y~0_1187)) (+ v_main_~x~0_1555 (* 2 v_main_~y~0_1188))) (< v_main_~y~0_1187 (+ (div (+ (* (- 1) v_main_~x~0_1556) 999999) 2) 2 v_main_~y~0_1188)) (< v_main_~y~0_1188 v_main_~y~0_1187)) (and .cse0 .cse1 (or (not .cse3) (not (< v_main_~x~0_1556 1000000))) .cse2))) InVars {main_~y~0=v_main_~y~0_1188, main_~x~0=v_main_~x~0_1556, main_#t~post6=|v_main_#t~post6_454|} OutVars{main_~y~0=v_main_~y~0_1187, main_~x~0=v_main_~x~0_1555, main_#t~post6=|v_main_#t~post6_452|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {28498#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:56:18,283 INFO L290 TraceCheckUtils]: 9: Hoare triple {28498#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [267] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {28498#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:56:18,284 INFO L290 TraceCheckUtils]: 10: Hoare triple {28498#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [268] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post5_215| |v_main_#t~post5_214|)) (.cse1 (= v_main_~x~0_1558 v_main_~x~0_1557)) (.cse2 (= |v_main_#t~post6_457| |v_main_#t~post6_453|)) (.cse3 (<= 500000 v_main_~x~0_1558))) (or (and .cse0 .cse1 (= v_main_~y~0_1190 v_main_~y~0_1189) .cse2) (and (or (not .cse3) (not (< v_main_~x~0_1558 750000))) .cse0 .cse1 (= v_main_~y~0_1189 v_main_~y~0_1190) .cse2) (let ((.cse4 (+ v_main_~x~0_1558 v_main_~y~0_1189))) (and (= .cse4 (+ v_main_~x~0_1557 v_main_~y~0_1190)) (< v_main_~y~0_1190 v_main_~y~0_1189) (< .cse4 (+ 750001 v_main_~y~0_1190)) .cse3)))) InVars {main_~y~0=v_main_~y~0_1190, main_#t~post5=|v_main_#t~post5_215|, main_~x~0=v_main_~x~0_1558, main_#t~post6=|v_main_#t~post6_457|} OutVars{main_~y~0=v_main_~y~0_1189, main_#t~post5=|v_main_#t~post5_214|, main_~x~0=v_main_~x~0_1557, main_#t~post6=|v_main_#t~post6_453|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {28511#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} is VALID [2022-04-28 03:56:18,285 INFO L290 TraceCheckUtils]: 11: Hoare triple {28511#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} [263] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {28469#false} is VALID [2022-04-28 03:56:18,285 INFO L272 TraceCheckUtils]: 12: Hoare triple {28469#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {28469#false} is VALID [2022-04-28 03:56:18,285 INFO L290 TraceCheckUtils]: 13: Hoare triple {28469#false} ~cond := #in~cond; {28469#false} is VALID [2022-04-28 03:56:18,285 INFO L290 TraceCheckUtils]: 14: Hoare triple {28469#false} assume 0 == ~cond; {28469#false} is VALID [2022-04-28 03:56:18,285 INFO L290 TraceCheckUtils]: 15: Hoare triple {28469#false} assume !false; {28469#false} is VALID [2022-04-28 03:56:18,285 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:56:18,285 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:56:18,783 INFO L290 TraceCheckUtils]: 15: Hoare triple {28469#false} assume !false; {28469#false} is VALID [2022-04-28 03:56:18,783 INFO L290 TraceCheckUtils]: 14: Hoare triple {28530#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {28469#false} is VALID [2022-04-28 03:56:18,784 INFO L290 TraceCheckUtils]: 13: Hoare triple {28534#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {28530#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:56:18,784 INFO L272 TraceCheckUtils]: 12: Hoare triple {28538#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {28534#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:56:18,784 INFO L290 TraceCheckUtils]: 11: Hoare triple {28542#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [263] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {28538#(= main_~x~0 1000000)} is VALID [2022-04-28 03:56:18,785 INFO L290 TraceCheckUtils]: 10: Hoare triple {28542#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [268] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post5_215| |v_main_#t~post5_214|)) (.cse1 (= v_main_~x~0_1558 v_main_~x~0_1557)) (.cse2 (= |v_main_#t~post6_457| |v_main_#t~post6_453|)) (.cse3 (<= 500000 v_main_~x~0_1558))) (or (and .cse0 .cse1 (= v_main_~y~0_1190 v_main_~y~0_1189) .cse2) (and (or (not .cse3) (not (< v_main_~x~0_1558 750000))) .cse0 .cse1 (= v_main_~y~0_1189 v_main_~y~0_1190) .cse2) (let ((.cse4 (+ v_main_~x~0_1558 v_main_~y~0_1189))) (and (= .cse4 (+ v_main_~x~0_1557 v_main_~y~0_1190)) (< v_main_~y~0_1190 v_main_~y~0_1189) (< .cse4 (+ 750001 v_main_~y~0_1190)) .cse3)))) InVars {main_~y~0=v_main_~y~0_1190, main_#t~post5=|v_main_#t~post5_215|, main_~x~0=v_main_~x~0_1558, main_#t~post6=|v_main_#t~post6_457|} OutVars{main_~y~0=v_main_~y~0_1189, main_#t~post5=|v_main_#t~post5_214|, main_~x~0=v_main_~x~0_1557, main_#t~post6=|v_main_#t~post6_453|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {28542#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:56:18,785 INFO L290 TraceCheckUtils]: 9: Hoare triple {28542#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [267] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {28542#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:56:18,787 INFO L290 TraceCheckUtils]: 8: Hoare triple {28552#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [266] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1188 v_main_~y~0_1187)) (.cse1 (= |v_main_#t~post6_454| |v_main_#t~post6_452|)) (.cse3 (<= 750000 v_main_~x~0_1556)) (.cse2 (= v_main_~x~0_1556 v_main_~x~0_1555))) (or (and .cse0 .cse1 .cse2) (and .cse3 (= (+ v_main_~x~0_1556 (* 2 v_main_~y~0_1187)) (+ v_main_~x~0_1555 (* 2 v_main_~y~0_1188))) (< v_main_~y~0_1187 (+ (div (+ (* (- 1) v_main_~x~0_1556) 999999) 2) 2 v_main_~y~0_1188)) (< v_main_~y~0_1188 v_main_~y~0_1187)) (and .cse0 .cse1 (or (not .cse3) (not (< v_main_~x~0_1556 1000000))) .cse2))) InVars {main_~y~0=v_main_~y~0_1188, main_~x~0=v_main_~x~0_1556, main_#t~post6=|v_main_#t~post6_454|} OutVars{main_~y~0=v_main_~y~0_1187, main_~x~0=v_main_~x~0_1555, main_#t~post6=|v_main_#t~post6_452|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {28542#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:56:18,787 INFO L290 TraceCheckUtils]: 7: Hoare triple {28552#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [265] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {28552#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:56:18,789 INFO L290 TraceCheckUtils]: 6: Hoare triple {28552#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [264] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1554 v_main_~x~0_1553)) (.cse1 (= |v_main_#t~post4_254| |v_main_#t~post4_253|))) (or (and .cse0 .cse1) (and (< v_main_~x~0_1553 500001) (< v_main_~x~0_1554 v_main_~x~0_1553)) (and .cse0 .cse1 (not (< v_main_~x~0_1554 500000))))) InVars {main_~x~0=v_main_~x~0_1554, main_#t~post4=|v_main_#t~post4_254|} OutVars{main_~x~0=v_main_~x~0_1553, main_#t~post4=|v_main_#t~post4_253|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {28552#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:56:18,789 INFO L290 TraceCheckUtils]: 5: Hoare triple {28468#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {28552#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:56:18,789 INFO L272 TraceCheckUtils]: 4: Hoare triple {28468#true} call #t~ret7 := main(); {28468#true} is VALID [2022-04-28 03:56:18,789 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {28468#true} {28468#true} #48#return; {28468#true} is VALID [2022-04-28 03:56:18,789 INFO L290 TraceCheckUtils]: 2: Hoare triple {28468#true} assume true; {28468#true} is VALID [2022-04-28 03:56:18,789 INFO L290 TraceCheckUtils]: 1: Hoare triple {28468#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {28468#true} is VALID [2022-04-28 03:56:18,789 INFO L272 TraceCheckUtils]: 0: Hoare triple {28468#true} call ULTIMATE.init(); {28468#true} is VALID [2022-04-28 03:56:18,789 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:56:18,789 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2039076624] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:56:18,790 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:56:18,790 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:56:20,188 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:56:20,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [386496379] [2022-04-28 03:56:20,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [386496379] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:56:20,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:56:20,188 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [42] imperfect sequences [] total 42 [2022-04-28 03:56:20,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [260669843] [2022-04-28 03:56:20,188 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:56:20,189 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 42 states have (on average 3.738095238095238) internal successors, (157), 41 states have internal predecessors, (157), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 161 [2022-04-28 03:56:20,189 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:56:20,189 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 42 states, 42 states have (on average 3.738095238095238) internal successors, (157), 41 states have internal predecessors, (157), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:20,298 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 161 edges. 161 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:56:20,298 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2022-04-28 03:56:20,298 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:56:20,298 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2022-04-28 03:56:20,298 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=278, Invalid=2272, Unknown=0, NotChecked=0, Total=2550 [2022-04-28 03:56:20,299 INFO L87 Difference]: Start difference. First operand 164 states and 168 transitions. Second operand has 42 states, 42 states have (on average 3.738095238095238) internal successors, (157), 41 states have internal predecessors, (157), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:31,322 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:56:31,322 INFO L93 Difference]: Finished difference Result 191 states and 200 transitions. [2022-04-28 03:56:31,322 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2022-04-28 03:56:31,323 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 42 states have (on average 3.738095238095238) internal successors, (157), 41 states have internal predecessors, (157), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 161 [2022-04-28 03:56:31,323 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:56:31,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42 states, 42 states have (on average 3.738095238095238) internal successors, (157), 41 states have internal predecessors, (157), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:31,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42 states to 42 states and 180 transitions. [2022-04-28 03:56:31,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42 states, 42 states have (on average 3.738095238095238) internal successors, (157), 41 states have internal predecessors, (157), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:31,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42 states to 42 states and 180 transitions. [2022-04-28 03:56:31,325 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 42 states and 180 transitions. [2022-04-28 03:56:31,463 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 180 edges. 180 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:56:31,465 INFO L225 Difference]: With dead ends: 191 [2022-04-28 03:56:31,465 INFO L226 Difference]: Without dead ends: 173 [2022-04-28 03:56:31,466 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 233 GetRequests, 144 SyntacticMatches, 1 SemanticMatches, 88 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1302 ImplicationChecksByTransitivity, 1.8s TimeCoverageRelationStatistics Valid=599, Invalid=7411, Unknown=0, NotChecked=0, Total=8010 [2022-04-28 03:56:31,466 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 122 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 5932 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 240 SdHoareTripleChecker+Invalid, 5974 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 5932 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2022-04-28 03:56:31,466 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [122 Valid, 240 Invalid, 5974 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 5932 Invalid, 0 Unknown, 0 Unchecked, 4.2s Time] [2022-04-28 03:56:31,466 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2022-04-28 03:56:33,919 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 168. [2022-04-28 03:56:33,919 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:56:33,919 INFO L82 GeneralOperation]: Start isEquivalent. First operand 173 states. Second operand has 168 states, 163 states have (on average 1.030674846625767) internal successors, (168), 163 states have internal predecessors, (168), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:33,919 INFO L74 IsIncluded]: Start isIncluded. First operand 173 states. Second operand has 168 states, 163 states have (on average 1.030674846625767) internal successors, (168), 163 states have internal predecessors, (168), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:33,919 INFO L87 Difference]: Start difference. First operand 173 states. Second operand has 168 states, 163 states have (on average 1.030674846625767) internal successors, (168), 163 states have internal predecessors, (168), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:33,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:56:33,921 INFO L93 Difference]: Finished difference Result 173 states and 177 transitions. [2022-04-28 03:56:33,921 INFO L276 IsEmpty]: Start isEmpty. Operand 173 states and 177 transitions. [2022-04-28 03:56:33,922 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:56:33,922 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:56:33,922 INFO L74 IsIncluded]: Start isIncluded. First operand has 168 states, 163 states have (on average 1.030674846625767) internal successors, (168), 163 states have internal predecessors, (168), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 173 states. [2022-04-28 03:56:33,922 INFO L87 Difference]: Start difference. First operand has 168 states, 163 states have (on average 1.030674846625767) internal successors, (168), 163 states have internal predecessors, (168), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 173 states. [2022-04-28 03:56:33,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:56:33,924 INFO L93 Difference]: Finished difference Result 173 states and 177 transitions. [2022-04-28 03:56:33,924 INFO L276 IsEmpty]: Start isEmpty. Operand 173 states and 177 transitions. [2022-04-28 03:56:33,924 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:56:33,924 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:56:33,924 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:56:33,924 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:56:33,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 168 states, 163 states have (on average 1.030674846625767) internal successors, (168), 163 states have internal predecessors, (168), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:33,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 168 states to 168 states and 172 transitions. [2022-04-28 03:56:33,927 INFO L78 Accepts]: Start accepts. Automaton has 168 states and 172 transitions. Word has length 161 [2022-04-28 03:56:33,927 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:56:33,927 INFO L495 AbstractCegarLoop]: Abstraction has 168 states and 172 transitions. [2022-04-28 03:56:33,927 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 42 states have (on average 3.738095238095238) internal successors, (157), 41 states have internal predecessors, (157), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:33,927 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 168 states and 172 transitions. [2022-04-28 03:56:34,324 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 172 edges. 172 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:56:34,324 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 172 transitions. [2022-04-28 03:56:34,325 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 166 [2022-04-28 03:56:34,325 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:56:34,325 INFO L195 NwaCegarLoop]: trace histogram [39, 38, 38, 37, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:56:34,341 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Forceful destruction successful, exit code 0 [2022-04-28 03:56:34,527 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable37,37 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:56:34,527 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:56:34,528 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:56:34,528 INFO L85 PathProgramCache]: Analyzing trace with hash -808186061, now seen corresponding path program 36 times [2022-04-28 03:56:34,528 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:56:34,528 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [928296160] [2022-04-28 03:56:34,629 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:56:34,830 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:56:35,036 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:56:35,038 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:56:35,041 INFO L85 PathProgramCache]: Analyzing trace with hash -1665760345, now seen corresponding path program 1 times [2022-04-28 03:56:35,041 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:56:35,041 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1887276092] [2022-04-28 03:56:35,041 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:56:35,041 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:56:35,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:35,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:56:35,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:35,086 INFO L290 TraceCheckUtils]: 0: Hoare triple {29767#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {29759#true} is VALID [2022-04-28 03:56:35,086 INFO L290 TraceCheckUtils]: 1: Hoare triple {29759#true} assume true; {29759#true} is VALID [2022-04-28 03:56:35,086 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {29759#true} {29759#true} #48#return; {29759#true} is VALID [2022-04-28 03:56:35,087 INFO L272 TraceCheckUtils]: 0: Hoare triple {29759#true} call ULTIMATE.init(); {29767#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:56:35,087 INFO L290 TraceCheckUtils]: 1: Hoare triple {29767#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {29759#true} is VALID [2022-04-28 03:56:35,087 INFO L290 TraceCheckUtils]: 2: Hoare triple {29759#true} assume true; {29759#true} is VALID [2022-04-28 03:56:35,087 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {29759#true} {29759#true} #48#return; {29759#true} is VALID [2022-04-28 03:56:35,087 INFO L272 TraceCheckUtils]: 4: Hoare triple {29759#true} call #t~ret7 := main(); {29759#true} is VALID [2022-04-28 03:56:35,087 INFO L290 TraceCheckUtils]: 5: Hoare triple {29759#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {29764#(= main_~x~0 0)} is VALID [2022-04-28 03:56:35,088 INFO L290 TraceCheckUtils]: 6: Hoare triple {29764#(= main_~x~0 0)} [270] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_261| |v_main_#t~post4_260|))) (or (and .cse0 (= v_main_~x~0_1615 v_main_~x~0_1616) (not (< v_main_~x~0_1616 500000))) (and (< v_main_~x~0_1615 500001) (< v_main_~x~0_1616 v_main_~x~0_1615)) (and (= v_main_~x~0_1616 v_main_~x~0_1615) .cse0))) InVars {main_~x~0=v_main_~x~0_1616, main_#t~post4=|v_main_#t~post4_261|} OutVars{main_~x~0=v_main_~x~0_1615, main_#t~post4=|v_main_#t~post4_260|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {29765#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:35,088 INFO L290 TraceCheckUtils]: 7: Hoare triple {29765#(<= main_~x~0 500000)} [271] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {29765#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:35,089 INFO L290 TraceCheckUtils]: 8: Hoare triple {29765#(<= main_~x~0 500000)} [272] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1240 v_main_~y~0_1239)) (.cse1 (= |v_main_#t~post6_467| |v_main_#t~post6_465|)) (.cse2 (= v_main_~x~0_1618 v_main_~x~0_1617)) (.cse3 (<= 750000 v_main_~x~0_1618))) (or (and .cse0 .cse1 .cse2) (and .cse0 .cse1 .cse2 (or (not .cse3) (not (< v_main_~x~0_1618 1000000)))) (and .cse3 (< v_main_~y~0_1239 (+ 2 v_main_~y~0_1240 (div (+ (* (- 1) v_main_~x~0_1618) 999999) 2))) (= (+ v_main_~x~0_1617 (* 2 v_main_~y~0_1240)) (+ v_main_~x~0_1618 (* 2 v_main_~y~0_1239))) (< v_main_~y~0_1240 v_main_~y~0_1239)))) InVars {main_~y~0=v_main_~y~0_1240, main_~x~0=v_main_~x~0_1618, main_#t~post6=|v_main_#t~post6_467|} OutVars{main_~y~0=v_main_~y~0_1239, main_~x~0=v_main_~x~0_1617, main_#t~post6=|v_main_#t~post6_465|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {29765#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:35,090 INFO L290 TraceCheckUtils]: 9: Hoare triple {29765#(<= main_~x~0 500000)} [273] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {29765#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:35,091 INFO L290 TraceCheckUtils]: 10: Hoare triple {29765#(<= main_~x~0 500000)} [274] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1242 v_main_~y~0_1241)) (.cse1 (= |v_main_#t~post5_221| |v_main_#t~post5_220|)) (.cse2 (= |v_main_#t~post6_470| |v_main_#t~post6_466|)) (.cse3 (<= 500000 v_main_~x~0_1620))) (or (and (= v_main_~x~0_1620 v_main_~x~0_1619) .cse0 .cse1 .cse2) (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_1620 750000)) (not .cse3)) (= v_main_~x~0_1619 v_main_~x~0_1620)) (let ((.cse4 (+ v_main_~x~0_1620 v_main_~y~0_1241))) (and (< .cse4 (+ 750001 v_main_~y~0_1242)) (= .cse4 (+ v_main_~x~0_1619 v_main_~y~0_1242)) (< v_main_~y~0_1242 v_main_~y~0_1241) .cse3)))) InVars {main_~y~0=v_main_~y~0_1242, main_#t~post5=|v_main_#t~post5_221|, main_~x~0=v_main_~x~0_1620, main_#t~post6=|v_main_#t~post6_470|} OutVars{main_~y~0=v_main_~y~0_1241, main_#t~post5=|v_main_#t~post5_220|, main_~x~0=v_main_~x~0_1619, main_#t~post6=|v_main_#t~post6_466|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {29766#(<= main_~x~0 750000)} is VALID [2022-04-28 03:56:35,091 INFO L290 TraceCheckUtils]: 11: Hoare triple {29766#(<= main_~x~0 750000)} [269] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {29760#false} is VALID [2022-04-28 03:56:35,091 INFO L272 TraceCheckUtils]: 12: Hoare triple {29760#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {29760#false} is VALID [2022-04-28 03:56:35,091 INFO L290 TraceCheckUtils]: 13: Hoare triple {29760#false} ~cond := #in~cond; {29760#false} is VALID [2022-04-28 03:56:35,091 INFO L290 TraceCheckUtils]: 14: Hoare triple {29760#false} assume 0 == ~cond; {29760#false} is VALID [2022-04-28 03:56:35,091 INFO L290 TraceCheckUtils]: 15: Hoare triple {29760#false} assume !false; {29760#false} is VALID [2022-04-28 03:56:35,092 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:56:35,092 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:56:35,092 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1887276092] [2022-04-28 03:56:35,092 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1887276092] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:56:35,092 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1208885285] [2022-04-28 03:56:35,092 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:56:35,092 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:56:35,092 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:56:35,096 INFO L229 MonitoredProcess]: Starting monitored process 38 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:56:35,100 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-04-28 03:56:35,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:35,131 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 9 conjunts are in the unsatisfiable core [2022-04-28 03:56:35,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:35,140 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:56:35,479 INFO L272 TraceCheckUtils]: 0: Hoare triple {29759#true} call ULTIMATE.init(); {29759#true} is VALID [2022-04-28 03:56:35,479 INFO L290 TraceCheckUtils]: 1: Hoare triple {29759#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {29759#true} is VALID [2022-04-28 03:56:35,479 INFO L290 TraceCheckUtils]: 2: Hoare triple {29759#true} assume true; {29759#true} is VALID [2022-04-28 03:56:35,479 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {29759#true} {29759#true} #48#return; {29759#true} is VALID [2022-04-28 03:56:35,479 INFO L272 TraceCheckUtils]: 4: Hoare triple {29759#true} call #t~ret7 := main(); {29759#true} is VALID [2022-04-28 03:56:35,479 INFO L290 TraceCheckUtils]: 5: Hoare triple {29759#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {29764#(= main_~x~0 0)} is VALID [2022-04-28 03:56:35,480 INFO L290 TraceCheckUtils]: 6: Hoare triple {29764#(= main_~x~0 0)} [270] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_261| |v_main_#t~post4_260|))) (or (and .cse0 (= v_main_~x~0_1615 v_main_~x~0_1616) (not (< v_main_~x~0_1616 500000))) (and (< v_main_~x~0_1615 500001) (< v_main_~x~0_1616 v_main_~x~0_1615)) (and (= v_main_~x~0_1616 v_main_~x~0_1615) .cse0))) InVars {main_~x~0=v_main_~x~0_1616, main_#t~post4=|v_main_#t~post4_261|} OutVars{main_~x~0=v_main_~x~0_1615, main_#t~post4=|v_main_#t~post4_260|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {29789#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:56:35,480 INFO L290 TraceCheckUtils]: 7: Hoare triple {29789#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [271] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {29789#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:56:35,481 INFO L290 TraceCheckUtils]: 8: Hoare triple {29789#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [272] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1240 v_main_~y~0_1239)) (.cse1 (= |v_main_#t~post6_467| |v_main_#t~post6_465|)) (.cse2 (= v_main_~x~0_1618 v_main_~x~0_1617)) (.cse3 (<= 750000 v_main_~x~0_1618))) (or (and .cse0 .cse1 .cse2) (and .cse0 .cse1 .cse2 (or (not .cse3) (not (< v_main_~x~0_1618 1000000)))) (and .cse3 (< v_main_~y~0_1239 (+ 2 v_main_~y~0_1240 (div (+ (* (- 1) v_main_~x~0_1618) 999999) 2))) (= (+ v_main_~x~0_1617 (* 2 v_main_~y~0_1240)) (+ v_main_~x~0_1618 (* 2 v_main_~y~0_1239))) (< v_main_~y~0_1240 v_main_~y~0_1239)))) InVars {main_~y~0=v_main_~y~0_1240, main_~x~0=v_main_~x~0_1618, main_#t~post6=|v_main_#t~post6_467|} OutVars{main_~y~0=v_main_~y~0_1239, main_~x~0=v_main_~x~0_1617, main_#t~post6=|v_main_#t~post6_465|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {29789#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:56:35,482 INFO L290 TraceCheckUtils]: 9: Hoare triple {29789#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [273] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {29789#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:56:35,482 INFO L290 TraceCheckUtils]: 10: Hoare triple {29789#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [274] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1242 v_main_~y~0_1241)) (.cse1 (= |v_main_#t~post5_221| |v_main_#t~post5_220|)) (.cse2 (= |v_main_#t~post6_470| |v_main_#t~post6_466|)) (.cse3 (<= 500000 v_main_~x~0_1620))) (or (and (= v_main_~x~0_1620 v_main_~x~0_1619) .cse0 .cse1 .cse2) (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_1620 750000)) (not .cse3)) (= v_main_~x~0_1619 v_main_~x~0_1620)) (let ((.cse4 (+ v_main_~x~0_1620 v_main_~y~0_1241))) (and (< .cse4 (+ 750001 v_main_~y~0_1242)) (= .cse4 (+ v_main_~x~0_1619 v_main_~y~0_1242)) (< v_main_~y~0_1242 v_main_~y~0_1241) .cse3)))) InVars {main_~y~0=v_main_~y~0_1242, main_#t~post5=|v_main_#t~post5_221|, main_~x~0=v_main_~x~0_1620, main_#t~post6=|v_main_#t~post6_470|} OutVars{main_~y~0=v_main_~y~0_1241, main_#t~post5=|v_main_#t~post5_220|, main_~x~0=v_main_~x~0_1619, main_#t~post6=|v_main_#t~post6_466|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {29802#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} is VALID [2022-04-28 03:56:35,483 INFO L290 TraceCheckUtils]: 11: Hoare triple {29802#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} [269] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {29760#false} is VALID [2022-04-28 03:56:35,483 INFO L272 TraceCheckUtils]: 12: Hoare triple {29760#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {29760#false} is VALID [2022-04-28 03:56:35,483 INFO L290 TraceCheckUtils]: 13: Hoare triple {29760#false} ~cond := #in~cond; {29760#false} is VALID [2022-04-28 03:56:35,483 INFO L290 TraceCheckUtils]: 14: Hoare triple {29760#false} assume 0 == ~cond; {29760#false} is VALID [2022-04-28 03:56:35,483 INFO L290 TraceCheckUtils]: 15: Hoare triple {29760#false} assume !false; {29760#false} is VALID [2022-04-28 03:56:35,483 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:56:35,483 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:56:35,889 INFO L290 TraceCheckUtils]: 15: Hoare triple {29760#false} assume !false; {29760#false} is VALID [2022-04-28 03:56:35,889 INFO L290 TraceCheckUtils]: 14: Hoare triple {29821#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {29760#false} is VALID [2022-04-28 03:56:35,890 INFO L290 TraceCheckUtils]: 13: Hoare triple {29825#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {29821#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:56:35,890 INFO L272 TraceCheckUtils]: 12: Hoare triple {29829#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {29825#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:56:35,890 INFO L290 TraceCheckUtils]: 11: Hoare triple {29833#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [269] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {29829#(= main_~x~0 1000000)} is VALID [2022-04-28 03:56:35,891 INFO L290 TraceCheckUtils]: 10: Hoare triple {29833#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [274] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1242 v_main_~y~0_1241)) (.cse1 (= |v_main_#t~post5_221| |v_main_#t~post5_220|)) (.cse2 (= |v_main_#t~post6_470| |v_main_#t~post6_466|)) (.cse3 (<= 500000 v_main_~x~0_1620))) (or (and (= v_main_~x~0_1620 v_main_~x~0_1619) .cse0 .cse1 .cse2) (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_1620 750000)) (not .cse3)) (= v_main_~x~0_1619 v_main_~x~0_1620)) (let ((.cse4 (+ v_main_~x~0_1620 v_main_~y~0_1241))) (and (< .cse4 (+ 750001 v_main_~y~0_1242)) (= .cse4 (+ v_main_~x~0_1619 v_main_~y~0_1242)) (< v_main_~y~0_1242 v_main_~y~0_1241) .cse3)))) InVars {main_~y~0=v_main_~y~0_1242, main_#t~post5=|v_main_#t~post5_221|, main_~x~0=v_main_~x~0_1620, main_#t~post6=|v_main_#t~post6_470|} OutVars{main_~y~0=v_main_~y~0_1241, main_#t~post5=|v_main_#t~post5_220|, main_~x~0=v_main_~x~0_1619, main_#t~post6=|v_main_#t~post6_466|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {29833#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:56:35,892 INFO L290 TraceCheckUtils]: 9: Hoare triple {29833#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [273] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {29833#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:56:35,893 INFO L290 TraceCheckUtils]: 8: Hoare triple {29843#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [272] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1240 v_main_~y~0_1239)) (.cse1 (= |v_main_#t~post6_467| |v_main_#t~post6_465|)) (.cse2 (= v_main_~x~0_1618 v_main_~x~0_1617)) (.cse3 (<= 750000 v_main_~x~0_1618))) (or (and .cse0 .cse1 .cse2) (and .cse0 .cse1 .cse2 (or (not .cse3) (not (< v_main_~x~0_1618 1000000)))) (and .cse3 (< v_main_~y~0_1239 (+ 2 v_main_~y~0_1240 (div (+ (* (- 1) v_main_~x~0_1618) 999999) 2))) (= (+ v_main_~x~0_1617 (* 2 v_main_~y~0_1240)) (+ v_main_~x~0_1618 (* 2 v_main_~y~0_1239))) (< v_main_~y~0_1240 v_main_~y~0_1239)))) InVars {main_~y~0=v_main_~y~0_1240, main_~x~0=v_main_~x~0_1618, main_#t~post6=|v_main_#t~post6_467|} OutVars{main_~y~0=v_main_~y~0_1239, main_~x~0=v_main_~x~0_1617, main_#t~post6=|v_main_#t~post6_465|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {29833#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:56:35,893 INFO L290 TraceCheckUtils]: 7: Hoare triple {29843#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [271] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {29843#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:56:35,894 INFO L290 TraceCheckUtils]: 6: Hoare triple {29843#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [270] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_261| |v_main_#t~post4_260|))) (or (and .cse0 (= v_main_~x~0_1615 v_main_~x~0_1616) (not (< v_main_~x~0_1616 500000))) (and (< v_main_~x~0_1615 500001) (< v_main_~x~0_1616 v_main_~x~0_1615)) (and (= v_main_~x~0_1616 v_main_~x~0_1615) .cse0))) InVars {main_~x~0=v_main_~x~0_1616, main_#t~post4=|v_main_#t~post4_261|} OutVars{main_~x~0=v_main_~x~0_1615, main_#t~post4=|v_main_#t~post4_260|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {29843#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:56:35,895 INFO L290 TraceCheckUtils]: 5: Hoare triple {29759#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {29843#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:56:35,895 INFO L272 TraceCheckUtils]: 4: Hoare triple {29759#true} call #t~ret7 := main(); {29759#true} is VALID [2022-04-28 03:56:35,895 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {29759#true} {29759#true} #48#return; {29759#true} is VALID [2022-04-28 03:56:35,895 INFO L290 TraceCheckUtils]: 2: Hoare triple {29759#true} assume true; {29759#true} is VALID [2022-04-28 03:56:35,895 INFO L290 TraceCheckUtils]: 1: Hoare triple {29759#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {29759#true} is VALID [2022-04-28 03:56:35,895 INFO L272 TraceCheckUtils]: 0: Hoare triple {29759#true} call ULTIMATE.init(); {29759#true} is VALID [2022-04-28 03:56:35,895 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:56:35,895 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1208885285] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:56:35,895 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:56:35,895 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:56:37,441 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:56:37,441 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [928296160] [2022-04-28 03:56:37,441 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [928296160] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:56:37,441 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:56:37,441 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [43] imperfect sequences [] total 43 [2022-04-28 03:56:37,441 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [278032168] [2022-04-28 03:56:37,442 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:56:37,442 INFO L78 Accepts]: Start accepts. Automaton has has 43 states, 43 states have (on average 3.744186046511628) internal successors, (161), 42 states have internal predecessors, (161), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 165 [2022-04-28 03:56:37,442 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:56:37,442 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 43 states, 43 states have (on average 3.744186046511628) internal successors, (161), 42 states have internal predecessors, (161), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:37,555 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 165 edges. 165 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:56:37,556 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2022-04-28 03:56:37,556 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:56:37,556 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2022-04-28 03:56:37,556 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=284, Invalid=2368, Unknown=0, NotChecked=0, Total=2652 [2022-04-28 03:56:37,556 INFO L87 Difference]: Start difference. First operand 168 states and 172 transitions. Second operand has 43 states, 43 states have (on average 3.744186046511628) internal successors, (161), 42 states have internal predecessors, (161), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:49,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:56:49,149 INFO L93 Difference]: Finished difference Result 195 states and 204 transitions. [2022-04-28 03:56:49,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2022-04-28 03:56:49,149 INFO L78 Accepts]: Start accepts. Automaton has has 43 states, 43 states have (on average 3.744186046511628) internal successors, (161), 42 states have internal predecessors, (161), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 165 [2022-04-28 03:56:49,149 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:56:49,149 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 43 states have (on average 3.744186046511628) internal successors, (161), 42 states have internal predecessors, (161), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:49,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 184 transitions. [2022-04-28 03:56:49,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 43 states have (on average 3.744186046511628) internal successors, (161), 42 states have internal predecessors, (161), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:49,152 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 184 transitions. [2022-04-28 03:56:49,152 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 43 states and 184 transitions. [2022-04-28 03:56:49,299 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 184 edges. 184 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:56:49,301 INFO L225 Difference]: With dead ends: 195 [2022-04-28 03:56:49,301 INFO L226 Difference]: Without dead ends: 177 [2022-04-28 03:56:49,301 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 239 GetRequests, 148 SyntacticMatches, 1 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1355 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=613, Invalid=7759, Unknown=0, NotChecked=0, Total=8372 [2022-04-28 03:56:49,306 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 125 mSDsluCounter, 197 mSDsCounter, 0 mSdLazyCounter, 6244 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 246 SdHoareTripleChecker+Invalid, 6287 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 6244 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.4s IncrementalHoareTripleChecker+Time [2022-04-28 03:56:49,307 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 246 Invalid, 6287 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 6244 Invalid, 0 Unknown, 0 Unchecked, 4.4s Time] [2022-04-28 03:56:49,307 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 177 states. [2022-04-28 03:56:51,913 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 177 to 172. [2022-04-28 03:56:51,913 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:56:51,913 INFO L82 GeneralOperation]: Start isEquivalent. First operand 177 states. Second operand has 172 states, 167 states have (on average 1.029940119760479) internal successors, (172), 167 states have internal predecessors, (172), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:51,913 INFO L74 IsIncluded]: Start isIncluded. First operand 177 states. Second operand has 172 states, 167 states have (on average 1.029940119760479) internal successors, (172), 167 states have internal predecessors, (172), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:51,914 INFO L87 Difference]: Start difference. First operand 177 states. Second operand has 172 states, 167 states have (on average 1.029940119760479) internal successors, (172), 167 states have internal predecessors, (172), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:51,915 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:56:51,915 INFO L93 Difference]: Finished difference Result 177 states and 181 transitions. [2022-04-28 03:56:51,915 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 181 transitions. [2022-04-28 03:56:51,915 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:56:51,915 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:56:51,915 INFO L74 IsIncluded]: Start isIncluded. First operand has 172 states, 167 states have (on average 1.029940119760479) internal successors, (172), 167 states have internal predecessors, (172), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 177 states. [2022-04-28 03:56:51,916 INFO L87 Difference]: Start difference. First operand has 172 states, 167 states have (on average 1.029940119760479) internal successors, (172), 167 states have internal predecessors, (172), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 177 states. [2022-04-28 03:56:51,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:56:51,917 INFO L93 Difference]: Finished difference Result 177 states and 181 transitions. [2022-04-28 03:56:51,917 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 181 transitions. [2022-04-28 03:56:51,917 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:56:51,917 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:56:51,917 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:56:51,917 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:56:51,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172 states, 167 states have (on average 1.029940119760479) internal successors, (172), 167 states have internal predecessors, (172), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:51,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 176 transitions. [2022-04-28 03:56:51,920 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 176 transitions. Word has length 165 [2022-04-28 03:56:51,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:56:51,920 INFO L495 AbstractCegarLoop]: Abstraction has 172 states and 176 transitions. [2022-04-28 03:56:51,920 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 43 states, 43 states have (on average 3.744186046511628) internal successors, (161), 42 states have internal predecessors, (161), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:51,921 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 172 states and 176 transitions. [2022-04-28 03:56:52,329 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 176 edges. 176 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:56:52,329 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 176 transitions. [2022-04-28 03:56:52,329 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2022-04-28 03:56:52,330 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:56:52,330 INFO L195 NwaCegarLoop]: trace histogram [40, 39, 39, 38, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:56:52,345 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Ended with exit code 0 [2022-04-28 03:56:52,530 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 38 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-04-28 03:56:52,530 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:56:52,530 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:56:52,531 INFO L85 PathProgramCache]: Analyzing trace with hash 1228346634, now seen corresponding path program 37 times [2022-04-28 03:56:52,531 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:56:52,531 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [221318229] [2022-04-28 03:56:52,632 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:56:52,845 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:56:55,447 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:56:55,448 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:56:55,451 INFO L85 PathProgramCache]: Analyzing trace with hash -2025335321, now seen corresponding path program 1 times [2022-04-28 03:56:55,451 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:56:55,451 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2141583701] [2022-04-28 03:56:55,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:56:55,451 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:56:55,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:55,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:56:55,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:55,497 INFO L290 TraceCheckUtils]: 0: Hoare triple {31085#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {31077#true} is VALID [2022-04-28 03:56:55,497 INFO L290 TraceCheckUtils]: 1: Hoare triple {31077#true} assume true; {31077#true} is VALID [2022-04-28 03:56:55,497 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31077#true} {31077#true} #48#return; {31077#true} is VALID [2022-04-28 03:56:55,497 INFO L272 TraceCheckUtils]: 0: Hoare triple {31077#true} call ULTIMATE.init(); {31085#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:56:55,497 INFO L290 TraceCheckUtils]: 1: Hoare triple {31085#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {31077#true} is VALID [2022-04-28 03:56:55,497 INFO L290 TraceCheckUtils]: 2: Hoare triple {31077#true} assume true; {31077#true} is VALID [2022-04-28 03:56:55,498 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {31077#true} {31077#true} #48#return; {31077#true} is VALID [2022-04-28 03:56:55,498 INFO L272 TraceCheckUtils]: 4: Hoare triple {31077#true} call #t~ret7 := main(); {31077#true} is VALID [2022-04-28 03:56:55,498 INFO L290 TraceCheckUtils]: 5: Hoare triple {31077#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {31082#(= main_~x~0 0)} is VALID [2022-04-28 03:56:55,499 INFO L290 TraceCheckUtils]: 6: Hoare triple {31082#(= main_~x~0 0)} [276] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1679 v_main_~x~0_1678)) (.cse1 (= |v_main_#t~post4_268| |v_main_#t~post4_267|))) (or (and .cse0 .cse1) (and (<= 500000 v_main_~x~0_1679) .cse0 .cse1) (and (< v_main_~x~0_1678 500001) (< v_main_~x~0_1679 v_main_~x~0_1678)))) InVars {main_~x~0=v_main_~x~0_1679, main_#t~post4=|v_main_#t~post4_268|} OutVars{main_~x~0=v_main_~x~0_1678, main_#t~post4=|v_main_#t~post4_267|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {31083#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:55,499 INFO L290 TraceCheckUtils]: 7: Hoare triple {31083#(<= main_~x~0 500000)} [277] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {31083#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:55,500 INFO L290 TraceCheckUtils]: 8: Hoare triple {31083#(<= main_~x~0 500000)} [278] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1681 v_main_~x~0_1680)) (.cse1 (<= 750000 v_main_~x~0_1681))) (or (and .cse0 (= v_main_~y~0_1293 v_main_~y~0_1292) (= |v_main_#t~post6_480| |v_main_#t~post6_478|)) (and (< v_main_~y~0_1292 (+ (div (+ 999999 (* (- 1) v_main_~x~0_1681)) 2) 2 v_main_~y~0_1293)) (< v_main_~y~0_1293 v_main_~y~0_1292) (= (+ (* 2 v_main_~y~0_1292) v_main_~x~0_1681) (+ v_main_~x~0_1680 (* 2 v_main_~y~0_1293))) .cse1) (and .cse0 (or (not .cse1) (not (< v_main_~x~0_1681 1000000))) (= |v_main_#t~post6_478| |v_main_#t~post6_480|) (= v_main_~y~0_1292 v_main_~y~0_1293)))) InVars {main_~y~0=v_main_~y~0_1293, main_~x~0=v_main_~x~0_1681, main_#t~post6=|v_main_#t~post6_480|} OutVars{main_~y~0=v_main_~y~0_1292, main_~x~0=v_main_~x~0_1680, main_#t~post6=|v_main_#t~post6_478|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {31084#(<= main_~x~0 999999)} is VALID [2022-04-28 03:56:55,500 INFO L290 TraceCheckUtils]: 9: Hoare triple {31084#(<= main_~x~0 999999)} [279] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {31084#(<= main_~x~0 999999)} is VALID [2022-04-28 03:56:55,501 INFO L290 TraceCheckUtils]: 10: Hoare triple {31084#(<= main_~x~0 999999)} [280] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1683)) (.cse1 (= |v_main_#t~post5_227| |v_main_#t~post5_226|)) (.cse2 (= v_main_~x~0_1683 v_main_~x~0_1682)) (.cse3 (= v_main_~y~0_1295 v_main_~y~0_1294))) (or (and .cse0 (< v_main_~x~0_1682 750001) (< v_main_~x~0_1683 v_main_~x~0_1682) (= (+ v_main_~x~0_1682 v_main_~y~0_1295) (+ v_main_~x~0_1683 v_main_~y~0_1294))) (and .cse1 (or (not .cse0) (not (< v_main_~x~0_1683 750000))) (= |v_main_#t~post6_479| |v_main_#t~post6_483|) .cse2 .cse3) (and .cse1 (= |v_main_#t~post6_483| |v_main_#t~post6_479|) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1295, main_#t~post5=|v_main_#t~post5_227|, main_~x~0=v_main_~x~0_1683, main_#t~post6=|v_main_#t~post6_483|} OutVars{main_~y~0=v_main_~y~0_1294, main_#t~post5=|v_main_#t~post5_226|, main_~x~0=v_main_~x~0_1682, main_#t~post6=|v_main_#t~post6_479|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {31084#(<= main_~x~0 999999)} is VALID [2022-04-28 03:56:55,502 INFO L290 TraceCheckUtils]: 11: Hoare triple {31084#(<= main_~x~0 999999)} [275] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {31078#false} is VALID [2022-04-28 03:56:55,502 INFO L272 TraceCheckUtils]: 12: Hoare triple {31078#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {31078#false} is VALID [2022-04-28 03:56:55,502 INFO L290 TraceCheckUtils]: 13: Hoare triple {31078#false} ~cond := #in~cond; {31078#false} is VALID [2022-04-28 03:56:55,502 INFO L290 TraceCheckUtils]: 14: Hoare triple {31078#false} assume 0 == ~cond; {31078#false} is VALID [2022-04-28 03:56:55,502 INFO L290 TraceCheckUtils]: 15: Hoare triple {31078#false} assume !false; {31078#false} is VALID [2022-04-28 03:56:55,502 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:56:55,502 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:56:55,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2141583701] [2022-04-28 03:56:55,502 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2141583701] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:56:55,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [453863562] [2022-04-28 03:56:55,502 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:56:55,503 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:56:55,503 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:56:55,508 INFO L229 MonitoredProcess]: Starting monitored process 39 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:56:55,509 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-04-28 03:56:55,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:55,550 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:56:55,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:56:55,559 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:56:55,751 INFO L272 TraceCheckUtils]: 0: Hoare triple {31077#true} call ULTIMATE.init(); {31077#true} is VALID [2022-04-28 03:56:55,751 INFO L290 TraceCheckUtils]: 1: Hoare triple {31077#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {31077#true} is VALID [2022-04-28 03:56:55,751 INFO L290 TraceCheckUtils]: 2: Hoare triple {31077#true} assume true; {31077#true} is VALID [2022-04-28 03:56:55,751 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {31077#true} {31077#true} #48#return; {31077#true} is VALID [2022-04-28 03:56:55,751 INFO L272 TraceCheckUtils]: 4: Hoare triple {31077#true} call #t~ret7 := main(); {31077#true} is VALID [2022-04-28 03:56:55,751 INFO L290 TraceCheckUtils]: 5: Hoare triple {31077#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {31104#(<= main_~x~0 0)} is VALID [2022-04-28 03:56:55,752 INFO L290 TraceCheckUtils]: 6: Hoare triple {31104#(<= main_~x~0 0)} [276] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1679 v_main_~x~0_1678)) (.cse1 (= |v_main_#t~post4_268| |v_main_#t~post4_267|))) (or (and .cse0 .cse1) (and (<= 500000 v_main_~x~0_1679) .cse0 .cse1) (and (< v_main_~x~0_1678 500001) (< v_main_~x~0_1679 v_main_~x~0_1678)))) InVars {main_~x~0=v_main_~x~0_1679, main_#t~post4=|v_main_#t~post4_268|} OutVars{main_~x~0=v_main_~x~0_1678, main_#t~post4=|v_main_#t~post4_267|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {31083#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:55,752 INFO L290 TraceCheckUtils]: 7: Hoare triple {31083#(<= main_~x~0 500000)} [277] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {31083#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:55,753 INFO L290 TraceCheckUtils]: 8: Hoare triple {31083#(<= main_~x~0 500000)} [278] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1681 v_main_~x~0_1680)) (.cse1 (<= 750000 v_main_~x~0_1681))) (or (and .cse0 (= v_main_~y~0_1293 v_main_~y~0_1292) (= |v_main_#t~post6_480| |v_main_#t~post6_478|)) (and (< v_main_~y~0_1292 (+ (div (+ 999999 (* (- 1) v_main_~x~0_1681)) 2) 2 v_main_~y~0_1293)) (< v_main_~y~0_1293 v_main_~y~0_1292) (= (+ (* 2 v_main_~y~0_1292) v_main_~x~0_1681) (+ v_main_~x~0_1680 (* 2 v_main_~y~0_1293))) .cse1) (and .cse0 (or (not .cse1) (not (< v_main_~x~0_1681 1000000))) (= |v_main_#t~post6_478| |v_main_#t~post6_480|) (= v_main_~y~0_1292 v_main_~y~0_1293)))) InVars {main_~y~0=v_main_~y~0_1293, main_~x~0=v_main_~x~0_1681, main_#t~post6=|v_main_#t~post6_480|} OutVars{main_~y~0=v_main_~y~0_1292, main_~x~0=v_main_~x~0_1680, main_#t~post6=|v_main_#t~post6_478|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {31083#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:55,753 INFO L290 TraceCheckUtils]: 9: Hoare triple {31083#(<= main_~x~0 500000)} [279] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {31083#(<= main_~x~0 500000)} is VALID [2022-04-28 03:56:55,754 INFO L290 TraceCheckUtils]: 10: Hoare triple {31083#(<= main_~x~0 500000)} [280] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1683)) (.cse1 (= |v_main_#t~post5_227| |v_main_#t~post5_226|)) (.cse2 (= v_main_~x~0_1683 v_main_~x~0_1682)) (.cse3 (= v_main_~y~0_1295 v_main_~y~0_1294))) (or (and .cse0 (< v_main_~x~0_1682 750001) (< v_main_~x~0_1683 v_main_~x~0_1682) (= (+ v_main_~x~0_1682 v_main_~y~0_1295) (+ v_main_~x~0_1683 v_main_~y~0_1294))) (and .cse1 (or (not .cse0) (not (< v_main_~x~0_1683 750000))) (= |v_main_#t~post6_479| |v_main_#t~post6_483|) .cse2 .cse3) (and .cse1 (= |v_main_#t~post6_483| |v_main_#t~post6_479|) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1295, main_#t~post5=|v_main_#t~post5_227|, main_~x~0=v_main_~x~0_1683, main_#t~post6=|v_main_#t~post6_483|} OutVars{main_~y~0=v_main_~y~0_1294, main_#t~post5=|v_main_#t~post5_226|, main_~x~0=v_main_~x~0_1682, main_#t~post6=|v_main_#t~post6_479|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {31120#(< main_~x~0 750001)} is VALID [2022-04-28 03:56:55,754 INFO L290 TraceCheckUtils]: 11: Hoare triple {31120#(< main_~x~0 750001)} [275] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {31078#false} is VALID [2022-04-28 03:56:55,754 INFO L272 TraceCheckUtils]: 12: Hoare triple {31078#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {31078#false} is VALID [2022-04-28 03:56:55,754 INFO L290 TraceCheckUtils]: 13: Hoare triple {31078#false} ~cond := #in~cond; {31078#false} is VALID [2022-04-28 03:56:55,754 INFO L290 TraceCheckUtils]: 14: Hoare triple {31078#false} assume 0 == ~cond; {31078#false} is VALID [2022-04-28 03:56:55,754 INFO L290 TraceCheckUtils]: 15: Hoare triple {31078#false} assume !false; {31078#false} is VALID [2022-04-28 03:56:55,755 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:56:55,755 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:56:56,151 INFO L290 TraceCheckUtils]: 15: Hoare triple {31078#false} assume !false; {31078#false} is VALID [2022-04-28 03:56:56,152 INFO L290 TraceCheckUtils]: 14: Hoare triple {31139#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {31078#false} is VALID [2022-04-28 03:56:56,152 INFO L290 TraceCheckUtils]: 13: Hoare triple {31143#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {31139#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:56:56,153 INFO L272 TraceCheckUtils]: 12: Hoare triple {31147#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {31143#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:56:56,153 INFO L290 TraceCheckUtils]: 11: Hoare triple {31151#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [275] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {31147#(= main_~x~0 1000000)} is VALID [2022-04-28 03:56:56,154 INFO L290 TraceCheckUtils]: 10: Hoare triple {31151#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [280] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1683)) (.cse1 (= |v_main_#t~post5_227| |v_main_#t~post5_226|)) (.cse2 (= v_main_~x~0_1683 v_main_~x~0_1682)) (.cse3 (= v_main_~y~0_1295 v_main_~y~0_1294))) (or (and .cse0 (< v_main_~x~0_1682 750001) (< v_main_~x~0_1683 v_main_~x~0_1682) (= (+ v_main_~x~0_1682 v_main_~y~0_1295) (+ v_main_~x~0_1683 v_main_~y~0_1294))) (and .cse1 (or (not .cse0) (not (< v_main_~x~0_1683 750000))) (= |v_main_#t~post6_479| |v_main_#t~post6_483|) .cse2 .cse3) (and .cse1 (= |v_main_#t~post6_483| |v_main_#t~post6_479|) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1295, main_#t~post5=|v_main_#t~post5_227|, main_~x~0=v_main_~x~0_1683, main_#t~post6=|v_main_#t~post6_483|} OutVars{main_~y~0=v_main_~y~0_1294, main_#t~post5=|v_main_#t~post5_226|, main_~x~0=v_main_~x~0_1682, main_#t~post6=|v_main_#t~post6_479|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {31151#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:56:56,154 INFO L290 TraceCheckUtils]: 9: Hoare triple {31151#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [279] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {31151#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:56:56,155 INFO L290 TraceCheckUtils]: 8: Hoare triple {31161#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [278] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1681 v_main_~x~0_1680)) (.cse1 (<= 750000 v_main_~x~0_1681))) (or (and .cse0 (= v_main_~y~0_1293 v_main_~y~0_1292) (= |v_main_#t~post6_480| |v_main_#t~post6_478|)) (and (< v_main_~y~0_1292 (+ (div (+ 999999 (* (- 1) v_main_~x~0_1681)) 2) 2 v_main_~y~0_1293)) (< v_main_~y~0_1293 v_main_~y~0_1292) (= (+ (* 2 v_main_~y~0_1292) v_main_~x~0_1681) (+ v_main_~x~0_1680 (* 2 v_main_~y~0_1293))) .cse1) (and .cse0 (or (not .cse1) (not (< v_main_~x~0_1681 1000000))) (= |v_main_#t~post6_478| |v_main_#t~post6_480|) (= v_main_~y~0_1292 v_main_~y~0_1293)))) InVars {main_~y~0=v_main_~y~0_1293, main_~x~0=v_main_~x~0_1681, main_#t~post6=|v_main_#t~post6_480|} OutVars{main_~y~0=v_main_~y~0_1292, main_~x~0=v_main_~x~0_1680, main_#t~post6=|v_main_#t~post6_478|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {31151#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:56:56,156 INFO L290 TraceCheckUtils]: 7: Hoare triple {31161#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [277] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {31161#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:56:56,157 INFO L290 TraceCheckUtils]: 6: Hoare triple {31161#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [276] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1679 v_main_~x~0_1678)) (.cse1 (= |v_main_#t~post4_268| |v_main_#t~post4_267|))) (or (and .cse0 .cse1) (and (<= 500000 v_main_~x~0_1679) .cse0 .cse1) (and (< v_main_~x~0_1678 500001) (< v_main_~x~0_1679 v_main_~x~0_1678)))) InVars {main_~x~0=v_main_~x~0_1679, main_#t~post4=|v_main_#t~post4_268|} OutVars{main_~x~0=v_main_~x~0_1678, main_#t~post4=|v_main_#t~post4_267|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {31161#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:56:56,157 INFO L290 TraceCheckUtils]: 5: Hoare triple {31077#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {31161#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:56:56,157 INFO L272 TraceCheckUtils]: 4: Hoare triple {31077#true} call #t~ret7 := main(); {31077#true} is VALID [2022-04-28 03:56:56,157 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {31077#true} {31077#true} #48#return; {31077#true} is VALID [2022-04-28 03:56:56,157 INFO L290 TraceCheckUtils]: 2: Hoare triple {31077#true} assume true; {31077#true} is VALID [2022-04-28 03:56:56,157 INFO L290 TraceCheckUtils]: 1: Hoare triple {31077#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {31077#true} is VALID [2022-04-28 03:56:56,157 INFO L272 TraceCheckUtils]: 0: Hoare triple {31077#true} call ULTIMATE.init(); {31077#true} is VALID [2022-04-28 03:56:56,157 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:56:56,158 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [453863562] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:56:56,158 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:56:56,158 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:56:57,697 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:56:57,697 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [221318229] [2022-04-28 03:56:57,697 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [221318229] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:56:57,698 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:56:57,698 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [44] imperfect sequences [] total 44 [2022-04-28 03:56:57,698 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1879499568] [2022-04-28 03:56:57,698 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:56:57,698 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 3.75) internal successors, (165), 43 states have internal predecessors, (165), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 169 [2022-04-28 03:56:57,698 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:56:57,698 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 44 states, 44 states have (on average 3.75) internal successors, (165), 43 states have internal predecessors, (165), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:56:57,810 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 169 edges. 169 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:56:57,810 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2022-04-28 03:56:57,810 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:56:57,810 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2022-04-28 03:56:57,810 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=298, Invalid=2564, Unknown=0, NotChecked=0, Total=2862 [2022-04-28 03:56:57,810 INFO L87 Difference]: Start difference. First operand 172 states and 176 transitions. Second operand has 44 states, 44 states have (on average 3.75) internal successors, (165), 43 states have internal predecessors, (165), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:09,910 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:57:09,910 INFO L93 Difference]: Finished difference Result 199 states and 208 transitions. [2022-04-28 03:57:09,911 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 44 states. [2022-04-28 03:57:09,911 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 3.75) internal successors, (165), 43 states have internal predecessors, (165), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 169 [2022-04-28 03:57:09,911 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:57:09,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 44 states, 44 states have (on average 3.75) internal successors, (165), 43 states have internal predecessors, (165), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:09,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 44 states to 44 states and 188 transitions. [2022-04-28 03:57:09,912 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 44 states, 44 states have (on average 3.75) internal successors, (165), 43 states have internal predecessors, (165), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:09,914 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 44 states to 44 states and 188 transitions. [2022-04-28 03:57:09,914 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 44 states and 188 transitions. [2022-04-28 03:57:10,065 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 188 edges. 188 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:57:10,068 INFO L225 Difference]: With dead ends: 199 [2022-04-28 03:57:10,068 INFO L226 Difference]: Without dead ends: 181 [2022-04-28 03:57:10,068 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 243 GetRequests, 148 SyntacticMatches, 2 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1536 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=635, Invalid=8295, Unknown=0, NotChecked=0, Total=8930 [2022-04-28 03:57:10,069 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 129 mSDsluCounter, 197 mSDsCounter, 0 mSdLazyCounter, 6404 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 247 SdHoareTripleChecker+Invalid, 6448 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 6404 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.6s IncrementalHoareTripleChecker+Time [2022-04-28 03:57:10,069 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 247 Invalid, 6448 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 6404 Invalid, 0 Unknown, 0 Unchecked, 4.6s Time] [2022-04-28 03:57:10,069 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 181 states. [2022-04-28 03:57:12,773 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 181 to 176. [2022-04-28 03:57:12,773 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:57:12,773 INFO L82 GeneralOperation]: Start isEquivalent. First operand 181 states. Second operand has 176 states, 171 states have (on average 1.0292397660818713) internal successors, (176), 171 states have internal predecessors, (176), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:12,773 INFO L74 IsIncluded]: Start isIncluded. First operand 181 states. Second operand has 176 states, 171 states have (on average 1.0292397660818713) internal successors, (176), 171 states have internal predecessors, (176), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:12,774 INFO L87 Difference]: Start difference. First operand 181 states. Second operand has 176 states, 171 states have (on average 1.0292397660818713) internal successors, (176), 171 states have internal predecessors, (176), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:12,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:57:12,775 INFO L93 Difference]: Finished difference Result 181 states and 185 transitions. [2022-04-28 03:57:12,775 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 185 transitions. [2022-04-28 03:57:12,775 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:57:12,775 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:57:12,775 INFO L74 IsIncluded]: Start isIncluded. First operand has 176 states, 171 states have (on average 1.0292397660818713) internal successors, (176), 171 states have internal predecessors, (176), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 181 states. [2022-04-28 03:57:12,776 INFO L87 Difference]: Start difference. First operand has 176 states, 171 states have (on average 1.0292397660818713) internal successors, (176), 171 states have internal predecessors, (176), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 181 states. [2022-04-28 03:57:12,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:57:12,777 INFO L93 Difference]: Finished difference Result 181 states and 185 transitions. [2022-04-28 03:57:12,777 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 185 transitions. [2022-04-28 03:57:12,777 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:57:12,777 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:57:12,777 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:57:12,777 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:57:12,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 176 states, 171 states have (on average 1.0292397660818713) internal successors, (176), 171 states have internal predecessors, (176), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:12,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 176 states to 176 states and 180 transitions. [2022-04-28 03:57:12,779 INFO L78 Accepts]: Start accepts. Automaton has 176 states and 180 transitions. Word has length 169 [2022-04-28 03:57:12,779 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:57:12,779 INFO L495 AbstractCegarLoop]: Abstraction has 176 states and 180 transitions. [2022-04-28 03:57:12,779 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 44 states have (on average 3.75) internal successors, (165), 43 states have internal predecessors, (165), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:12,779 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 176 states and 180 transitions. [2022-04-28 03:57:13,222 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 180 edges. 180 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:57:13,222 INFO L276 IsEmpty]: Start isEmpty. Operand 176 states and 180 transitions. [2022-04-28 03:57:13,222 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 174 [2022-04-28 03:57:13,226 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:57:13,226 INFO L195 NwaCegarLoop]: trace histogram [41, 40, 40, 39, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:57:13,242 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Forceful destruction successful, exit code 0 [2022-04-28 03:57:13,431 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 39 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-04-28 03:57:13,431 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:57:13,432 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:57:13,432 INFO L85 PathProgramCache]: Analyzing trace with hash -1419421855, now seen corresponding path program 38 times [2022-04-28 03:57:13,432 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:57:13,432 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [2004244994] [2022-04-28 03:57:13,558 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:57:15,423 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:57:15,533 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:57:15,764 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:57:15,765 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:57:15,768 INFO L85 PathProgramCache]: Analyzing trace with hash 1910056999, now seen corresponding path program 1 times [2022-04-28 03:57:15,769 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:57:15,769 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1728439259] [2022-04-28 03:57:15,769 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:57:15,769 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:57:15,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:57:15,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:57:15,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:57:15,820 INFO L290 TraceCheckUtils]: 0: Hoare triple {32431#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {32423#true} is VALID [2022-04-28 03:57:15,820 INFO L290 TraceCheckUtils]: 1: Hoare triple {32423#true} assume true; {32423#true} is VALID [2022-04-28 03:57:15,820 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {32423#true} {32423#true} #48#return; {32423#true} is VALID [2022-04-28 03:57:15,821 INFO L272 TraceCheckUtils]: 0: Hoare triple {32423#true} call ULTIMATE.init(); {32431#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:57:15,821 INFO L290 TraceCheckUtils]: 1: Hoare triple {32431#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {32423#true} is VALID [2022-04-28 03:57:15,821 INFO L290 TraceCheckUtils]: 2: Hoare triple {32423#true} assume true; {32423#true} is VALID [2022-04-28 03:57:15,821 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {32423#true} {32423#true} #48#return; {32423#true} is VALID [2022-04-28 03:57:15,821 INFO L272 TraceCheckUtils]: 4: Hoare triple {32423#true} call #t~ret7 := main(); {32423#true} is VALID [2022-04-28 03:57:15,821 INFO L290 TraceCheckUtils]: 5: Hoare triple {32423#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {32428#(= main_~x~0 0)} is VALID [2022-04-28 03:57:15,822 INFO L290 TraceCheckUtils]: 6: Hoare triple {32428#(= main_~x~0 0)} [282] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_275| |v_main_#t~post4_274|)) (.cse1 (= v_main_~x~0_1743 v_main_~x~0_1742))) (or (and .cse0 .cse1) (and (not (< v_main_~x~0_1743 500000)) .cse0 .cse1) (and (< v_main_~x~0_1742 500001) (< v_main_~x~0_1743 v_main_~x~0_1742)))) InVars {main_~x~0=v_main_~x~0_1743, main_#t~post4=|v_main_#t~post4_275|} OutVars{main_~x~0=v_main_~x~0_1742, main_#t~post4=|v_main_#t~post4_274|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {32429#(<= main_~x~0 500000)} is VALID [2022-04-28 03:57:15,822 INFO L290 TraceCheckUtils]: 7: Hoare triple {32429#(<= main_~x~0 500000)} [283] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {32429#(<= main_~x~0 500000)} is VALID [2022-04-28 03:57:15,823 INFO L290 TraceCheckUtils]: 8: Hoare triple {32429#(<= main_~x~0 500000)} [284] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1745)) (.cse1 (= v_main_~x~0_1745 v_main_~x~0_1744)) (.cse2 (= v_main_~y~0_1347 v_main_~y~0_1346)) (.cse3 (= |v_main_#t~post6_493| |v_main_#t~post6_491|))) (or (and (< v_main_~y~0_1347 v_main_~y~0_1346) (< v_main_~y~0_1346 (+ (div (+ 999999 (* (- 1) v_main_~x~0_1745)) 2) 2 v_main_~y~0_1347)) .cse0 (= (+ v_main_~x~0_1745 (* 2 v_main_~y~0_1346)) (+ v_main_~x~0_1744 (* 2 v_main_~y~0_1347)))) (and .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_1745 1000000)) (not .cse0))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1347, main_~x~0=v_main_~x~0_1745, main_#t~post6=|v_main_#t~post6_493|} OutVars{main_~y~0=v_main_~y~0_1346, main_~x~0=v_main_~x~0_1744, main_#t~post6=|v_main_#t~post6_491|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {32430#(<= main_~x~0 999999)} is VALID [2022-04-28 03:57:15,823 INFO L290 TraceCheckUtils]: 9: Hoare triple {32430#(<= main_~x~0 999999)} [285] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {32430#(<= main_~x~0 999999)} is VALID [2022-04-28 03:57:15,824 INFO L290 TraceCheckUtils]: 10: Hoare triple {32430#(<= main_~x~0 999999)} [286] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1349 v_main_~y~0_1348)) (.cse1 (= |v_main_#t~post5_233| |v_main_#t~post5_232|)) (.cse2 (= v_main_~x~0_1747 v_main_~x~0_1746)) (.cse3 (= |v_main_#t~post6_496| |v_main_#t~post6_492|)) (.cse4 (<= 500000 v_main_~x~0_1747))) (or (and .cse0 .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_1747 750000)) (not .cse4))) (and .cse0 .cse1 .cse2 .cse3) (and .cse4 (< v_main_~x~0_1746 750001) (= (+ v_main_~x~0_1747 v_main_~y~0_1348) (+ v_main_~x~0_1746 v_main_~y~0_1349)) (< v_main_~x~0_1747 v_main_~x~0_1746)))) InVars {main_~y~0=v_main_~y~0_1349, main_#t~post5=|v_main_#t~post5_233|, main_~x~0=v_main_~x~0_1747, main_#t~post6=|v_main_#t~post6_496|} OutVars{main_~y~0=v_main_~y~0_1348, main_#t~post5=|v_main_#t~post5_232|, main_~x~0=v_main_~x~0_1746, main_#t~post6=|v_main_#t~post6_492|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {32430#(<= main_~x~0 999999)} is VALID [2022-04-28 03:57:15,824 INFO L290 TraceCheckUtils]: 11: Hoare triple {32430#(<= main_~x~0 999999)} [281] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {32424#false} is VALID [2022-04-28 03:57:15,824 INFO L272 TraceCheckUtils]: 12: Hoare triple {32424#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {32424#false} is VALID [2022-04-28 03:57:15,824 INFO L290 TraceCheckUtils]: 13: Hoare triple {32424#false} ~cond := #in~cond; {32424#false} is VALID [2022-04-28 03:57:15,824 INFO L290 TraceCheckUtils]: 14: Hoare triple {32424#false} assume 0 == ~cond; {32424#false} is VALID [2022-04-28 03:57:15,824 INFO L290 TraceCheckUtils]: 15: Hoare triple {32424#false} assume !false; {32424#false} is VALID [2022-04-28 03:57:15,824 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:57:15,825 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:57:15,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1728439259] [2022-04-28 03:57:15,825 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1728439259] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:57:15,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [898615324] [2022-04-28 03:57:15,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:57:15,825 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:57:15,825 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:57:15,826 INFO L229 MonitoredProcess]: Starting monitored process 40 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:57:15,827 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-04-28 03:57:15,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:57:15,853 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 9 conjunts are in the unsatisfiable core [2022-04-28 03:57:15,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:57:15,870 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:57:16,119 INFO L272 TraceCheckUtils]: 0: Hoare triple {32423#true} call ULTIMATE.init(); {32423#true} is VALID [2022-04-28 03:57:16,120 INFO L290 TraceCheckUtils]: 1: Hoare triple {32423#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {32423#true} is VALID [2022-04-28 03:57:16,120 INFO L290 TraceCheckUtils]: 2: Hoare triple {32423#true} assume true; {32423#true} is VALID [2022-04-28 03:57:16,120 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {32423#true} {32423#true} #48#return; {32423#true} is VALID [2022-04-28 03:57:16,120 INFO L272 TraceCheckUtils]: 4: Hoare triple {32423#true} call #t~ret7 := main(); {32423#true} is VALID [2022-04-28 03:57:16,120 INFO L290 TraceCheckUtils]: 5: Hoare triple {32423#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {32428#(= main_~x~0 0)} is VALID [2022-04-28 03:57:16,121 INFO L290 TraceCheckUtils]: 6: Hoare triple {32428#(= main_~x~0 0)} [282] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_275| |v_main_#t~post4_274|)) (.cse1 (= v_main_~x~0_1743 v_main_~x~0_1742))) (or (and .cse0 .cse1) (and (not (< v_main_~x~0_1743 500000)) .cse0 .cse1) (and (< v_main_~x~0_1742 500001) (< v_main_~x~0_1743 v_main_~x~0_1742)))) InVars {main_~x~0=v_main_~x~0_1743, main_#t~post4=|v_main_#t~post4_275|} OutVars{main_~x~0=v_main_~x~0_1742, main_#t~post4=|v_main_#t~post4_274|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {32453#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:57:16,121 INFO L290 TraceCheckUtils]: 7: Hoare triple {32453#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [283] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {32453#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:57:16,122 INFO L290 TraceCheckUtils]: 8: Hoare triple {32453#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [284] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1745)) (.cse1 (= v_main_~x~0_1745 v_main_~x~0_1744)) (.cse2 (= v_main_~y~0_1347 v_main_~y~0_1346)) (.cse3 (= |v_main_#t~post6_493| |v_main_#t~post6_491|))) (or (and (< v_main_~y~0_1347 v_main_~y~0_1346) (< v_main_~y~0_1346 (+ (div (+ 999999 (* (- 1) v_main_~x~0_1745)) 2) 2 v_main_~y~0_1347)) .cse0 (= (+ v_main_~x~0_1745 (* 2 v_main_~y~0_1346)) (+ v_main_~x~0_1744 (* 2 v_main_~y~0_1347)))) (and .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_1745 1000000)) (not .cse0))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1347, main_~x~0=v_main_~x~0_1745, main_#t~post6=|v_main_#t~post6_493|} OutVars{main_~y~0=v_main_~y~0_1346, main_~x~0=v_main_~x~0_1744, main_#t~post6=|v_main_#t~post6_491|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {32453#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:57:16,122 INFO L290 TraceCheckUtils]: 9: Hoare triple {32453#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [285] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {32453#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:57:16,123 INFO L290 TraceCheckUtils]: 10: Hoare triple {32453#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [286] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1349 v_main_~y~0_1348)) (.cse1 (= |v_main_#t~post5_233| |v_main_#t~post5_232|)) (.cse2 (= v_main_~x~0_1747 v_main_~x~0_1746)) (.cse3 (= |v_main_#t~post6_496| |v_main_#t~post6_492|)) (.cse4 (<= 500000 v_main_~x~0_1747))) (or (and .cse0 .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_1747 750000)) (not .cse4))) (and .cse0 .cse1 .cse2 .cse3) (and .cse4 (< v_main_~x~0_1746 750001) (= (+ v_main_~x~0_1747 v_main_~y~0_1348) (+ v_main_~x~0_1746 v_main_~y~0_1349)) (< v_main_~x~0_1747 v_main_~x~0_1746)))) InVars {main_~y~0=v_main_~y~0_1349, main_#t~post5=|v_main_#t~post5_233|, main_~x~0=v_main_~x~0_1747, main_#t~post6=|v_main_#t~post6_496|} OutVars{main_~y~0=v_main_~y~0_1348, main_#t~post5=|v_main_#t~post5_232|, main_~x~0=v_main_~x~0_1746, main_#t~post6=|v_main_#t~post6_492|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {32466#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} is VALID [2022-04-28 03:57:16,124 INFO L290 TraceCheckUtils]: 11: Hoare triple {32466#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} [281] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {32424#false} is VALID [2022-04-28 03:57:16,124 INFO L272 TraceCheckUtils]: 12: Hoare triple {32424#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {32424#false} is VALID [2022-04-28 03:57:16,124 INFO L290 TraceCheckUtils]: 13: Hoare triple {32424#false} ~cond := #in~cond; {32424#false} is VALID [2022-04-28 03:57:16,124 INFO L290 TraceCheckUtils]: 14: Hoare triple {32424#false} assume 0 == ~cond; {32424#false} is VALID [2022-04-28 03:57:16,124 INFO L290 TraceCheckUtils]: 15: Hoare triple {32424#false} assume !false; {32424#false} is VALID [2022-04-28 03:57:16,124 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:57:16,124 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:57:16,539 INFO L290 TraceCheckUtils]: 15: Hoare triple {32424#false} assume !false; {32424#false} is VALID [2022-04-28 03:57:16,540 INFO L290 TraceCheckUtils]: 14: Hoare triple {32485#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {32424#false} is VALID [2022-04-28 03:57:16,540 INFO L290 TraceCheckUtils]: 13: Hoare triple {32489#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {32485#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:57:16,540 INFO L272 TraceCheckUtils]: 12: Hoare triple {32493#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {32489#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:57:16,541 INFO L290 TraceCheckUtils]: 11: Hoare triple {32497#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [281] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {32493#(= main_~x~0 1000000)} is VALID [2022-04-28 03:57:16,542 INFO L290 TraceCheckUtils]: 10: Hoare triple {32497#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [286] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1349 v_main_~y~0_1348)) (.cse1 (= |v_main_#t~post5_233| |v_main_#t~post5_232|)) (.cse2 (= v_main_~x~0_1747 v_main_~x~0_1746)) (.cse3 (= |v_main_#t~post6_496| |v_main_#t~post6_492|)) (.cse4 (<= 500000 v_main_~x~0_1747))) (or (and .cse0 .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_1747 750000)) (not .cse4))) (and .cse0 .cse1 .cse2 .cse3) (and .cse4 (< v_main_~x~0_1746 750001) (= (+ v_main_~x~0_1747 v_main_~y~0_1348) (+ v_main_~x~0_1746 v_main_~y~0_1349)) (< v_main_~x~0_1747 v_main_~x~0_1746)))) InVars {main_~y~0=v_main_~y~0_1349, main_#t~post5=|v_main_#t~post5_233|, main_~x~0=v_main_~x~0_1747, main_#t~post6=|v_main_#t~post6_496|} OutVars{main_~y~0=v_main_~y~0_1348, main_#t~post5=|v_main_#t~post5_232|, main_~x~0=v_main_~x~0_1746, main_#t~post6=|v_main_#t~post6_492|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {32497#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:57:16,542 INFO L290 TraceCheckUtils]: 9: Hoare triple {32497#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [285] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {32497#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:57:16,543 INFO L290 TraceCheckUtils]: 8: Hoare triple {32507#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [284] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1745)) (.cse1 (= v_main_~x~0_1745 v_main_~x~0_1744)) (.cse2 (= v_main_~y~0_1347 v_main_~y~0_1346)) (.cse3 (= |v_main_#t~post6_493| |v_main_#t~post6_491|))) (or (and (< v_main_~y~0_1347 v_main_~y~0_1346) (< v_main_~y~0_1346 (+ (div (+ 999999 (* (- 1) v_main_~x~0_1745)) 2) 2 v_main_~y~0_1347)) .cse0 (= (+ v_main_~x~0_1745 (* 2 v_main_~y~0_1346)) (+ v_main_~x~0_1744 (* 2 v_main_~y~0_1347)))) (and .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_1745 1000000)) (not .cse0))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1347, main_~x~0=v_main_~x~0_1745, main_#t~post6=|v_main_#t~post6_493|} OutVars{main_~y~0=v_main_~y~0_1346, main_~x~0=v_main_~x~0_1744, main_#t~post6=|v_main_#t~post6_491|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {32497#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:57:16,543 INFO L290 TraceCheckUtils]: 7: Hoare triple {32507#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [283] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {32507#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:57:16,545 INFO L290 TraceCheckUtils]: 6: Hoare triple {32507#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [282] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_275| |v_main_#t~post4_274|)) (.cse1 (= v_main_~x~0_1743 v_main_~x~0_1742))) (or (and .cse0 .cse1) (and (not (< v_main_~x~0_1743 500000)) .cse0 .cse1) (and (< v_main_~x~0_1742 500001) (< v_main_~x~0_1743 v_main_~x~0_1742)))) InVars {main_~x~0=v_main_~x~0_1743, main_#t~post4=|v_main_#t~post4_275|} OutVars{main_~x~0=v_main_~x~0_1742, main_#t~post4=|v_main_#t~post4_274|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {32507#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:57:16,545 INFO L290 TraceCheckUtils]: 5: Hoare triple {32423#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {32507#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:57:16,545 INFO L272 TraceCheckUtils]: 4: Hoare triple {32423#true} call #t~ret7 := main(); {32423#true} is VALID [2022-04-28 03:57:16,545 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {32423#true} {32423#true} #48#return; {32423#true} is VALID [2022-04-28 03:57:16,545 INFO L290 TraceCheckUtils]: 2: Hoare triple {32423#true} assume true; {32423#true} is VALID [2022-04-28 03:57:16,545 INFO L290 TraceCheckUtils]: 1: Hoare triple {32423#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {32423#true} is VALID [2022-04-28 03:57:16,545 INFO L272 TraceCheckUtils]: 0: Hoare triple {32423#true} call ULTIMATE.init(); {32423#true} is VALID [2022-04-28 03:57:16,545 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:57:16,545 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [898615324] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:57:16,546 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:57:16,546 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:57:18,136 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:57:18,136 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [2004244994] [2022-04-28 03:57:18,136 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [2004244994] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:57:18,136 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:57:18,136 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [45] imperfect sequences [] total 45 [2022-04-28 03:57:18,136 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [801156079] [2022-04-28 03:57:18,136 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:57:18,137 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 45 states have (on average 3.7555555555555555) internal successors, (169), 44 states have internal predecessors, (169), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 173 [2022-04-28 03:57:18,137 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:57:18,137 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 45 states, 45 states have (on average 3.7555555555555555) internal successors, (169), 44 states have internal predecessors, (169), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:18,266 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 173 edges. 173 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:57:18,266 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-04-28 03:57:18,266 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:57:18,266 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-04-28 03:57:18,267 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=295, Invalid=2567, Unknown=0, NotChecked=0, Total=2862 [2022-04-28 03:57:18,267 INFO L87 Difference]: Start difference. First operand 176 states and 180 transitions. Second operand has 45 states, 45 states have (on average 3.7555555555555555) internal successors, (169), 44 states have internal predecessors, (169), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:31,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:57:31,122 INFO L93 Difference]: Finished difference Result 203 states and 212 transitions. [2022-04-28 03:57:31,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2022-04-28 03:57:31,122 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 45 states have (on average 3.7555555555555555) internal successors, (169), 44 states have internal predecessors, (169), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 173 [2022-04-28 03:57:31,122 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:57:31,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 45 states have (on average 3.7555555555555555) internal successors, (169), 44 states have internal predecessors, (169), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:31,124 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 192 transitions. [2022-04-28 03:57:31,124 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 45 states have (on average 3.7555555555555555) internal successors, (169), 44 states have internal predecessors, (169), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:31,125 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 192 transitions. [2022-04-28 03:57:31,125 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 45 states and 192 transitions. [2022-04-28 03:57:31,281 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 192 edges. 192 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:57:31,283 INFO L225 Difference]: With dead ends: 203 [2022-04-28 03:57:31,283 INFO L226 Difference]: Without dead ends: 185 [2022-04-28 03:57:31,284 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 248 GetRequests, 153 SyntacticMatches, 1 SemanticMatches, 94 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1464 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=640, Invalid=8480, Unknown=0, NotChecked=0, Total=9120 [2022-04-28 03:57:31,284 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 131 mSDsluCounter, 207 mSDsCounter, 0 mSdLazyCounter, 6892 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 258 SdHoareTripleChecker+Invalid, 6937 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 6892 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.9s IncrementalHoareTripleChecker+Time [2022-04-28 03:57:31,284 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [131 Valid, 258 Invalid, 6937 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 6892 Invalid, 0 Unknown, 0 Unchecked, 4.9s Time] [2022-04-28 03:57:31,284 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2022-04-28 03:57:34,190 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 180. [2022-04-28 03:57:34,190 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:57:34,190 INFO L82 GeneralOperation]: Start isEquivalent. First operand 185 states. Second operand has 180 states, 175 states have (on average 1.0285714285714285) internal successors, (180), 175 states have internal predecessors, (180), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:34,190 INFO L74 IsIncluded]: Start isIncluded. First operand 185 states. Second operand has 180 states, 175 states have (on average 1.0285714285714285) internal successors, (180), 175 states have internal predecessors, (180), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:34,191 INFO L87 Difference]: Start difference. First operand 185 states. Second operand has 180 states, 175 states have (on average 1.0285714285714285) internal successors, (180), 175 states have internal predecessors, (180), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:34,192 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:57:34,192 INFO L93 Difference]: Finished difference Result 185 states and 189 transitions. [2022-04-28 03:57:34,192 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 189 transitions. [2022-04-28 03:57:34,192 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:57:34,192 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:57:34,192 INFO L74 IsIncluded]: Start isIncluded. First operand has 180 states, 175 states have (on average 1.0285714285714285) internal successors, (180), 175 states have internal predecessors, (180), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 185 states. [2022-04-28 03:57:34,193 INFO L87 Difference]: Start difference. First operand has 180 states, 175 states have (on average 1.0285714285714285) internal successors, (180), 175 states have internal predecessors, (180), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 185 states. [2022-04-28 03:57:34,194 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:57:34,194 INFO L93 Difference]: Finished difference Result 185 states and 189 transitions. [2022-04-28 03:57:34,194 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 189 transitions. [2022-04-28 03:57:34,194 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:57:34,194 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:57:34,194 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:57:34,194 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:57:34,194 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 180 states, 175 states have (on average 1.0285714285714285) internal successors, (180), 175 states have internal predecessors, (180), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:34,196 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 180 states to 180 states and 184 transitions. [2022-04-28 03:57:34,196 INFO L78 Accepts]: Start accepts. Automaton has 180 states and 184 transitions. Word has length 173 [2022-04-28 03:57:34,196 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:57:34,196 INFO L495 AbstractCegarLoop]: Abstraction has 180 states and 184 transitions. [2022-04-28 03:57:34,197 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 45 states have (on average 3.7555555555555555) internal successors, (169), 44 states have internal predecessors, (169), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:34,197 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 180 states and 184 transitions. [2022-04-28 03:57:34,647 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 184 edges. 184 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:57:34,647 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 184 transitions. [2022-04-28 03:57:34,647 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 178 [2022-04-28 03:57:34,647 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:57:34,647 INFO L195 NwaCegarLoop]: trace histogram [42, 41, 41, 40, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:57:34,663 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Ended with exit code 0 [2022-04-28 03:57:34,848 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable40,40 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:57:34,848 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:57:34,848 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:57:34,848 INFO L85 PathProgramCache]: Analyzing trace with hash -311650760, now seen corresponding path program 39 times [2022-04-28 03:57:34,848 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:57:34,848 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1473890013] [2022-04-28 03:57:34,961 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:57:35,212 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:57:35,446 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:57:35,447 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:57:35,450 INFO L85 PathProgramCache]: Analyzing trace with hash 1550482023, now seen corresponding path program 1 times [2022-04-28 03:57:35,450 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:57:35,450 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1825948455] [2022-04-28 03:57:35,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:57:35,450 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:57:35,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:57:35,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:57:35,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:57:35,493 INFO L290 TraceCheckUtils]: 0: Hoare triple {33803#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {33795#true} is VALID [2022-04-28 03:57:35,493 INFO L290 TraceCheckUtils]: 1: Hoare triple {33795#true} assume true; {33795#true} is VALID [2022-04-28 03:57:35,493 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33795#true} {33795#true} #48#return; {33795#true} is VALID [2022-04-28 03:57:35,494 INFO L272 TraceCheckUtils]: 0: Hoare triple {33795#true} call ULTIMATE.init(); {33803#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:57:35,494 INFO L290 TraceCheckUtils]: 1: Hoare triple {33803#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {33795#true} is VALID [2022-04-28 03:57:35,494 INFO L290 TraceCheckUtils]: 2: Hoare triple {33795#true} assume true; {33795#true} is VALID [2022-04-28 03:57:35,494 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {33795#true} {33795#true} #48#return; {33795#true} is VALID [2022-04-28 03:57:35,494 INFO L272 TraceCheckUtils]: 4: Hoare triple {33795#true} call #t~ret7 := main(); {33795#true} is VALID [2022-04-28 03:57:35,494 INFO L290 TraceCheckUtils]: 5: Hoare triple {33795#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {33800#(= main_~x~0 0)} is VALID [2022-04-28 03:57:35,495 INFO L290 TraceCheckUtils]: 6: Hoare triple {33800#(= main_~x~0 0)} [288] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1808 v_main_~x~0_1807)) (.cse1 (= |v_main_#t~post4_282| |v_main_#t~post4_281|))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_1808)) (and (< v_main_~x~0_1808 v_main_~x~0_1807) (< v_main_~x~0_1807 500001)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_1808, main_#t~post4=|v_main_#t~post4_282|} OutVars{main_~x~0=v_main_~x~0_1807, main_#t~post4=|v_main_#t~post4_281|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {33801#(<= main_~x~0 500000)} is VALID [2022-04-28 03:57:35,495 INFO L290 TraceCheckUtils]: 7: Hoare triple {33801#(<= main_~x~0 500000)} [289] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {33801#(<= main_~x~0 500000)} is VALID [2022-04-28 03:57:35,496 INFO L290 TraceCheckUtils]: 8: Hoare triple {33801#(<= main_~x~0 500000)} [290] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1810)) (.cse1 (= v_main_~y~0_1402 v_main_~y~0_1401)) (.cse2 (= |v_main_#t~post6_506| |v_main_#t~post6_504|))) (or (and .cse0 (< v_main_~y~0_1402 v_main_~y~0_1401) (< v_main_~y~0_1401 (+ 2 (div (+ (* (- 1) v_main_~x~0_1810) 999999) 2) v_main_~y~0_1402)) (= (+ v_main_~x~0_1810 (* 2 v_main_~y~0_1401)) (+ v_main_~x~0_1809 (* 2 v_main_~y~0_1402)))) (and .cse1 (or (not .cse0) (not (< v_main_~x~0_1810 1000000))) .cse2 (= v_main_~x~0_1809 v_main_~x~0_1810)) (and .cse1 .cse2 (= v_main_~x~0_1810 v_main_~x~0_1809)))) InVars {main_~y~0=v_main_~y~0_1402, main_~x~0=v_main_~x~0_1810, main_#t~post6=|v_main_#t~post6_506|} OutVars{main_~y~0=v_main_~y~0_1401, main_~x~0=v_main_~x~0_1809, main_#t~post6=|v_main_#t~post6_504|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {33801#(<= main_~x~0 500000)} is VALID [2022-04-28 03:57:35,497 INFO L290 TraceCheckUtils]: 9: Hoare triple {33801#(<= main_~x~0 500000)} [291] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {33801#(<= main_~x~0 500000)} is VALID [2022-04-28 03:57:35,498 INFO L290 TraceCheckUtils]: 10: Hoare triple {33801#(<= main_~x~0 500000)} [292] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_509| |v_main_#t~post6_505|)) (.cse1 (= v_main_~y~0_1404 v_main_~y~0_1403)) (.cse2 (= |v_main_#t~post5_239| |v_main_#t~post5_238|)) (.cse3 (= v_main_~x~0_1812 v_main_~x~0_1811)) (.cse4 (<= 500000 v_main_~x~0_1812))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 (or (not (< v_main_~x~0_1812 750000)) (not .cse4)) .cse1 .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_1812 v_main_~y~0_1403))) (and .cse4 (= .cse5 (+ v_main_~x~0_1811 v_main_~y~0_1404)) (< v_main_~y~0_1404 v_main_~y~0_1403) (< .cse5 (+ 750001 v_main_~y~0_1404)))))) InVars {main_~y~0=v_main_~y~0_1404, main_#t~post5=|v_main_#t~post5_239|, main_~x~0=v_main_~x~0_1812, main_#t~post6=|v_main_#t~post6_509|} OutVars{main_~y~0=v_main_~y~0_1403, main_#t~post5=|v_main_#t~post5_238|, main_~x~0=v_main_~x~0_1811, main_#t~post6=|v_main_#t~post6_505|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {33802#(<= main_~x~0 750000)} is VALID [2022-04-28 03:57:35,498 INFO L290 TraceCheckUtils]: 11: Hoare triple {33802#(<= main_~x~0 750000)} [287] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {33796#false} is VALID [2022-04-28 03:57:35,498 INFO L272 TraceCheckUtils]: 12: Hoare triple {33796#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {33796#false} is VALID [2022-04-28 03:57:35,498 INFO L290 TraceCheckUtils]: 13: Hoare triple {33796#false} ~cond := #in~cond; {33796#false} is VALID [2022-04-28 03:57:35,498 INFO L290 TraceCheckUtils]: 14: Hoare triple {33796#false} assume 0 == ~cond; {33796#false} is VALID [2022-04-28 03:57:35,498 INFO L290 TraceCheckUtils]: 15: Hoare triple {33796#false} assume !false; {33796#false} is VALID [2022-04-28 03:57:35,498 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:57:35,499 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:57:35,499 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1825948455] [2022-04-28 03:57:35,499 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1825948455] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:57:35,499 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1042469919] [2022-04-28 03:57:35,499 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:57:35,499 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:57:35,499 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:57:35,504 INFO L229 MonitoredProcess]: Starting monitored process 41 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:57:35,529 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-04-28 03:57:35,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:57:35,542 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:57:35,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:57:35,554 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:57:35,797 INFO L272 TraceCheckUtils]: 0: Hoare triple {33795#true} call ULTIMATE.init(); {33795#true} is VALID [2022-04-28 03:57:35,797 INFO L290 TraceCheckUtils]: 1: Hoare triple {33795#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {33795#true} is VALID [2022-04-28 03:57:35,797 INFO L290 TraceCheckUtils]: 2: Hoare triple {33795#true} assume true; {33795#true} is VALID [2022-04-28 03:57:35,797 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {33795#true} {33795#true} #48#return; {33795#true} is VALID [2022-04-28 03:57:35,797 INFO L272 TraceCheckUtils]: 4: Hoare triple {33795#true} call #t~ret7 := main(); {33795#true} is VALID [2022-04-28 03:57:35,798 INFO L290 TraceCheckUtils]: 5: Hoare triple {33795#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {33822#(<= main_~x~0 0)} is VALID [2022-04-28 03:57:35,798 INFO L290 TraceCheckUtils]: 6: Hoare triple {33822#(<= main_~x~0 0)} [288] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1808 v_main_~x~0_1807)) (.cse1 (= |v_main_#t~post4_282| |v_main_#t~post4_281|))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_1808)) (and (< v_main_~x~0_1808 v_main_~x~0_1807) (< v_main_~x~0_1807 500001)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_1808, main_#t~post4=|v_main_#t~post4_282|} OutVars{main_~x~0=v_main_~x~0_1807, main_#t~post4=|v_main_#t~post4_281|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {33801#(<= main_~x~0 500000)} is VALID [2022-04-28 03:57:35,799 INFO L290 TraceCheckUtils]: 7: Hoare triple {33801#(<= main_~x~0 500000)} [289] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {33801#(<= main_~x~0 500000)} is VALID [2022-04-28 03:57:35,799 INFO L290 TraceCheckUtils]: 8: Hoare triple {33801#(<= main_~x~0 500000)} [290] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1810)) (.cse1 (= v_main_~y~0_1402 v_main_~y~0_1401)) (.cse2 (= |v_main_#t~post6_506| |v_main_#t~post6_504|))) (or (and .cse0 (< v_main_~y~0_1402 v_main_~y~0_1401) (< v_main_~y~0_1401 (+ 2 (div (+ (* (- 1) v_main_~x~0_1810) 999999) 2) v_main_~y~0_1402)) (= (+ v_main_~x~0_1810 (* 2 v_main_~y~0_1401)) (+ v_main_~x~0_1809 (* 2 v_main_~y~0_1402)))) (and .cse1 (or (not .cse0) (not (< v_main_~x~0_1810 1000000))) .cse2 (= v_main_~x~0_1809 v_main_~x~0_1810)) (and .cse1 .cse2 (= v_main_~x~0_1810 v_main_~x~0_1809)))) InVars {main_~y~0=v_main_~y~0_1402, main_~x~0=v_main_~x~0_1810, main_#t~post6=|v_main_#t~post6_506|} OutVars{main_~y~0=v_main_~y~0_1401, main_~x~0=v_main_~x~0_1809, main_#t~post6=|v_main_#t~post6_504|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {33801#(<= main_~x~0 500000)} is VALID [2022-04-28 03:57:35,800 INFO L290 TraceCheckUtils]: 9: Hoare triple {33801#(<= main_~x~0 500000)} [291] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {33801#(<= main_~x~0 500000)} is VALID [2022-04-28 03:57:35,800 INFO L290 TraceCheckUtils]: 10: Hoare triple {33801#(<= main_~x~0 500000)} [292] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_509| |v_main_#t~post6_505|)) (.cse1 (= v_main_~y~0_1404 v_main_~y~0_1403)) (.cse2 (= |v_main_#t~post5_239| |v_main_#t~post5_238|)) (.cse3 (= v_main_~x~0_1812 v_main_~x~0_1811)) (.cse4 (<= 500000 v_main_~x~0_1812))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 (or (not (< v_main_~x~0_1812 750000)) (not .cse4)) .cse1 .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_1812 v_main_~y~0_1403))) (and .cse4 (= .cse5 (+ v_main_~x~0_1811 v_main_~y~0_1404)) (< v_main_~y~0_1404 v_main_~y~0_1403) (< .cse5 (+ 750001 v_main_~y~0_1404)))))) InVars {main_~y~0=v_main_~y~0_1404, main_#t~post5=|v_main_#t~post5_239|, main_~x~0=v_main_~x~0_1812, main_#t~post6=|v_main_#t~post6_509|} OutVars{main_~y~0=v_main_~y~0_1403, main_#t~post5=|v_main_#t~post5_238|, main_~x~0=v_main_~x~0_1811, main_#t~post6=|v_main_#t~post6_505|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {33802#(<= main_~x~0 750000)} is VALID [2022-04-28 03:57:35,801 INFO L290 TraceCheckUtils]: 11: Hoare triple {33802#(<= main_~x~0 750000)} [287] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {33796#false} is VALID [2022-04-28 03:57:35,801 INFO L272 TraceCheckUtils]: 12: Hoare triple {33796#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {33796#false} is VALID [2022-04-28 03:57:35,801 INFO L290 TraceCheckUtils]: 13: Hoare triple {33796#false} ~cond := #in~cond; {33796#false} is VALID [2022-04-28 03:57:35,801 INFO L290 TraceCheckUtils]: 14: Hoare triple {33796#false} assume 0 == ~cond; {33796#false} is VALID [2022-04-28 03:57:35,801 INFO L290 TraceCheckUtils]: 15: Hoare triple {33796#false} assume !false; {33796#false} is VALID [2022-04-28 03:57:35,801 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:57:35,801 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:57:36,299 INFO L290 TraceCheckUtils]: 15: Hoare triple {33796#false} assume !false; {33796#false} is VALID [2022-04-28 03:57:36,299 INFO L290 TraceCheckUtils]: 14: Hoare triple {33856#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {33796#false} is VALID [2022-04-28 03:57:36,300 INFO L290 TraceCheckUtils]: 13: Hoare triple {33860#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {33856#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:57:36,300 INFO L272 TraceCheckUtils]: 12: Hoare triple {33864#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {33860#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:57:36,303 INFO L290 TraceCheckUtils]: 11: Hoare triple {33868#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [287] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {33864#(= main_~x~0 1000000)} is VALID [2022-04-28 03:57:36,304 INFO L290 TraceCheckUtils]: 10: Hoare triple {33868#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [292] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post6_509| |v_main_#t~post6_505|)) (.cse1 (= v_main_~y~0_1404 v_main_~y~0_1403)) (.cse2 (= |v_main_#t~post5_239| |v_main_#t~post5_238|)) (.cse3 (= v_main_~x~0_1812 v_main_~x~0_1811)) (.cse4 (<= 500000 v_main_~x~0_1812))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 (or (not (< v_main_~x~0_1812 750000)) (not .cse4)) .cse1 .cse2 .cse3) (let ((.cse5 (+ v_main_~x~0_1812 v_main_~y~0_1403))) (and .cse4 (= .cse5 (+ v_main_~x~0_1811 v_main_~y~0_1404)) (< v_main_~y~0_1404 v_main_~y~0_1403) (< .cse5 (+ 750001 v_main_~y~0_1404)))))) InVars {main_~y~0=v_main_~y~0_1404, main_#t~post5=|v_main_#t~post5_239|, main_~x~0=v_main_~x~0_1812, main_#t~post6=|v_main_#t~post6_509|} OutVars{main_~y~0=v_main_~y~0_1403, main_#t~post5=|v_main_#t~post5_238|, main_~x~0=v_main_~x~0_1811, main_#t~post6=|v_main_#t~post6_505|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {33868#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:57:36,305 INFO L290 TraceCheckUtils]: 9: Hoare triple {33868#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [291] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {33868#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:57:36,306 INFO L290 TraceCheckUtils]: 8: Hoare triple {33878#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [290] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1810)) (.cse1 (= v_main_~y~0_1402 v_main_~y~0_1401)) (.cse2 (= |v_main_#t~post6_506| |v_main_#t~post6_504|))) (or (and .cse0 (< v_main_~y~0_1402 v_main_~y~0_1401) (< v_main_~y~0_1401 (+ 2 (div (+ (* (- 1) v_main_~x~0_1810) 999999) 2) v_main_~y~0_1402)) (= (+ v_main_~x~0_1810 (* 2 v_main_~y~0_1401)) (+ v_main_~x~0_1809 (* 2 v_main_~y~0_1402)))) (and .cse1 (or (not .cse0) (not (< v_main_~x~0_1810 1000000))) .cse2 (= v_main_~x~0_1809 v_main_~x~0_1810)) (and .cse1 .cse2 (= v_main_~x~0_1810 v_main_~x~0_1809)))) InVars {main_~y~0=v_main_~y~0_1402, main_~x~0=v_main_~x~0_1810, main_#t~post6=|v_main_#t~post6_506|} OutVars{main_~y~0=v_main_~y~0_1401, main_~x~0=v_main_~x~0_1809, main_#t~post6=|v_main_#t~post6_504|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {33868#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:57:36,307 INFO L290 TraceCheckUtils]: 7: Hoare triple {33878#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [289] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {33878#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:57:36,308 INFO L290 TraceCheckUtils]: 6: Hoare triple {33878#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [288] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1808 v_main_~x~0_1807)) (.cse1 (= |v_main_#t~post4_282| |v_main_#t~post4_281|))) (or (and .cse0 .cse1 (<= 500000 v_main_~x~0_1808)) (and (< v_main_~x~0_1808 v_main_~x~0_1807) (< v_main_~x~0_1807 500001)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_1808, main_#t~post4=|v_main_#t~post4_282|} OutVars{main_~x~0=v_main_~x~0_1807, main_#t~post4=|v_main_#t~post4_281|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {33878#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:57:36,308 INFO L290 TraceCheckUtils]: 5: Hoare triple {33795#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {33878#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:57:36,308 INFO L272 TraceCheckUtils]: 4: Hoare triple {33795#true} call #t~ret7 := main(); {33795#true} is VALID [2022-04-28 03:57:36,308 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {33795#true} {33795#true} #48#return; {33795#true} is VALID [2022-04-28 03:57:36,308 INFO L290 TraceCheckUtils]: 2: Hoare triple {33795#true} assume true; {33795#true} is VALID [2022-04-28 03:57:36,308 INFO L290 TraceCheckUtils]: 1: Hoare triple {33795#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {33795#true} is VALID [2022-04-28 03:57:36,308 INFO L272 TraceCheckUtils]: 0: Hoare triple {33795#true} call ULTIMATE.init(); {33795#true} is VALID [2022-04-28 03:57:36,309 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:57:36,309 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1042469919] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:57:36,309 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:57:36,309 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:57:37,978 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:57:37,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1473890013] [2022-04-28 03:57:37,978 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1473890013] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:57:37,978 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:57:37,978 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [46] imperfect sequences [] total 46 [2022-04-28 03:57:37,978 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [401056703] [2022-04-28 03:57:37,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:57:37,978 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 46 states have (on average 3.760869565217391) internal successors, (173), 45 states have internal predecessors, (173), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 177 [2022-04-28 03:57:37,979 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:57:37,979 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 46 states, 46 states have (on average 3.760869565217391) internal successors, (173), 45 states have internal predecessors, (173), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:38,099 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 177 edges. 177 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:57:38,100 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-04-28 03:57:38,100 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:57:38,100 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-04-28 03:57:38,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=260, Invalid=2710, Unknown=0, NotChecked=0, Total=2970 [2022-04-28 03:57:38,100 INFO L87 Difference]: Start difference. First operand 180 states and 184 transitions. Second operand has 46 states, 46 states have (on average 3.760869565217391) internal successors, (173), 45 states have internal predecessors, (173), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:52,053 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:57:52,053 INFO L93 Difference]: Finished difference Result 207 states and 216 transitions. [2022-04-28 03:57:52,053 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2022-04-28 03:57:52,053 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 46 states have (on average 3.760869565217391) internal successors, (173), 45 states have internal predecessors, (173), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 177 [2022-04-28 03:57:52,053 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:57:52,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 46 states have (on average 3.760869565217391) internal successors, (173), 45 states have internal predecessors, (173), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:52,054 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 196 transitions. [2022-04-28 03:57:52,054 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 46 states have (on average 3.760869565217391) internal successors, (173), 45 states have internal predecessors, (173), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:52,055 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 196 transitions. [2022-04-28 03:57:52,055 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 46 states and 196 transitions. [2022-04-28 03:57:52,207 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 196 edges. 196 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:57:52,209 INFO L225 Difference]: With dead ends: 207 [2022-04-28 03:57:52,209 INFO L226 Difference]: Without dead ends: 189 [2022-04-28 03:57:52,210 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 253 GetRequests, 154 SyntacticMatches, 3 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1595 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=570, Invalid=8936, Unknown=0, NotChecked=0, Total=9506 [2022-04-28 03:57:52,210 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 134 mSDsluCounter, 217 mSDsCounter, 0 mSdLazyCounter, 7397 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 269 SdHoareTripleChecker+Invalid, 7443 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 7397 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.4s IncrementalHoareTripleChecker+Time [2022-04-28 03:57:52,210 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 269 Invalid, 7443 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 7397 Invalid, 0 Unknown, 0 Unchecked, 5.4s Time] [2022-04-28 03:57:52,210 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 189 states. [2022-04-28 03:57:55,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 189 to 184. [2022-04-28 03:57:55,323 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:57:55,324 INFO L82 GeneralOperation]: Start isEquivalent. First operand 189 states. Second operand has 184 states, 179 states have (on average 1.0279329608938548) internal successors, (184), 179 states have internal predecessors, (184), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:55,324 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand has 184 states, 179 states have (on average 1.0279329608938548) internal successors, (184), 179 states have internal predecessors, (184), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:55,324 INFO L87 Difference]: Start difference. First operand 189 states. Second operand has 184 states, 179 states have (on average 1.0279329608938548) internal successors, (184), 179 states have internal predecessors, (184), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:55,325 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:57:55,325 INFO L93 Difference]: Finished difference Result 189 states and 193 transitions. [2022-04-28 03:57:55,325 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 193 transitions. [2022-04-28 03:57:55,326 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:57:55,326 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:57:55,326 INFO L74 IsIncluded]: Start isIncluded. First operand has 184 states, 179 states have (on average 1.0279329608938548) internal successors, (184), 179 states have internal predecessors, (184), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 189 states. [2022-04-28 03:57:55,326 INFO L87 Difference]: Start difference. First operand has 184 states, 179 states have (on average 1.0279329608938548) internal successors, (184), 179 states have internal predecessors, (184), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 189 states. [2022-04-28 03:57:55,327 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:57:55,327 INFO L93 Difference]: Finished difference Result 189 states and 193 transitions. [2022-04-28 03:57:55,328 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 193 transitions. [2022-04-28 03:57:55,328 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:57:55,328 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:57:55,328 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:57:55,328 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:57:55,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 179 states have (on average 1.0279329608938548) internal successors, (184), 179 states have internal predecessors, (184), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:55,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 188 transitions. [2022-04-28 03:57:55,330 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 188 transitions. Word has length 177 [2022-04-28 03:57:55,330 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:57:55,330 INFO L495 AbstractCegarLoop]: Abstraction has 184 states and 188 transitions. [2022-04-28 03:57:55,330 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 46 states have (on average 3.760869565217391) internal successors, (173), 45 states have internal predecessors, (173), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:57:55,330 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 184 states and 188 transitions. [2022-04-28 03:57:55,834 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 188 edges. 188 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:57:55,834 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 188 transitions. [2022-04-28 03:57:55,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 182 [2022-04-28 03:57:55,835 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:57:55,835 INFO L195 NwaCegarLoop]: trace histogram [43, 42, 42, 41, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:57:55,851 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Forceful destruction successful, exit code 0 [2022-04-28 03:57:56,035 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 41 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable41 [2022-04-28 03:57:56,035 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:57:56,035 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:57:56,036 INFO L85 PathProgramCache]: Analyzing trace with hash 1232769423, now seen corresponding path program 40 times [2022-04-28 03:57:56,036 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:57:56,036 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1574514321] [2022-04-28 03:58:00,113 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:58:00,171 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:58:04,312 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:58:04,443 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:58:04,696 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:58:04,697 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:58:04,700 INFO L85 PathProgramCache]: Analyzing trace with hash 1190907047, now seen corresponding path program 1 times [2022-04-28 03:58:04,700 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:58:04,700 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1796482911] [2022-04-28 03:58:04,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:58:04,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:58:04,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:58:04,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:58:04,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:58:04,753 INFO L290 TraceCheckUtils]: 0: Hoare triple {35202#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {35194#true} is VALID [2022-04-28 03:58:04,753 INFO L290 TraceCheckUtils]: 1: Hoare triple {35194#true} assume true; {35194#true} is VALID [2022-04-28 03:58:04,753 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {35194#true} {35194#true} #48#return; {35194#true} is VALID [2022-04-28 03:58:04,754 INFO L272 TraceCheckUtils]: 0: Hoare triple {35194#true} call ULTIMATE.init(); {35202#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:58:04,754 INFO L290 TraceCheckUtils]: 1: Hoare triple {35202#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {35194#true} is VALID [2022-04-28 03:58:04,754 INFO L290 TraceCheckUtils]: 2: Hoare triple {35194#true} assume true; {35194#true} is VALID [2022-04-28 03:58:04,754 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {35194#true} {35194#true} #48#return; {35194#true} is VALID [2022-04-28 03:58:04,754 INFO L272 TraceCheckUtils]: 4: Hoare triple {35194#true} call #t~ret7 := main(); {35194#true} is VALID [2022-04-28 03:58:04,754 INFO L290 TraceCheckUtils]: 5: Hoare triple {35194#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {35199#(= main_~x~0 0)} is VALID [2022-04-28 03:58:04,755 INFO L290 TraceCheckUtils]: 6: Hoare triple {35199#(= main_~x~0 0)} [294] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_289| |v_main_#t~post4_288|)) (.cse1 (= v_main_~x~0_1874 v_main_~x~0_1873))) (or (and .cse0 .cse1) (and .cse0 .cse1 (not (< v_main_~x~0_1874 500000))) (and (< v_main_~x~0_1873 500001) (< v_main_~x~0_1874 v_main_~x~0_1873)))) InVars {main_~x~0=v_main_~x~0_1874, main_#t~post4=|v_main_#t~post4_289|} OutVars{main_~x~0=v_main_~x~0_1873, main_#t~post4=|v_main_#t~post4_288|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {35200#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:04,756 INFO L290 TraceCheckUtils]: 7: Hoare triple {35200#(<= main_~x~0 500000)} [295] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {35200#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:04,757 INFO L290 TraceCheckUtils]: 8: Hoare triple {35200#(<= main_~x~0 500000)} [296] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1458 v_main_~y~0_1457)) (.cse1 (= v_main_~x~0_1876 v_main_~x~0_1875)) (.cse2 (= |v_main_#t~post6_519| |v_main_#t~post6_517|)) (.cse3 (<= 750000 v_main_~x~0_1876))) (or (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_1876 1000000)) (not .cse3))) (and .cse0 .cse1 .cse2) (and (< v_main_~y~0_1458 v_main_~y~0_1457) (< v_main_~y~0_1457 (+ (div (+ (* (- 1) v_main_~x~0_1876) 999999) 2) 2 v_main_~y~0_1458)) .cse3 (= (+ v_main_~x~0_1876 (* 2 v_main_~y~0_1457)) (+ v_main_~x~0_1875 (* 2 v_main_~y~0_1458)))))) InVars {main_~y~0=v_main_~y~0_1458, main_~x~0=v_main_~x~0_1876, main_#t~post6=|v_main_#t~post6_519|} OutVars{main_~y~0=v_main_~y~0_1457, main_~x~0=v_main_~x~0_1875, main_#t~post6=|v_main_#t~post6_517|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {35200#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:04,757 INFO L290 TraceCheckUtils]: 9: Hoare triple {35200#(<= main_~x~0 500000)} [297] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {35200#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:04,758 INFO L290 TraceCheckUtils]: 10: Hoare triple {35200#(<= main_~x~0 500000)} [298] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1878)) (.cse1 (= |v_main_#t~post5_245| |v_main_#t~post5_244|)) (.cse2 (= v_main_~x~0_1878 v_main_~x~0_1877)) (.cse3 (= v_main_~y~0_1460 v_main_~y~0_1459))) (or (and (< v_main_~x~0_1877 750001) (< v_main_~x~0_1878 v_main_~x~0_1877) .cse0 (= (+ v_main_~x~0_1878 v_main_~y~0_1459) (+ v_main_~x~0_1877 v_main_~y~0_1460))) (and .cse1 .cse2 .cse3 (= |v_main_#t~post6_522| |v_main_#t~post6_518|)) (and (or (not .cse0) (not (< v_main_~x~0_1878 750000))) .cse1 (= |v_main_#t~post6_518| |v_main_#t~post6_522|) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1460, main_#t~post5=|v_main_#t~post5_245|, main_~x~0=v_main_~x~0_1878, main_#t~post6=|v_main_#t~post6_522|} OutVars{main_~y~0=v_main_~y~0_1459, main_#t~post5=|v_main_#t~post5_244|, main_~x~0=v_main_~x~0_1877, main_#t~post6=|v_main_#t~post6_518|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {35201#(<= main_~x~0 750000)} is VALID [2022-04-28 03:58:04,758 INFO L290 TraceCheckUtils]: 11: Hoare triple {35201#(<= main_~x~0 750000)} [293] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {35195#false} is VALID [2022-04-28 03:58:04,758 INFO L272 TraceCheckUtils]: 12: Hoare triple {35195#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {35195#false} is VALID [2022-04-28 03:58:04,759 INFO L290 TraceCheckUtils]: 13: Hoare triple {35195#false} ~cond := #in~cond; {35195#false} is VALID [2022-04-28 03:58:04,759 INFO L290 TraceCheckUtils]: 14: Hoare triple {35195#false} assume 0 == ~cond; {35195#false} is VALID [2022-04-28 03:58:04,759 INFO L290 TraceCheckUtils]: 15: Hoare triple {35195#false} assume !false; {35195#false} is VALID [2022-04-28 03:58:04,759 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:58:04,759 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:58:04,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1796482911] [2022-04-28 03:58:04,759 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1796482911] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:58:04,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [952164101] [2022-04-28 03:58:04,759 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:58:04,759 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:58:04,760 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:58:04,764 INFO L229 MonitoredProcess]: Starting monitored process 42 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:58:04,768 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Waiting until timeout for monitored process [2022-04-28 03:58:04,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:58:04,797 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:58:04,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:58:04,806 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:58:04,996 INFO L272 TraceCheckUtils]: 0: Hoare triple {35194#true} call ULTIMATE.init(); {35194#true} is VALID [2022-04-28 03:58:04,996 INFO L290 TraceCheckUtils]: 1: Hoare triple {35194#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {35194#true} is VALID [2022-04-28 03:58:04,996 INFO L290 TraceCheckUtils]: 2: Hoare triple {35194#true} assume true; {35194#true} is VALID [2022-04-28 03:58:04,996 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {35194#true} {35194#true} #48#return; {35194#true} is VALID [2022-04-28 03:58:04,996 INFO L272 TraceCheckUtils]: 4: Hoare triple {35194#true} call #t~ret7 := main(); {35194#true} is VALID [2022-04-28 03:58:04,996 INFO L290 TraceCheckUtils]: 5: Hoare triple {35194#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {35221#(<= main_~x~0 0)} is VALID [2022-04-28 03:58:04,997 INFO L290 TraceCheckUtils]: 6: Hoare triple {35221#(<= main_~x~0 0)} [294] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_289| |v_main_#t~post4_288|)) (.cse1 (= v_main_~x~0_1874 v_main_~x~0_1873))) (or (and .cse0 .cse1) (and .cse0 .cse1 (not (< v_main_~x~0_1874 500000))) (and (< v_main_~x~0_1873 500001) (< v_main_~x~0_1874 v_main_~x~0_1873)))) InVars {main_~x~0=v_main_~x~0_1874, main_#t~post4=|v_main_#t~post4_289|} OutVars{main_~x~0=v_main_~x~0_1873, main_#t~post4=|v_main_#t~post4_288|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {35200#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:04,997 INFO L290 TraceCheckUtils]: 7: Hoare triple {35200#(<= main_~x~0 500000)} [295] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {35200#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:04,998 INFO L290 TraceCheckUtils]: 8: Hoare triple {35200#(<= main_~x~0 500000)} [296] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1458 v_main_~y~0_1457)) (.cse1 (= v_main_~x~0_1876 v_main_~x~0_1875)) (.cse2 (= |v_main_#t~post6_519| |v_main_#t~post6_517|)) (.cse3 (<= 750000 v_main_~x~0_1876))) (or (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_1876 1000000)) (not .cse3))) (and .cse0 .cse1 .cse2) (and (< v_main_~y~0_1458 v_main_~y~0_1457) (< v_main_~y~0_1457 (+ (div (+ (* (- 1) v_main_~x~0_1876) 999999) 2) 2 v_main_~y~0_1458)) .cse3 (= (+ v_main_~x~0_1876 (* 2 v_main_~y~0_1457)) (+ v_main_~x~0_1875 (* 2 v_main_~y~0_1458)))))) InVars {main_~y~0=v_main_~y~0_1458, main_~x~0=v_main_~x~0_1876, main_#t~post6=|v_main_#t~post6_519|} OutVars{main_~y~0=v_main_~y~0_1457, main_~x~0=v_main_~x~0_1875, main_#t~post6=|v_main_#t~post6_517|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {35200#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:04,998 INFO L290 TraceCheckUtils]: 9: Hoare triple {35200#(<= main_~x~0 500000)} [297] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {35200#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:04,999 INFO L290 TraceCheckUtils]: 10: Hoare triple {35200#(<= main_~x~0 500000)} [298] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1878)) (.cse1 (= |v_main_#t~post5_245| |v_main_#t~post5_244|)) (.cse2 (= v_main_~x~0_1878 v_main_~x~0_1877)) (.cse3 (= v_main_~y~0_1460 v_main_~y~0_1459))) (or (and (< v_main_~x~0_1877 750001) (< v_main_~x~0_1878 v_main_~x~0_1877) .cse0 (= (+ v_main_~x~0_1878 v_main_~y~0_1459) (+ v_main_~x~0_1877 v_main_~y~0_1460))) (and .cse1 .cse2 .cse3 (= |v_main_#t~post6_522| |v_main_#t~post6_518|)) (and (or (not .cse0) (not (< v_main_~x~0_1878 750000))) .cse1 (= |v_main_#t~post6_518| |v_main_#t~post6_522|) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1460, main_#t~post5=|v_main_#t~post5_245|, main_~x~0=v_main_~x~0_1878, main_#t~post6=|v_main_#t~post6_522|} OutVars{main_~y~0=v_main_~y~0_1459, main_#t~post5=|v_main_#t~post5_244|, main_~x~0=v_main_~x~0_1877, main_#t~post6=|v_main_#t~post6_518|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {35201#(<= main_~x~0 750000)} is VALID [2022-04-28 03:58:04,999 INFO L290 TraceCheckUtils]: 11: Hoare triple {35201#(<= main_~x~0 750000)} [293] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {35195#false} is VALID [2022-04-28 03:58:05,000 INFO L272 TraceCheckUtils]: 12: Hoare triple {35195#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {35195#false} is VALID [2022-04-28 03:58:05,000 INFO L290 TraceCheckUtils]: 13: Hoare triple {35195#false} ~cond := #in~cond; {35195#false} is VALID [2022-04-28 03:58:05,000 INFO L290 TraceCheckUtils]: 14: Hoare triple {35195#false} assume 0 == ~cond; {35195#false} is VALID [2022-04-28 03:58:05,000 INFO L290 TraceCheckUtils]: 15: Hoare triple {35195#false} assume !false; {35195#false} is VALID [2022-04-28 03:58:05,000 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:58:05,000 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:58:05,413 INFO L290 TraceCheckUtils]: 15: Hoare triple {35195#false} assume !false; {35195#false} is VALID [2022-04-28 03:58:05,414 INFO L290 TraceCheckUtils]: 14: Hoare triple {35255#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {35195#false} is VALID [2022-04-28 03:58:05,414 INFO L290 TraceCheckUtils]: 13: Hoare triple {35259#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {35255#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:58:05,415 INFO L272 TraceCheckUtils]: 12: Hoare triple {35263#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {35259#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:58:05,415 INFO L290 TraceCheckUtils]: 11: Hoare triple {35267#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [293] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {35263#(= main_~x~0 1000000)} is VALID [2022-04-28 03:58:05,416 INFO L290 TraceCheckUtils]: 10: Hoare triple {35267#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [298] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_1878)) (.cse1 (= |v_main_#t~post5_245| |v_main_#t~post5_244|)) (.cse2 (= v_main_~x~0_1878 v_main_~x~0_1877)) (.cse3 (= v_main_~y~0_1460 v_main_~y~0_1459))) (or (and (< v_main_~x~0_1877 750001) (< v_main_~x~0_1878 v_main_~x~0_1877) .cse0 (= (+ v_main_~x~0_1878 v_main_~y~0_1459) (+ v_main_~x~0_1877 v_main_~y~0_1460))) (and .cse1 .cse2 .cse3 (= |v_main_#t~post6_522| |v_main_#t~post6_518|)) (and (or (not .cse0) (not (< v_main_~x~0_1878 750000))) .cse1 (= |v_main_#t~post6_518| |v_main_#t~post6_522|) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1460, main_#t~post5=|v_main_#t~post5_245|, main_~x~0=v_main_~x~0_1878, main_#t~post6=|v_main_#t~post6_522|} OutVars{main_~y~0=v_main_~y~0_1459, main_#t~post5=|v_main_#t~post5_244|, main_~x~0=v_main_~x~0_1877, main_#t~post6=|v_main_#t~post6_518|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {35267#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:58:05,416 INFO L290 TraceCheckUtils]: 9: Hoare triple {35267#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [297] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {35267#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:58:05,417 INFO L290 TraceCheckUtils]: 8: Hoare triple {35277#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [296] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1458 v_main_~y~0_1457)) (.cse1 (= v_main_~x~0_1876 v_main_~x~0_1875)) (.cse2 (= |v_main_#t~post6_519| |v_main_#t~post6_517|)) (.cse3 (<= 750000 v_main_~x~0_1876))) (or (and .cse0 .cse1 .cse2 (or (not (< v_main_~x~0_1876 1000000)) (not .cse3))) (and .cse0 .cse1 .cse2) (and (< v_main_~y~0_1458 v_main_~y~0_1457) (< v_main_~y~0_1457 (+ (div (+ (* (- 1) v_main_~x~0_1876) 999999) 2) 2 v_main_~y~0_1458)) .cse3 (= (+ v_main_~x~0_1876 (* 2 v_main_~y~0_1457)) (+ v_main_~x~0_1875 (* 2 v_main_~y~0_1458)))))) InVars {main_~y~0=v_main_~y~0_1458, main_~x~0=v_main_~x~0_1876, main_#t~post6=|v_main_#t~post6_519|} OutVars{main_~y~0=v_main_~y~0_1457, main_~x~0=v_main_~x~0_1875, main_#t~post6=|v_main_#t~post6_517|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {35267#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:58:05,418 INFO L290 TraceCheckUtils]: 7: Hoare triple {35277#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [295] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {35277#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:58:05,419 INFO L290 TraceCheckUtils]: 6: Hoare triple {35277#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [294] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_289| |v_main_#t~post4_288|)) (.cse1 (= v_main_~x~0_1874 v_main_~x~0_1873))) (or (and .cse0 .cse1) (and .cse0 .cse1 (not (< v_main_~x~0_1874 500000))) (and (< v_main_~x~0_1873 500001) (< v_main_~x~0_1874 v_main_~x~0_1873)))) InVars {main_~x~0=v_main_~x~0_1874, main_#t~post4=|v_main_#t~post4_289|} OutVars{main_~x~0=v_main_~x~0_1873, main_#t~post4=|v_main_#t~post4_288|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {35277#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:58:05,419 INFO L290 TraceCheckUtils]: 5: Hoare triple {35194#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {35277#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:58:05,419 INFO L272 TraceCheckUtils]: 4: Hoare triple {35194#true} call #t~ret7 := main(); {35194#true} is VALID [2022-04-28 03:58:05,419 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {35194#true} {35194#true} #48#return; {35194#true} is VALID [2022-04-28 03:58:05,420 INFO L290 TraceCheckUtils]: 2: Hoare triple {35194#true} assume true; {35194#true} is VALID [2022-04-28 03:58:05,420 INFO L290 TraceCheckUtils]: 1: Hoare triple {35194#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {35194#true} is VALID [2022-04-28 03:58:05,420 INFO L272 TraceCheckUtils]: 0: Hoare triple {35194#true} call ULTIMATE.init(); {35194#true} is VALID [2022-04-28 03:58:05,420 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:58:05,420 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [952164101] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:58:05,420 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:58:05,420 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:58:07,094 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:58:07,094 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1574514321] [2022-04-28 03:58:07,094 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1574514321] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:58:07,095 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:58:07,095 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [47] imperfect sequences [] total 47 [2022-04-28 03:58:07,095 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [412701698] [2022-04-28 03:58:07,095 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:58:07,095 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 3.765957446808511) internal successors, (177), 46 states have internal predecessors, (177), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 181 [2022-04-28 03:58:07,095 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:58:07,095 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 47 states, 47 states have (on average 3.765957446808511) internal successors, (177), 46 states have internal predecessors, (177), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:07,217 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 181 edges. 181 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:58:07,217 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-04-28 03:58:07,217 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:58:07,217 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-04-28 03:58:07,217 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=265, Invalid=2815, Unknown=0, NotChecked=0, Total=3080 [2022-04-28 03:58:07,217 INFO L87 Difference]: Start difference. First operand 184 states and 188 transitions. Second operand has 47 states, 47 states have (on average 3.765957446808511) internal successors, (177), 46 states have internal predecessors, (177), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:21,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:58:21,948 INFO L93 Difference]: Finished difference Result 211 states and 220 transitions. [2022-04-28 03:58:21,949 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2022-04-28 03:58:21,949 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 3.765957446808511) internal successors, (177), 46 states have internal predecessors, (177), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 181 [2022-04-28 03:58:21,949 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:58:21,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47 states, 47 states have (on average 3.765957446808511) internal successors, (177), 46 states have internal predecessors, (177), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:21,950 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 200 transitions. [2022-04-28 03:58:21,950 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47 states, 47 states have (on average 3.765957446808511) internal successors, (177), 46 states have internal predecessors, (177), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:21,952 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 200 transitions. [2022-04-28 03:58:21,952 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 47 states and 200 transitions. [2022-04-28 03:58:22,113 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 200 edges. 200 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:58:22,115 INFO L225 Difference]: With dead ends: 211 [2022-04-28 03:58:22,115 INFO L226 Difference]: Without dead ends: 193 [2022-04-28 03:58:22,116 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 258 GetRequests, 157 SyntacticMatches, 3 SemanticMatches, 98 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1654 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=582, Invalid=9318, Unknown=0, NotChecked=0, Total=9900 [2022-04-28 03:58:22,116 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 137 mSDsluCounter, 222 mSDsCounter, 0 mSdLazyCounter, 7745 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 275 SdHoareTripleChecker+Invalid, 7792 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 7745 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.7s IncrementalHoareTripleChecker+Time [2022-04-28 03:58:22,116 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 275 Invalid, 7792 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 7745 Invalid, 0 Unknown, 0 Unchecked, 5.7s Time] [2022-04-28 03:58:22,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193 states. [2022-04-28 03:58:25,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193 to 188. [2022-04-28 03:58:25,373 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:58:25,373 INFO L82 GeneralOperation]: Start isEquivalent. First operand 193 states. Second operand has 188 states, 183 states have (on average 1.0273224043715847) internal successors, (188), 183 states have internal predecessors, (188), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:25,373 INFO L74 IsIncluded]: Start isIncluded. First operand 193 states. Second operand has 188 states, 183 states have (on average 1.0273224043715847) internal successors, (188), 183 states have internal predecessors, (188), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:25,373 INFO L87 Difference]: Start difference. First operand 193 states. Second operand has 188 states, 183 states have (on average 1.0273224043715847) internal successors, (188), 183 states have internal predecessors, (188), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:25,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:58:25,375 INFO L93 Difference]: Finished difference Result 193 states and 197 transitions. [2022-04-28 03:58:25,375 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 197 transitions. [2022-04-28 03:58:25,376 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:58:25,376 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:58:25,376 INFO L74 IsIncluded]: Start isIncluded. First operand has 188 states, 183 states have (on average 1.0273224043715847) internal successors, (188), 183 states have internal predecessors, (188), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 193 states. [2022-04-28 03:58:25,376 INFO L87 Difference]: Start difference. First operand has 188 states, 183 states have (on average 1.0273224043715847) internal successors, (188), 183 states have internal predecessors, (188), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 193 states. [2022-04-28 03:58:25,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:58:25,378 INFO L93 Difference]: Finished difference Result 193 states and 197 transitions. [2022-04-28 03:58:25,378 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 197 transitions. [2022-04-28 03:58:25,378 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:58:25,378 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:58:25,378 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:58:25,378 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:58:25,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 188 states, 183 states have (on average 1.0273224043715847) internal successors, (188), 183 states have internal predecessors, (188), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:25,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 192 transitions. [2022-04-28 03:58:25,381 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 192 transitions. Word has length 181 [2022-04-28 03:58:25,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:58:25,381 INFO L495 AbstractCegarLoop]: Abstraction has 188 states and 192 transitions. [2022-04-28 03:58:25,381 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 3.765957446808511) internal successors, (177), 46 states have internal predecessors, (177), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:25,381 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 188 states and 192 transitions. [2022-04-28 03:58:25,904 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 192 edges. 192 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:58:25,905 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 192 transitions. [2022-04-28 03:58:25,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 186 [2022-04-28 03:58:25,905 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:58:25,905 INFO L195 NwaCegarLoop]: trace histogram [44, 43, 43, 42, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:58:25,926 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Forceful destruction successful, exit code 0 [2022-04-28 03:58:26,119 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable42,42 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:58:26,119 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:58:26,119 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:58:26,120 INFO L85 PathProgramCache]: Analyzing trace with hash -1394800282, now seen corresponding path program 41 times [2022-04-28 03:58:26,120 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:58:26,120 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [297024638] [2022-04-28 03:58:30,199 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:58:30,248 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:58:30,468 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:58:30,679 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:58:30,681 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:58:30,684 INFO L85 PathProgramCache]: Analyzing trace with hash 831332071, now seen corresponding path program 1 times [2022-04-28 03:58:30,684 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:58:30,684 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [813150112] [2022-04-28 03:58:30,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:58:30,684 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:58:30,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:58:30,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:58:30,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:58:30,739 INFO L290 TraceCheckUtils]: 0: Hoare triple {36628#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {36620#true} is VALID [2022-04-28 03:58:30,739 INFO L290 TraceCheckUtils]: 1: Hoare triple {36620#true} assume true; {36620#true} is VALID [2022-04-28 03:58:30,739 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36620#true} {36620#true} #48#return; {36620#true} is VALID [2022-04-28 03:58:30,740 INFO L272 TraceCheckUtils]: 0: Hoare triple {36620#true} call ULTIMATE.init(); {36628#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:58:30,740 INFO L290 TraceCheckUtils]: 1: Hoare triple {36628#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {36620#true} is VALID [2022-04-28 03:58:30,740 INFO L290 TraceCheckUtils]: 2: Hoare triple {36620#true} assume true; {36620#true} is VALID [2022-04-28 03:58:30,740 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {36620#true} {36620#true} #48#return; {36620#true} is VALID [2022-04-28 03:58:30,740 INFO L272 TraceCheckUtils]: 4: Hoare triple {36620#true} call #t~ret7 := main(); {36620#true} is VALID [2022-04-28 03:58:30,741 INFO L290 TraceCheckUtils]: 5: Hoare triple {36620#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {36625#(= main_~x~0 0)} is VALID [2022-04-28 03:58:30,742 INFO L290 TraceCheckUtils]: 6: Hoare triple {36625#(= main_~x~0 0)} [300] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_296| |v_main_#t~post4_295|)) (.cse1 (= v_main_~x~0_1941 v_main_~x~0_1940))) (or (and (< v_main_~x~0_1940 500001) (< v_main_~x~0_1941 v_main_~x~0_1940)) (and .cse0 .cse1) (and (<= 500000 v_main_~x~0_1941) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_1941, main_#t~post4=|v_main_#t~post4_296|} OutVars{main_~x~0=v_main_~x~0_1940, main_#t~post4=|v_main_#t~post4_295|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {36626#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:30,742 INFO L290 TraceCheckUtils]: 7: Hoare triple {36626#(<= main_~x~0 500000)} [301] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {36626#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:30,743 INFO L290 TraceCheckUtils]: 8: Hoare triple {36626#(<= main_~x~0 500000)} [302] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1943)) (.cse1 (= |v_main_#t~post6_532| |v_main_#t~post6_530|)) (.cse2 (= v_main_~x~0_1943 v_main_~x~0_1942)) (.cse3 (= v_main_~y~0_1515 v_main_~y~0_1514))) (or (and (< v_main_~y~0_1514 (+ 2 v_main_~y~0_1515 (div (+ 999999 (* (- 1) v_main_~x~0_1943)) 2))) (< v_main_~y~0_1515 v_main_~y~0_1514) (= (+ (* 2 v_main_~y~0_1514) v_main_~x~0_1943) (+ v_main_~x~0_1942 (* 2 v_main_~y~0_1515))) .cse0) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_1943 1000000)))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1515, main_~x~0=v_main_~x~0_1943, main_#t~post6=|v_main_#t~post6_532|} OutVars{main_~y~0=v_main_~y~0_1514, main_~x~0=v_main_~x~0_1942, main_#t~post6=|v_main_#t~post6_530|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {36626#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:30,744 INFO L290 TraceCheckUtils]: 9: Hoare triple {36626#(<= main_~x~0 500000)} [303] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {36626#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:30,744 INFO L290 TraceCheckUtils]: 10: Hoare triple {36626#(<= main_~x~0 500000)} [304] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1945 v_main_~x~0_1944)) (.cse1 (= |v_main_#t~post6_535| |v_main_#t~post6_531|)) (.cse2 (= |v_main_#t~post5_251| |v_main_#t~post5_250|)) (.cse3 (= v_main_~y~0_1517 v_main_~y~0_1516)) (.cse4 (<= 500000 v_main_~x~0_1945))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_1945 750000)) (not .cse4))) (let ((.cse5 (+ v_main_~x~0_1945 v_main_~y~0_1516))) (and (= (+ v_main_~x~0_1944 v_main_~y~0_1517) .cse5) .cse4 (< v_main_~y~0_1517 v_main_~y~0_1516) (< .cse5 (+ 750001 v_main_~y~0_1517)))))) InVars {main_~y~0=v_main_~y~0_1517, main_#t~post5=|v_main_#t~post5_251|, main_~x~0=v_main_~x~0_1945, main_#t~post6=|v_main_#t~post6_535|} OutVars{main_~y~0=v_main_~y~0_1516, main_#t~post5=|v_main_#t~post5_250|, main_~x~0=v_main_~x~0_1944, main_#t~post6=|v_main_#t~post6_531|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {36627#(<= main_~x~0 750000)} is VALID [2022-04-28 03:58:30,745 INFO L290 TraceCheckUtils]: 11: Hoare triple {36627#(<= main_~x~0 750000)} [299] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {36621#false} is VALID [2022-04-28 03:58:30,745 INFO L272 TraceCheckUtils]: 12: Hoare triple {36621#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {36621#false} is VALID [2022-04-28 03:58:30,745 INFO L290 TraceCheckUtils]: 13: Hoare triple {36621#false} ~cond := #in~cond; {36621#false} is VALID [2022-04-28 03:58:30,745 INFO L290 TraceCheckUtils]: 14: Hoare triple {36621#false} assume 0 == ~cond; {36621#false} is VALID [2022-04-28 03:58:30,745 INFO L290 TraceCheckUtils]: 15: Hoare triple {36621#false} assume !false; {36621#false} is VALID [2022-04-28 03:58:30,746 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:58:30,746 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:58:30,746 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [813150112] [2022-04-28 03:58:30,746 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [813150112] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:58:30,746 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [276977527] [2022-04-28 03:58:30,746 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:58:30,746 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:58:30,746 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:58:30,748 INFO L229 MonitoredProcess]: Starting monitored process 43 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:58:30,767 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Waiting until timeout for monitored process [2022-04-28 03:58:30,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:58:30,781 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:58:30,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:58:30,792 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:58:30,974 INFO L272 TraceCheckUtils]: 0: Hoare triple {36620#true} call ULTIMATE.init(); {36620#true} is VALID [2022-04-28 03:58:30,974 INFO L290 TraceCheckUtils]: 1: Hoare triple {36620#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {36620#true} is VALID [2022-04-28 03:58:30,974 INFO L290 TraceCheckUtils]: 2: Hoare triple {36620#true} assume true; {36620#true} is VALID [2022-04-28 03:58:30,974 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {36620#true} {36620#true} #48#return; {36620#true} is VALID [2022-04-28 03:58:30,974 INFO L272 TraceCheckUtils]: 4: Hoare triple {36620#true} call #t~ret7 := main(); {36620#true} is VALID [2022-04-28 03:58:30,975 INFO L290 TraceCheckUtils]: 5: Hoare triple {36620#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {36647#(<= main_~x~0 0)} is VALID [2022-04-28 03:58:30,975 INFO L290 TraceCheckUtils]: 6: Hoare triple {36647#(<= main_~x~0 0)} [300] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_296| |v_main_#t~post4_295|)) (.cse1 (= v_main_~x~0_1941 v_main_~x~0_1940))) (or (and (< v_main_~x~0_1940 500001) (< v_main_~x~0_1941 v_main_~x~0_1940)) (and .cse0 .cse1) (and (<= 500000 v_main_~x~0_1941) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_1941, main_#t~post4=|v_main_#t~post4_296|} OutVars{main_~x~0=v_main_~x~0_1940, main_#t~post4=|v_main_#t~post4_295|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {36626#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:30,975 INFO L290 TraceCheckUtils]: 7: Hoare triple {36626#(<= main_~x~0 500000)} [301] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {36626#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:30,976 INFO L290 TraceCheckUtils]: 8: Hoare triple {36626#(<= main_~x~0 500000)} [302] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1943)) (.cse1 (= |v_main_#t~post6_532| |v_main_#t~post6_530|)) (.cse2 (= v_main_~x~0_1943 v_main_~x~0_1942)) (.cse3 (= v_main_~y~0_1515 v_main_~y~0_1514))) (or (and (< v_main_~y~0_1514 (+ 2 v_main_~y~0_1515 (div (+ 999999 (* (- 1) v_main_~x~0_1943)) 2))) (< v_main_~y~0_1515 v_main_~y~0_1514) (= (+ (* 2 v_main_~y~0_1514) v_main_~x~0_1943) (+ v_main_~x~0_1942 (* 2 v_main_~y~0_1515))) .cse0) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_1943 1000000)))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1515, main_~x~0=v_main_~x~0_1943, main_#t~post6=|v_main_#t~post6_532|} OutVars{main_~y~0=v_main_~y~0_1514, main_~x~0=v_main_~x~0_1942, main_#t~post6=|v_main_#t~post6_530|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {36626#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:30,976 INFO L290 TraceCheckUtils]: 9: Hoare triple {36626#(<= main_~x~0 500000)} [303] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {36626#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:30,977 INFO L290 TraceCheckUtils]: 10: Hoare triple {36626#(<= main_~x~0 500000)} [304] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1945 v_main_~x~0_1944)) (.cse1 (= |v_main_#t~post6_535| |v_main_#t~post6_531|)) (.cse2 (= |v_main_#t~post5_251| |v_main_#t~post5_250|)) (.cse3 (= v_main_~y~0_1517 v_main_~y~0_1516)) (.cse4 (<= 500000 v_main_~x~0_1945))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_1945 750000)) (not .cse4))) (let ((.cse5 (+ v_main_~x~0_1945 v_main_~y~0_1516))) (and (= (+ v_main_~x~0_1944 v_main_~y~0_1517) .cse5) .cse4 (< v_main_~y~0_1517 v_main_~y~0_1516) (< .cse5 (+ 750001 v_main_~y~0_1517)))))) InVars {main_~y~0=v_main_~y~0_1517, main_#t~post5=|v_main_#t~post5_251|, main_~x~0=v_main_~x~0_1945, main_#t~post6=|v_main_#t~post6_535|} OutVars{main_~y~0=v_main_~y~0_1516, main_#t~post5=|v_main_#t~post5_250|, main_~x~0=v_main_~x~0_1944, main_#t~post6=|v_main_#t~post6_531|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {36627#(<= main_~x~0 750000)} is VALID [2022-04-28 03:58:30,978 INFO L290 TraceCheckUtils]: 11: Hoare triple {36627#(<= main_~x~0 750000)} [299] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {36621#false} is VALID [2022-04-28 03:58:30,978 INFO L272 TraceCheckUtils]: 12: Hoare triple {36621#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {36621#false} is VALID [2022-04-28 03:58:30,978 INFO L290 TraceCheckUtils]: 13: Hoare triple {36621#false} ~cond := #in~cond; {36621#false} is VALID [2022-04-28 03:58:30,978 INFO L290 TraceCheckUtils]: 14: Hoare triple {36621#false} assume 0 == ~cond; {36621#false} is VALID [2022-04-28 03:58:30,978 INFO L290 TraceCheckUtils]: 15: Hoare triple {36621#false} assume !false; {36621#false} is VALID [2022-04-28 03:58:30,978 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:58:30,978 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:58:31,386 INFO L290 TraceCheckUtils]: 15: Hoare triple {36621#false} assume !false; {36621#false} is VALID [2022-04-28 03:58:31,386 INFO L290 TraceCheckUtils]: 14: Hoare triple {36681#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {36621#false} is VALID [2022-04-28 03:58:31,386 INFO L290 TraceCheckUtils]: 13: Hoare triple {36685#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {36681#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:58:31,387 INFO L272 TraceCheckUtils]: 12: Hoare triple {36689#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {36685#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:58:31,387 INFO L290 TraceCheckUtils]: 11: Hoare triple {36693#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [299] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {36689#(= main_~x~0 1000000)} is VALID [2022-04-28 03:58:31,388 INFO L290 TraceCheckUtils]: 10: Hoare triple {36693#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [304] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_1945 v_main_~x~0_1944)) (.cse1 (= |v_main_#t~post6_535| |v_main_#t~post6_531|)) (.cse2 (= |v_main_#t~post5_251| |v_main_#t~post5_250|)) (.cse3 (= v_main_~y~0_1517 v_main_~y~0_1516)) (.cse4 (<= 500000 v_main_~x~0_1945))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (or (not (< v_main_~x~0_1945 750000)) (not .cse4))) (let ((.cse5 (+ v_main_~x~0_1945 v_main_~y~0_1516))) (and (= (+ v_main_~x~0_1944 v_main_~y~0_1517) .cse5) .cse4 (< v_main_~y~0_1517 v_main_~y~0_1516) (< .cse5 (+ 750001 v_main_~y~0_1517)))))) InVars {main_~y~0=v_main_~y~0_1517, main_#t~post5=|v_main_#t~post5_251|, main_~x~0=v_main_~x~0_1945, main_#t~post6=|v_main_#t~post6_535|} OutVars{main_~y~0=v_main_~y~0_1516, main_#t~post5=|v_main_#t~post5_250|, main_~x~0=v_main_~x~0_1944, main_#t~post6=|v_main_#t~post6_531|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {36693#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:58:31,388 INFO L290 TraceCheckUtils]: 9: Hoare triple {36693#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [303] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {36693#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:58:31,389 INFO L290 TraceCheckUtils]: 8: Hoare triple {36703#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [302] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_1943)) (.cse1 (= |v_main_#t~post6_532| |v_main_#t~post6_530|)) (.cse2 (= v_main_~x~0_1943 v_main_~x~0_1942)) (.cse3 (= v_main_~y~0_1515 v_main_~y~0_1514))) (or (and (< v_main_~y~0_1514 (+ 2 v_main_~y~0_1515 (div (+ 999999 (* (- 1) v_main_~x~0_1943)) 2))) (< v_main_~y~0_1515 v_main_~y~0_1514) (= (+ (* 2 v_main_~y~0_1514) v_main_~x~0_1943) (+ v_main_~x~0_1942 (* 2 v_main_~y~0_1515))) .cse0) (and .cse1 .cse2 .cse3 (or (not .cse0) (not (< v_main_~x~0_1943 1000000)))) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1515, main_~x~0=v_main_~x~0_1943, main_#t~post6=|v_main_#t~post6_532|} OutVars{main_~y~0=v_main_~y~0_1514, main_~x~0=v_main_~x~0_1942, main_#t~post6=|v_main_#t~post6_530|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {36693#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:58:31,390 INFO L290 TraceCheckUtils]: 7: Hoare triple {36703#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [301] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {36703#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:58:31,391 INFO L290 TraceCheckUtils]: 6: Hoare triple {36703#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [300] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_296| |v_main_#t~post4_295|)) (.cse1 (= v_main_~x~0_1941 v_main_~x~0_1940))) (or (and (< v_main_~x~0_1940 500001) (< v_main_~x~0_1941 v_main_~x~0_1940)) (and .cse0 .cse1) (and (<= 500000 v_main_~x~0_1941) .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_1941, main_#t~post4=|v_main_#t~post4_296|} OutVars{main_~x~0=v_main_~x~0_1940, main_#t~post4=|v_main_#t~post4_295|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {36703#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:58:31,392 INFO L290 TraceCheckUtils]: 5: Hoare triple {36620#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {36703#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:58:31,392 INFO L272 TraceCheckUtils]: 4: Hoare triple {36620#true} call #t~ret7 := main(); {36620#true} is VALID [2022-04-28 03:58:31,392 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {36620#true} {36620#true} #48#return; {36620#true} is VALID [2022-04-28 03:58:31,392 INFO L290 TraceCheckUtils]: 2: Hoare triple {36620#true} assume true; {36620#true} is VALID [2022-04-28 03:58:31,392 INFO L290 TraceCheckUtils]: 1: Hoare triple {36620#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {36620#true} is VALID [2022-04-28 03:58:31,392 INFO L272 TraceCheckUtils]: 0: Hoare triple {36620#true} call ULTIMATE.init(); {36620#true} is VALID [2022-04-28 03:58:31,392 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:58:31,392 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [276977527] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:58:31,392 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:58:31,392 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:58:33,239 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:58:33,239 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [297024638] [2022-04-28 03:58:33,239 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [297024638] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:58:33,239 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:58:33,239 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [48] imperfect sequences [] total 48 [2022-04-28 03:58:33,239 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1197164842] [2022-04-28 03:58:33,239 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:58:33,239 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 3.7708333333333335) internal successors, (181), 47 states have internal predecessors, (181), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 185 [2022-04-28 03:58:33,240 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:58:33,240 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 48 states, 48 states have (on average 3.7708333333333335) internal successors, (181), 47 states have internal predecessors, (181), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:33,366 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 185 edges. 185 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:58:33,366 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-04-28 03:58:33,366 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:58:33,366 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-04-28 03:58:33,366 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=270, Invalid=2922, Unknown=0, NotChecked=0, Total=3192 [2022-04-28 03:58:33,367 INFO L87 Difference]: Start difference. First operand 188 states and 192 transitions. Second operand has 48 states, 48 states have (on average 3.7708333333333335) internal successors, (181), 47 states have internal predecessors, (181), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:48,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:58:48,678 INFO L93 Difference]: Finished difference Result 215 states and 224 transitions. [2022-04-28 03:58:48,678 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2022-04-28 03:58:48,679 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 3.7708333333333335) internal successors, (181), 47 states have internal predecessors, (181), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 185 [2022-04-28 03:58:48,679 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:58:48,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 48 states have (on average 3.7708333333333335) internal successors, (181), 47 states have internal predecessors, (181), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:48,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 204 transitions. [2022-04-28 03:58:48,680 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 48 states have (on average 3.7708333333333335) internal successors, (181), 47 states have internal predecessors, (181), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:48,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 204 transitions. [2022-04-28 03:58:48,681 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 48 states and 204 transitions. [2022-04-28 03:58:48,837 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 204 edges. 204 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:58:48,839 INFO L225 Difference]: With dead ends: 215 [2022-04-28 03:58:48,839 INFO L226 Difference]: Without dead ends: 197 [2022-04-28 03:58:48,840 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 160 SyntacticMatches, 3 SemanticMatches, 100 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1714 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=594, Invalid=9708, Unknown=0, NotChecked=0, Total=10302 [2022-04-28 03:58:48,840 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 140 mSDsluCounter, 227 mSDsCounter, 0 mSdLazyCounter, 8101 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 281 SdHoareTripleChecker+Invalid, 8149 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 8101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.9s IncrementalHoareTripleChecker+Time [2022-04-28 03:58:48,840 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [140 Valid, 281 Invalid, 8149 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 8101 Invalid, 0 Unknown, 0 Unchecked, 5.9s Time] [2022-04-28 03:58:48,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2022-04-28 03:58:52,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 192. [2022-04-28 03:58:52,215 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:58:52,215 INFO L82 GeneralOperation]: Start isEquivalent. First operand 197 states. Second operand has 192 states, 187 states have (on average 1.0267379679144386) internal successors, (192), 187 states have internal predecessors, (192), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:52,215 INFO L74 IsIncluded]: Start isIncluded. First operand 197 states. Second operand has 192 states, 187 states have (on average 1.0267379679144386) internal successors, (192), 187 states have internal predecessors, (192), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:52,215 INFO L87 Difference]: Start difference. First operand 197 states. Second operand has 192 states, 187 states have (on average 1.0267379679144386) internal successors, (192), 187 states have internal predecessors, (192), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:52,217 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:58:52,217 INFO L93 Difference]: Finished difference Result 197 states and 201 transitions. [2022-04-28 03:58:52,217 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 201 transitions. [2022-04-28 03:58:52,217 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:58:52,218 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:58:52,218 INFO L74 IsIncluded]: Start isIncluded. First operand has 192 states, 187 states have (on average 1.0267379679144386) internal successors, (192), 187 states have internal predecessors, (192), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 197 states. [2022-04-28 03:58:52,218 INFO L87 Difference]: Start difference. First operand has 192 states, 187 states have (on average 1.0267379679144386) internal successors, (192), 187 states have internal predecessors, (192), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 197 states. [2022-04-28 03:58:52,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:58:52,220 INFO L93 Difference]: Finished difference Result 197 states and 201 transitions. [2022-04-28 03:58:52,220 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 201 transitions. [2022-04-28 03:58:52,220 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:58:52,220 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:58:52,220 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:58:52,220 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:58:52,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 192 states, 187 states have (on average 1.0267379679144386) internal successors, (192), 187 states have internal predecessors, (192), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:52,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 192 states to 192 states and 196 transitions. [2022-04-28 03:58:52,222 INFO L78 Accepts]: Start accepts. Automaton has 192 states and 196 transitions. Word has length 185 [2022-04-28 03:58:52,222 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:58:52,222 INFO L495 AbstractCegarLoop]: Abstraction has 192 states and 196 transitions. [2022-04-28 03:58:52,222 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 3.7708333333333335) internal successors, (181), 47 states have internal predecessors, (181), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:52,222 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 192 states and 196 transitions. [2022-04-28 03:58:52,741 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 196 edges. 196 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:58:52,741 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 196 transitions. [2022-04-28 03:58:52,741 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 190 [2022-04-28 03:58:52,741 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:58:52,742 INFO L195 NwaCegarLoop]: trace histogram [45, 44, 44, 43, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:58:52,757 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Ended with exit code 0 [2022-04-28 03:58:52,942 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable43,43 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:58:52,942 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:58:52,942 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:58:52,942 INFO L85 PathProgramCache]: Analyzing trace with hash 671202749, now seen corresponding path program 42 times [2022-04-28 03:58:52,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:58:52,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [987857766] [2022-04-28 03:58:53,077 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:58:53,334 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:58:53,577 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:58:53,578 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:58:53,584 INFO L85 PathProgramCache]: Analyzing trace with hash 471757095, now seen corresponding path program 1 times [2022-04-28 03:58:53,584 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:58:53,585 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1674048068] [2022-04-28 03:58:53,585 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:58:53,585 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:58:53,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:58:53,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:58:53,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:58:53,627 INFO L290 TraceCheckUtils]: 0: Hoare triple {38081#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {38073#true} is VALID [2022-04-28 03:58:53,628 INFO L290 TraceCheckUtils]: 1: Hoare triple {38073#true} assume true; {38073#true} is VALID [2022-04-28 03:58:53,628 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {38073#true} {38073#true} #48#return; {38073#true} is VALID [2022-04-28 03:58:53,628 INFO L272 TraceCheckUtils]: 0: Hoare triple {38073#true} call ULTIMATE.init(); {38081#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:58:53,628 INFO L290 TraceCheckUtils]: 1: Hoare triple {38081#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {38073#true} is VALID [2022-04-28 03:58:53,628 INFO L290 TraceCheckUtils]: 2: Hoare triple {38073#true} assume true; {38073#true} is VALID [2022-04-28 03:58:53,629 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {38073#true} {38073#true} #48#return; {38073#true} is VALID [2022-04-28 03:58:53,629 INFO L272 TraceCheckUtils]: 4: Hoare triple {38073#true} call #t~ret7 := main(); {38073#true} is VALID [2022-04-28 03:58:53,629 INFO L290 TraceCheckUtils]: 5: Hoare triple {38073#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {38078#(= main_~x~0 0)} is VALID [2022-04-28 03:58:53,630 INFO L290 TraceCheckUtils]: 6: Hoare triple {38078#(= main_~x~0 0)} [306] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_303| |v_main_#t~post4_302|)) (.cse1 (= v_main_~x~0_2009 v_main_~x~0_2008))) (or (and (< v_main_~x~0_2008 500001) (< v_main_~x~0_2009 v_main_~x~0_2008)) (and (not (< v_main_~x~0_2009 500000)) .cse0 .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2009, main_#t~post4=|v_main_#t~post4_303|} OutVars{main_~x~0=v_main_~x~0_2008, main_#t~post4=|v_main_#t~post4_302|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {38079#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:53,630 INFO L290 TraceCheckUtils]: 7: Hoare triple {38079#(<= main_~x~0 500000)} [307] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {38079#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:53,631 INFO L290 TraceCheckUtils]: 8: Hoare triple {38079#(<= main_~x~0 500000)} [308] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_2011)) (.cse1 (= v_main_~x~0_2011 v_main_~x~0_2010)) (.cse2 (= |v_main_#t~post6_545| |v_main_#t~post6_543|)) (.cse3 (= v_main_~y~0_1573 v_main_~y~0_1572))) (or (and (= (+ v_main_~x~0_2011 (* 2 v_main_~y~0_1572)) (+ v_main_~x~0_2010 (* 2 v_main_~y~0_1573))) (< v_main_~y~0_1572 (+ 2 v_main_~y~0_1573 (div (+ (* (- 1) v_main_~x~0_2011) 999999) 2))) (< v_main_~y~0_1573 v_main_~y~0_1572) .cse0) (and .cse1 (or (not .cse0) (not (< v_main_~x~0_2011 1000000))) .cse2 .cse3) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1573, main_~x~0=v_main_~x~0_2011, main_#t~post6=|v_main_#t~post6_545|} OutVars{main_~y~0=v_main_~y~0_1572, main_~x~0=v_main_~x~0_2010, main_#t~post6=|v_main_#t~post6_543|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {38079#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:53,631 INFO L290 TraceCheckUtils]: 9: Hoare triple {38079#(<= main_~x~0 500000)} [309] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {38079#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:53,632 INFO L290 TraceCheckUtils]: 10: Hoare triple {38079#(<= main_~x~0 500000)} [310] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_2013)) (.cse1 (= |v_main_#t~post6_548| |v_main_#t~post6_544|)) (.cse2 (= |v_main_#t~post5_257| |v_main_#t~post5_256|)) (.cse3 (= v_main_~y~0_1575 v_main_~y~0_1574)) (.cse4 (= v_main_~x~0_2013 v_main_~x~0_2012))) (or (and (or (not .cse0) (not (< v_main_~x~0_2013 750000))) .cse1 .cse2 .cse3 .cse4) (let ((.cse5 (+ v_main_~x~0_2013 v_main_~y~0_1574))) (and (= .cse5 (+ v_main_~x~0_2012 v_main_~y~0_1575)) (< .cse5 (+ 750001 v_main_~y~0_1575)) .cse0 (< v_main_~y~0_1575 v_main_~y~0_1574))) (and .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_1575, main_#t~post5=|v_main_#t~post5_257|, main_~x~0=v_main_~x~0_2013, main_#t~post6=|v_main_#t~post6_548|} OutVars{main_~y~0=v_main_~y~0_1574, main_#t~post5=|v_main_#t~post5_256|, main_~x~0=v_main_~x~0_2012, main_#t~post6=|v_main_#t~post6_544|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {38080#(<= main_~x~0 750000)} is VALID [2022-04-28 03:58:53,633 INFO L290 TraceCheckUtils]: 11: Hoare triple {38080#(<= main_~x~0 750000)} [305] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {38074#false} is VALID [2022-04-28 03:58:53,633 INFO L272 TraceCheckUtils]: 12: Hoare triple {38074#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {38074#false} is VALID [2022-04-28 03:58:53,633 INFO L290 TraceCheckUtils]: 13: Hoare triple {38074#false} ~cond := #in~cond; {38074#false} is VALID [2022-04-28 03:58:53,633 INFO L290 TraceCheckUtils]: 14: Hoare triple {38074#false} assume 0 == ~cond; {38074#false} is VALID [2022-04-28 03:58:53,633 INFO L290 TraceCheckUtils]: 15: Hoare triple {38074#false} assume !false; {38074#false} is VALID [2022-04-28 03:58:53,634 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:58:53,634 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:58:53,634 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1674048068] [2022-04-28 03:58:53,634 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1674048068] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:58:53,634 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1865014781] [2022-04-28 03:58:53,634 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:58:53,634 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:58:53,634 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:58:53,636 INFO L229 MonitoredProcess]: Starting monitored process 44 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:58:53,659 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Waiting until timeout for monitored process [2022-04-28 03:58:53,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:58:53,674 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:58:53,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:58:53,684 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:58:53,883 INFO L272 TraceCheckUtils]: 0: Hoare triple {38073#true} call ULTIMATE.init(); {38073#true} is VALID [2022-04-28 03:58:53,883 INFO L290 TraceCheckUtils]: 1: Hoare triple {38073#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {38073#true} is VALID [2022-04-28 03:58:53,883 INFO L290 TraceCheckUtils]: 2: Hoare triple {38073#true} assume true; {38073#true} is VALID [2022-04-28 03:58:53,884 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {38073#true} {38073#true} #48#return; {38073#true} is VALID [2022-04-28 03:58:53,884 INFO L272 TraceCheckUtils]: 4: Hoare triple {38073#true} call #t~ret7 := main(); {38073#true} is VALID [2022-04-28 03:58:53,884 INFO L290 TraceCheckUtils]: 5: Hoare triple {38073#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {38100#(<= main_~x~0 0)} is VALID [2022-04-28 03:58:53,885 INFO L290 TraceCheckUtils]: 6: Hoare triple {38100#(<= main_~x~0 0)} [306] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_303| |v_main_#t~post4_302|)) (.cse1 (= v_main_~x~0_2009 v_main_~x~0_2008))) (or (and (< v_main_~x~0_2008 500001) (< v_main_~x~0_2009 v_main_~x~0_2008)) (and (not (< v_main_~x~0_2009 500000)) .cse0 .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2009, main_#t~post4=|v_main_#t~post4_303|} OutVars{main_~x~0=v_main_~x~0_2008, main_#t~post4=|v_main_#t~post4_302|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {38079#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:53,885 INFO L290 TraceCheckUtils]: 7: Hoare triple {38079#(<= main_~x~0 500000)} [307] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {38079#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:53,886 INFO L290 TraceCheckUtils]: 8: Hoare triple {38079#(<= main_~x~0 500000)} [308] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_2011)) (.cse1 (= v_main_~x~0_2011 v_main_~x~0_2010)) (.cse2 (= |v_main_#t~post6_545| |v_main_#t~post6_543|)) (.cse3 (= v_main_~y~0_1573 v_main_~y~0_1572))) (or (and (= (+ v_main_~x~0_2011 (* 2 v_main_~y~0_1572)) (+ v_main_~x~0_2010 (* 2 v_main_~y~0_1573))) (< v_main_~y~0_1572 (+ 2 v_main_~y~0_1573 (div (+ (* (- 1) v_main_~x~0_2011) 999999) 2))) (< v_main_~y~0_1573 v_main_~y~0_1572) .cse0) (and .cse1 (or (not .cse0) (not (< v_main_~x~0_2011 1000000))) .cse2 .cse3) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1573, main_~x~0=v_main_~x~0_2011, main_#t~post6=|v_main_#t~post6_545|} OutVars{main_~y~0=v_main_~y~0_1572, main_~x~0=v_main_~x~0_2010, main_#t~post6=|v_main_#t~post6_543|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {38079#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:53,886 INFO L290 TraceCheckUtils]: 9: Hoare triple {38079#(<= main_~x~0 500000)} [309] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {38079#(<= main_~x~0 500000)} is VALID [2022-04-28 03:58:53,887 INFO L290 TraceCheckUtils]: 10: Hoare triple {38079#(<= main_~x~0 500000)} [310] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_2013)) (.cse1 (= |v_main_#t~post6_548| |v_main_#t~post6_544|)) (.cse2 (= |v_main_#t~post5_257| |v_main_#t~post5_256|)) (.cse3 (= v_main_~y~0_1575 v_main_~y~0_1574)) (.cse4 (= v_main_~x~0_2013 v_main_~x~0_2012))) (or (and (or (not .cse0) (not (< v_main_~x~0_2013 750000))) .cse1 .cse2 .cse3 .cse4) (let ((.cse5 (+ v_main_~x~0_2013 v_main_~y~0_1574))) (and (= .cse5 (+ v_main_~x~0_2012 v_main_~y~0_1575)) (< .cse5 (+ 750001 v_main_~y~0_1575)) .cse0 (< v_main_~y~0_1575 v_main_~y~0_1574))) (and .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_1575, main_#t~post5=|v_main_#t~post5_257|, main_~x~0=v_main_~x~0_2013, main_#t~post6=|v_main_#t~post6_548|} OutVars{main_~y~0=v_main_~y~0_1574, main_#t~post5=|v_main_#t~post5_256|, main_~x~0=v_main_~x~0_2012, main_#t~post6=|v_main_#t~post6_544|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {38080#(<= main_~x~0 750000)} is VALID [2022-04-28 03:58:53,887 INFO L290 TraceCheckUtils]: 11: Hoare triple {38080#(<= main_~x~0 750000)} [305] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {38074#false} is VALID [2022-04-28 03:58:53,887 INFO L272 TraceCheckUtils]: 12: Hoare triple {38074#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {38074#false} is VALID [2022-04-28 03:58:53,887 INFO L290 TraceCheckUtils]: 13: Hoare triple {38074#false} ~cond := #in~cond; {38074#false} is VALID [2022-04-28 03:58:53,888 INFO L290 TraceCheckUtils]: 14: Hoare triple {38074#false} assume 0 == ~cond; {38074#false} is VALID [2022-04-28 03:58:53,888 INFO L290 TraceCheckUtils]: 15: Hoare triple {38074#false} assume !false; {38074#false} is VALID [2022-04-28 03:58:53,888 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:58:53,888 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:58:54,426 INFO L290 TraceCheckUtils]: 15: Hoare triple {38074#false} assume !false; {38074#false} is VALID [2022-04-28 03:58:54,426 INFO L290 TraceCheckUtils]: 14: Hoare triple {38134#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {38074#false} is VALID [2022-04-28 03:58:54,426 INFO L290 TraceCheckUtils]: 13: Hoare triple {38138#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {38134#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:58:54,427 INFO L272 TraceCheckUtils]: 12: Hoare triple {38142#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {38138#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:58:54,427 INFO L290 TraceCheckUtils]: 11: Hoare triple {38146#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [305] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {38142#(= main_~x~0 1000000)} is VALID [2022-04-28 03:58:54,428 INFO L290 TraceCheckUtils]: 10: Hoare triple {38146#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [310] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_2013)) (.cse1 (= |v_main_#t~post6_548| |v_main_#t~post6_544|)) (.cse2 (= |v_main_#t~post5_257| |v_main_#t~post5_256|)) (.cse3 (= v_main_~y~0_1575 v_main_~y~0_1574)) (.cse4 (= v_main_~x~0_2013 v_main_~x~0_2012))) (or (and (or (not .cse0) (not (< v_main_~x~0_2013 750000))) .cse1 .cse2 .cse3 .cse4) (let ((.cse5 (+ v_main_~x~0_2013 v_main_~y~0_1574))) (and (= .cse5 (+ v_main_~x~0_2012 v_main_~y~0_1575)) (< .cse5 (+ 750001 v_main_~y~0_1575)) .cse0 (< v_main_~y~0_1575 v_main_~y~0_1574))) (and .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_1575, main_#t~post5=|v_main_#t~post5_257|, main_~x~0=v_main_~x~0_2013, main_#t~post6=|v_main_#t~post6_548|} OutVars{main_~y~0=v_main_~y~0_1574, main_#t~post5=|v_main_#t~post5_256|, main_~x~0=v_main_~x~0_2012, main_#t~post6=|v_main_#t~post6_544|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {38146#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:58:54,429 INFO L290 TraceCheckUtils]: 9: Hoare triple {38146#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [309] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {38146#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:58:54,430 INFO L290 TraceCheckUtils]: 8: Hoare triple {38156#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [308] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_2011)) (.cse1 (= v_main_~x~0_2011 v_main_~x~0_2010)) (.cse2 (= |v_main_#t~post6_545| |v_main_#t~post6_543|)) (.cse3 (= v_main_~y~0_1573 v_main_~y~0_1572))) (or (and (= (+ v_main_~x~0_2011 (* 2 v_main_~y~0_1572)) (+ v_main_~x~0_2010 (* 2 v_main_~y~0_1573))) (< v_main_~y~0_1572 (+ 2 v_main_~y~0_1573 (div (+ (* (- 1) v_main_~x~0_2011) 999999) 2))) (< v_main_~y~0_1573 v_main_~y~0_1572) .cse0) (and .cse1 (or (not .cse0) (not (< v_main_~x~0_2011 1000000))) .cse2 .cse3) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1573, main_~x~0=v_main_~x~0_2011, main_#t~post6=|v_main_#t~post6_545|} OutVars{main_~y~0=v_main_~y~0_1572, main_~x~0=v_main_~x~0_2010, main_#t~post6=|v_main_#t~post6_543|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {38146#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:58:54,430 INFO L290 TraceCheckUtils]: 7: Hoare triple {38156#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [307] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {38156#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:58:54,431 INFO L290 TraceCheckUtils]: 6: Hoare triple {38156#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [306] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_303| |v_main_#t~post4_302|)) (.cse1 (= v_main_~x~0_2009 v_main_~x~0_2008))) (or (and (< v_main_~x~0_2008 500001) (< v_main_~x~0_2009 v_main_~x~0_2008)) (and (not (< v_main_~x~0_2009 500000)) .cse0 .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2009, main_#t~post4=|v_main_#t~post4_303|} OutVars{main_~x~0=v_main_~x~0_2008, main_#t~post4=|v_main_#t~post4_302|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {38156#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:58:54,432 INFO L290 TraceCheckUtils]: 5: Hoare triple {38073#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {38156#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:58:54,432 INFO L272 TraceCheckUtils]: 4: Hoare triple {38073#true} call #t~ret7 := main(); {38073#true} is VALID [2022-04-28 03:58:54,432 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {38073#true} {38073#true} #48#return; {38073#true} is VALID [2022-04-28 03:58:54,432 INFO L290 TraceCheckUtils]: 2: Hoare triple {38073#true} assume true; {38073#true} is VALID [2022-04-28 03:58:54,432 INFO L290 TraceCheckUtils]: 1: Hoare triple {38073#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {38073#true} is VALID [2022-04-28 03:58:54,432 INFO L272 TraceCheckUtils]: 0: Hoare triple {38073#true} call ULTIMATE.init(); {38073#true} is VALID [2022-04-28 03:58:54,432 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:58:54,432 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1865014781] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:58:54,432 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:58:54,433 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 03:58:56,265 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:58:56,265 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [987857766] [2022-04-28 03:58:56,266 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [987857766] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:58:56,266 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:58:56,266 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [49] imperfect sequences [] total 49 [2022-04-28 03:58:56,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1052694364] [2022-04-28 03:58:56,266 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:58:56,266 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 3.7755102040816326) internal successors, (185), 48 states have internal predecessors, (185), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 189 [2022-04-28 03:58:56,266 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:58:56,266 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 49 states, 49 states have (on average 3.7755102040816326) internal successors, (185), 48 states have internal predecessors, (185), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:58:56,394 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 189 edges. 189 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:58:56,394 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-04-28 03:58:56,394 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:58:56,394 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-04-28 03:58:56,395 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=275, Invalid=3031, Unknown=0, NotChecked=0, Total=3306 [2022-04-28 03:58:56,395 INFO L87 Difference]: Start difference. First operand 192 states and 196 transitions. Second operand has 49 states, 49 states have (on average 3.7755102040816326) internal successors, (185), 48 states have internal predecessors, (185), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:12,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:59:12,221 INFO L93 Difference]: Finished difference Result 219 states and 228 transitions. [2022-04-28 03:59:12,221 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-04-28 03:59:12,222 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 3.7755102040816326) internal successors, (185), 48 states have internal predecessors, (185), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 189 [2022-04-28 03:59:12,222 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:59:12,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 49 states, 49 states have (on average 3.7755102040816326) internal successors, (185), 48 states have internal predecessors, (185), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:12,224 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 208 transitions. [2022-04-28 03:59:12,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 49 states, 49 states have (on average 3.7755102040816326) internal successors, (185), 48 states have internal predecessors, (185), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:12,225 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 208 transitions. [2022-04-28 03:59:12,225 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 49 states and 208 transitions. [2022-04-28 03:59:12,397 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 208 edges. 208 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:59:12,400 INFO L225 Difference]: With dead ends: 219 [2022-04-28 03:59:12,400 INFO L226 Difference]: Without dead ends: 201 [2022-04-28 03:59:12,400 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 268 GetRequests, 163 SyntacticMatches, 3 SemanticMatches, 102 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1775 ImplicationChecksByTransitivity, 2.5s TimeCoverageRelationStatistics Valid=606, Invalid=10106, Unknown=0, NotChecked=0, Total=10712 [2022-04-28 03:59:12,400 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 144 mSDsluCounter, 227 mSDsCounter, 0 mSdLazyCounter, 8285 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 144 SdHoareTripleChecker+Valid, 282 SdHoareTripleChecker+Invalid, 8334 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 8285 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.1s IncrementalHoareTripleChecker+Time [2022-04-28 03:59:12,401 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [144 Valid, 282 Invalid, 8334 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 8285 Invalid, 0 Unknown, 0 Unchecked, 6.1s Time] [2022-04-28 03:59:12,401 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2022-04-28 03:59:15,941 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 196. [2022-04-28 03:59:15,941 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:59:15,941 INFO L82 GeneralOperation]: Start isEquivalent. First operand 201 states. Second operand has 196 states, 191 states have (on average 1.0261780104712042) internal successors, (196), 191 states have internal predecessors, (196), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:15,941 INFO L74 IsIncluded]: Start isIncluded. First operand 201 states. Second operand has 196 states, 191 states have (on average 1.0261780104712042) internal successors, (196), 191 states have internal predecessors, (196), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:15,941 INFO L87 Difference]: Start difference. First operand 201 states. Second operand has 196 states, 191 states have (on average 1.0261780104712042) internal successors, (196), 191 states have internal predecessors, (196), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:15,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:59:15,943 INFO L93 Difference]: Finished difference Result 201 states and 205 transitions. [2022-04-28 03:59:15,943 INFO L276 IsEmpty]: Start isEmpty. Operand 201 states and 205 transitions. [2022-04-28 03:59:15,944 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:59:15,944 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:59:15,944 INFO L74 IsIncluded]: Start isIncluded. First operand has 196 states, 191 states have (on average 1.0261780104712042) internal successors, (196), 191 states have internal predecessors, (196), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 201 states. [2022-04-28 03:59:15,944 INFO L87 Difference]: Start difference. First operand has 196 states, 191 states have (on average 1.0261780104712042) internal successors, (196), 191 states have internal predecessors, (196), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 201 states. [2022-04-28 03:59:15,946 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:59:15,946 INFO L93 Difference]: Finished difference Result 201 states and 205 transitions. [2022-04-28 03:59:15,946 INFO L276 IsEmpty]: Start isEmpty. Operand 201 states and 205 transitions. [2022-04-28 03:59:15,946 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:59:15,946 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:59:15,946 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:59:15,946 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:59:15,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 196 states, 191 states have (on average 1.0261780104712042) internal successors, (196), 191 states have internal predecessors, (196), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:15,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 200 transitions. [2022-04-28 03:59:15,948 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 200 transitions. Word has length 189 [2022-04-28 03:59:15,948 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:59:15,948 INFO L495 AbstractCegarLoop]: Abstraction has 196 states and 200 transitions. [2022-04-28 03:59:15,949 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 3.7755102040816326) internal successors, (185), 48 states have internal predecessors, (185), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:15,949 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 196 states and 200 transitions. [2022-04-28 03:59:16,490 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 200 edges. 200 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:59:16,490 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 200 transitions. [2022-04-28 03:59:16,491 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 194 [2022-04-28 03:59:16,491 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:59:16,491 INFO L195 NwaCegarLoop]: trace histogram [46, 45, 45, 44, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:59:16,507 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Forceful destruction successful, exit code 0 [2022-04-28 03:59:16,692 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 44 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable44 [2022-04-28 03:59:16,692 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:59:16,692 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:59:16,692 INFO L85 PathProgramCache]: Analyzing trace with hash 1584819860, now seen corresponding path program 43 times [2022-04-28 03:59:16,692 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:59:16,692 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [111677870] [2022-04-28 03:59:20,758 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:59:20,806 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:59:21,063 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:59:25,210 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 03:59:25,334 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:59:25,335 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:59:25,338 INFO L85 PathProgramCache]: Analyzing trace with hash 112182119, now seen corresponding path program 1 times [2022-04-28 03:59:25,338 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:59:25,338 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [12057812] [2022-04-28 03:59:25,338 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:59:25,338 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:59:25,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:59:25,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:59:25,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:59:25,389 INFO L290 TraceCheckUtils]: 0: Hoare triple {39561#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {39553#true} is VALID [2022-04-28 03:59:25,389 INFO L290 TraceCheckUtils]: 1: Hoare triple {39553#true} assume true; {39553#true} is VALID [2022-04-28 03:59:25,389 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {39553#true} {39553#true} #48#return; {39553#true} is VALID [2022-04-28 03:59:25,389 INFO L272 TraceCheckUtils]: 0: Hoare triple {39553#true} call ULTIMATE.init(); {39561#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:59:25,390 INFO L290 TraceCheckUtils]: 1: Hoare triple {39561#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {39553#true} is VALID [2022-04-28 03:59:25,390 INFO L290 TraceCheckUtils]: 2: Hoare triple {39553#true} assume true; {39553#true} is VALID [2022-04-28 03:59:25,390 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {39553#true} {39553#true} #48#return; {39553#true} is VALID [2022-04-28 03:59:25,390 INFO L272 TraceCheckUtils]: 4: Hoare triple {39553#true} call #t~ret7 := main(); {39553#true} is VALID [2022-04-28 03:59:25,390 INFO L290 TraceCheckUtils]: 5: Hoare triple {39553#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {39558#(= main_~x~0 0)} is VALID [2022-04-28 03:59:25,391 INFO L290 TraceCheckUtils]: 6: Hoare triple {39558#(= main_~x~0 0)} [312] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2078 v_main_~x~0_2077))) (or (and .cse0 (= |v_main_#t~post4_309| |v_main_#t~post4_310|) (<= 500000 v_main_~x~0_2078)) (and .cse0 (= |v_main_#t~post4_310| |v_main_#t~post4_309|)) (and (< v_main_~x~0_2077 500001) (< v_main_~x~0_2078 v_main_~x~0_2077)))) InVars {main_~x~0=v_main_~x~0_2078, main_#t~post4=|v_main_#t~post4_310|} OutVars{main_~x~0=v_main_~x~0_2077, main_#t~post4=|v_main_#t~post4_309|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {39559#(<= main_~x~0 500000)} is VALID [2022-04-28 03:59:25,391 INFO L290 TraceCheckUtils]: 7: Hoare triple {39559#(<= main_~x~0 500000)} [313] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {39559#(<= main_~x~0 500000)} is VALID [2022-04-28 03:59:25,392 INFO L290 TraceCheckUtils]: 8: Hoare triple {39559#(<= main_~x~0 500000)} [314] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~x~0_2080 v_main_~x~0_2079)) (.cse0 (<= 750000 v_main_~x~0_2080)) (.cse2 (= v_main_~y~0_1632 v_main_~y~0_1631)) (.cse3 (= |v_main_#t~post6_558| |v_main_#t~post6_556|))) (or (and .cse0 (< v_main_~y~0_1632 v_main_~y~0_1631) (= (+ v_main_~x~0_2080 (* 2 v_main_~y~0_1631)) (+ v_main_~x~0_2079 (* 2 v_main_~y~0_1632))) (< v_main_~y~0_1631 (+ 2 v_main_~y~0_1632 (div (+ (* (- 1) v_main_~x~0_2080) 999999) 2)))) (and .cse1 .cse2 .cse3) (and .cse1 (or (not (< v_main_~x~0_2080 1000000)) (not .cse0)) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1632, main_~x~0=v_main_~x~0_2080, main_#t~post6=|v_main_#t~post6_558|} OutVars{main_~y~0=v_main_~y~0_1631, main_~x~0=v_main_~x~0_2079, main_#t~post6=|v_main_#t~post6_556|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {39560#(<= main_~x~0 999999)} is VALID [2022-04-28 03:59:25,393 INFO L290 TraceCheckUtils]: 9: Hoare triple {39560#(<= main_~x~0 999999)} [315] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {39560#(<= main_~x~0 999999)} is VALID [2022-04-28 03:59:25,394 INFO L290 TraceCheckUtils]: 10: Hoare triple {39560#(<= main_~x~0 999999)} [316] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1634 v_main_~y~0_1633)) (.cse1 (= |v_main_#t~post5_263| |v_main_#t~post5_262|)) (.cse2 (= v_main_~x~0_2082 v_main_~x~0_2081)) (.cse3 (<= 500000 v_main_~x~0_2082))) (or (and (= |v_main_#t~post6_561| |v_main_#t~post6_557|) .cse0 .cse1 .cse2) (and .cse0 (= |v_main_#t~post6_557| |v_main_#t~post6_561|) .cse1 (or (not .cse3) (not (< v_main_~x~0_2082 750000))) .cse2) (and (< v_main_~x~0_2082 v_main_~x~0_2081) (< v_main_~x~0_2081 750001) .cse3 (= (+ v_main_~x~0_2081 v_main_~y~0_1634) (+ v_main_~x~0_2082 v_main_~y~0_1633))))) InVars {main_~y~0=v_main_~y~0_1634, main_#t~post5=|v_main_#t~post5_263|, main_~x~0=v_main_~x~0_2082, main_#t~post6=|v_main_#t~post6_561|} OutVars{main_~y~0=v_main_~y~0_1633, main_#t~post5=|v_main_#t~post5_262|, main_~x~0=v_main_~x~0_2081, main_#t~post6=|v_main_#t~post6_557|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {39560#(<= main_~x~0 999999)} is VALID [2022-04-28 03:59:25,394 INFO L290 TraceCheckUtils]: 11: Hoare triple {39560#(<= main_~x~0 999999)} [311] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {39554#false} is VALID [2022-04-28 03:59:25,394 INFO L272 TraceCheckUtils]: 12: Hoare triple {39554#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {39554#false} is VALID [2022-04-28 03:59:25,394 INFO L290 TraceCheckUtils]: 13: Hoare triple {39554#false} ~cond := #in~cond; {39554#false} is VALID [2022-04-28 03:59:25,394 INFO L290 TraceCheckUtils]: 14: Hoare triple {39554#false} assume 0 == ~cond; {39554#false} is VALID [2022-04-28 03:59:25,394 INFO L290 TraceCheckUtils]: 15: Hoare triple {39554#false} assume !false; {39554#false} is VALID [2022-04-28 03:59:25,395 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:59:25,395 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:59:25,395 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [12057812] [2022-04-28 03:59:25,395 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [12057812] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:59:25,395 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1796070478] [2022-04-28 03:59:25,395 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:59:25,395 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:59:25,395 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:59:25,400 INFO L229 MonitoredProcess]: Starting monitored process 45 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:59:25,448 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Waiting until timeout for monitored process [2022-04-28 03:59:25,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:59:25,454 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 9 conjunts are in the unsatisfiable core [2022-04-28 03:59:25,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:59:25,463 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:59:25,753 INFO L272 TraceCheckUtils]: 0: Hoare triple {39553#true} call ULTIMATE.init(); {39553#true} is VALID [2022-04-28 03:59:25,753 INFO L290 TraceCheckUtils]: 1: Hoare triple {39553#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {39553#true} is VALID [2022-04-28 03:59:25,753 INFO L290 TraceCheckUtils]: 2: Hoare triple {39553#true} assume true; {39553#true} is VALID [2022-04-28 03:59:25,753 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {39553#true} {39553#true} #48#return; {39553#true} is VALID [2022-04-28 03:59:25,753 INFO L272 TraceCheckUtils]: 4: Hoare triple {39553#true} call #t~ret7 := main(); {39553#true} is VALID [2022-04-28 03:59:25,753 INFO L290 TraceCheckUtils]: 5: Hoare triple {39553#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {39558#(= main_~x~0 0)} is VALID [2022-04-28 03:59:25,754 INFO L290 TraceCheckUtils]: 6: Hoare triple {39558#(= main_~x~0 0)} [312] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2078 v_main_~x~0_2077))) (or (and .cse0 (= |v_main_#t~post4_309| |v_main_#t~post4_310|) (<= 500000 v_main_~x~0_2078)) (and .cse0 (= |v_main_#t~post4_310| |v_main_#t~post4_309|)) (and (< v_main_~x~0_2077 500001) (< v_main_~x~0_2078 v_main_~x~0_2077)))) InVars {main_~x~0=v_main_~x~0_2078, main_#t~post4=|v_main_#t~post4_310|} OutVars{main_~x~0=v_main_~x~0_2077, main_#t~post4=|v_main_#t~post4_309|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {39583#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:59:25,754 INFO L290 TraceCheckUtils]: 7: Hoare triple {39583#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [313] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {39583#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:59:25,755 INFO L290 TraceCheckUtils]: 8: Hoare triple {39583#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [314] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~x~0_2080 v_main_~x~0_2079)) (.cse0 (<= 750000 v_main_~x~0_2080)) (.cse2 (= v_main_~y~0_1632 v_main_~y~0_1631)) (.cse3 (= |v_main_#t~post6_558| |v_main_#t~post6_556|))) (or (and .cse0 (< v_main_~y~0_1632 v_main_~y~0_1631) (= (+ v_main_~x~0_2080 (* 2 v_main_~y~0_1631)) (+ v_main_~x~0_2079 (* 2 v_main_~y~0_1632))) (< v_main_~y~0_1631 (+ 2 v_main_~y~0_1632 (div (+ (* (- 1) v_main_~x~0_2080) 999999) 2)))) (and .cse1 .cse2 .cse3) (and .cse1 (or (not (< v_main_~x~0_2080 1000000)) (not .cse0)) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1632, main_~x~0=v_main_~x~0_2080, main_#t~post6=|v_main_#t~post6_558|} OutVars{main_~y~0=v_main_~y~0_1631, main_~x~0=v_main_~x~0_2079, main_#t~post6=|v_main_#t~post6_556|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {39583#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:59:25,755 INFO L290 TraceCheckUtils]: 9: Hoare triple {39583#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [315] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {39583#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} is VALID [2022-04-28 03:59:25,756 INFO L290 TraceCheckUtils]: 10: Hoare triple {39583#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)))} [316] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1634 v_main_~y~0_1633)) (.cse1 (= |v_main_#t~post5_263| |v_main_#t~post5_262|)) (.cse2 (= v_main_~x~0_2082 v_main_~x~0_2081)) (.cse3 (<= 500000 v_main_~x~0_2082))) (or (and (= |v_main_#t~post6_561| |v_main_#t~post6_557|) .cse0 .cse1 .cse2) (and .cse0 (= |v_main_#t~post6_557| |v_main_#t~post6_561|) .cse1 (or (not .cse3) (not (< v_main_~x~0_2082 750000))) .cse2) (and (< v_main_~x~0_2082 v_main_~x~0_2081) (< v_main_~x~0_2081 750001) .cse3 (= (+ v_main_~x~0_2081 v_main_~y~0_1634) (+ v_main_~x~0_2082 v_main_~y~0_1633))))) InVars {main_~y~0=v_main_~y~0_1634, main_#t~post5=|v_main_#t~post5_263|, main_~x~0=v_main_~x~0_2082, main_#t~post6=|v_main_#t~post6_561|} OutVars{main_~y~0=v_main_~y~0_1633, main_#t~post5=|v_main_#t~post5_262|, main_~x~0=v_main_~x~0_2081, main_#t~post6=|v_main_#t~post6_557|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {39596#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} is VALID [2022-04-28 03:59:25,757 INFO L290 TraceCheckUtils]: 11: Hoare triple {39596#(or (= main_~x~0 0) (and (< main_~x~0 500001) (< 0 main_~x~0)) (and (< main_~x~0 750001) (< 500000 main_~x~0)))} [311] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {39554#false} is VALID [2022-04-28 03:59:25,757 INFO L272 TraceCheckUtils]: 12: Hoare triple {39554#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {39554#false} is VALID [2022-04-28 03:59:25,757 INFO L290 TraceCheckUtils]: 13: Hoare triple {39554#false} ~cond := #in~cond; {39554#false} is VALID [2022-04-28 03:59:25,757 INFO L290 TraceCheckUtils]: 14: Hoare triple {39554#false} assume 0 == ~cond; {39554#false} is VALID [2022-04-28 03:59:25,757 INFO L290 TraceCheckUtils]: 15: Hoare triple {39554#false} assume !false; {39554#false} is VALID [2022-04-28 03:59:25,757 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:59:25,757 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:59:26,224 INFO L290 TraceCheckUtils]: 15: Hoare triple {39554#false} assume !false; {39554#false} is VALID [2022-04-28 03:59:26,224 INFO L290 TraceCheckUtils]: 14: Hoare triple {39615#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {39554#false} is VALID [2022-04-28 03:59:26,224 INFO L290 TraceCheckUtils]: 13: Hoare triple {39619#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {39615#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:59:26,225 INFO L272 TraceCheckUtils]: 12: Hoare triple {39623#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {39619#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:59:26,225 INFO L290 TraceCheckUtils]: 11: Hoare triple {39627#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [311] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {39623#(= main_~x~0 1000000)} is VALID [2022-04-28 03:59:26,226 INFO L290 TraceCheckUtils]: 10: Hoare triple {39627#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [316] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~y~0_1634 v_main_~y~0_1633)) (.cse1 (= |v_main_#t~post5_263| |v_main_#t~post5_262|)) (.cse2 (= v_main_~x~0_2082 v_main_~x~0_2081)) (.cse3 (<= 500000 v_main_~x~0_2082))) (or (and (= |v_main_#t~post6_561| |v_main_#t~post6_557|) .cse0 .cse1 .cse2) (and .cse0 (= |v_main_#t~post6_557| |v_main_#t~post6_561|) .cse1 (or (not .cse3) (not (< v_main_~x~0_2082 750000))) .cse2) (and (< v_main_~x~0_2082 v_main_~x~0_2081) (< v_main_~x~0_2081 750001) .cse3 (= (+ v_main_~x~0_2081 v_main_~y~0_1634) (+ v_main_~x~0_2082 v_main_~y~0_1633))))) InVars {main_~y~0=v_main_~y~0_1634, main_#t~post5=|v_main_#t~post5_263|, main_~x~0=v_main_~x~0_2082, main_#t~post6=|v_main_#t~post6_561|} OutVars{main_~y~0=v_main_~y~0_1633, main_#t~post5=|v_main_#t~post5_262|, main_~x~0=v_main_~x~0_2081, main_#t~post6=|v_main_#t~post6_557|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {39627#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:59:26,226 INFO L290 TraceCheckUtils]: 9: Hoare triple {39627#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [315] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {39627#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:59:26,227 INFO L290 TraceCheckUtils]: 8: Hoare triple {39637#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [314] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~x~0_2080 v_main_~x~0_2079)) (.cse0 (<= 750000 v_main_~x~0_2080)) (.cse2 (= v_main_~y~0_1632 v_main_~y~0_1631)) (.cse3 (= |v_main_#t~post6_558| |v_main_#t~post6_556|))) (or (and .cse0 (< v_main_~y~0_1632 v_main_~y~0_1631) (= (+ v_main_~x~0_2080 (* 2 v_main_~y~0_1631)) (+ v_main_~x~0_2079 (* 2 v_main_~y~0_1632))) (< v_main_~y~0_1631 (+ 2 v_main_~y~0_1632 (div (+ (* (- 1) v_main_~x~0_2080) 999999) 2)))) (and .cse1 .cse2 .cse3) (and .cse1 (or (not (< v_main_~x~0_2080 1000000)) (not .cse0)) .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1632, main_~x~0=v_main_~x~0_2080, main_#t~post6=|v_main_#t~post6_558|} OutVars{main_~y~0=v_main_~y~0_1631, main_~x~0=v_main_~x~0_2079, main_#t~post6=|v_main_#t~post6_556|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {39627#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:59:26,228 INFO L290 TraceCheckUtils]: 7: Hoare triple {39637#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [313] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {39637#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:59:26,229 INFO L290 TraceCheckUtils]: 6: Hoare triple {39637#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [312] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2078 v_main_~x~0_2077))) (or (and .cse0 (= |v_main_#t~post4_309| |v_main_#t~post4_310|) (<= 500000 v_main_~x~0_2078)) (and .cse0 (= |v_main_#t~post4_310| |v_main_#t~post4_309|)) (and (< v_main_~x~0_2077 500001) (< v_main_~x~0_2078 v_main_~x~0_2077)))) InVars {main_~x~0=v_main_~x~0_2078, main_#t~post4=|v_main_#t~post4_310|} OutVars{main_~x~0=v_main_~x~0_2077, main_#t~post4=|v_main_#t~post4_309|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {39637#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:59:26,229 INFO L290 TraceCheckUtils]: 5: Hoare triple {39553#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {39637#(and (or (not (<= 750000 main_~x~0)) (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ 1000000 (* (- 1) main_~x~0)) (- 2)) 1) 0)) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 03:59:26,229 INFO L272 TraceCheckUtils]: 4: Hoare triple {39553#true} call #t~ret7 := main(); {39553#true} is VALID [2022-04-28 03:59:26,229 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {39553#true} {39553#true} #48#return; {39553#true} is VALID [2022-04-28 03:59:26,230 INFO L290 TraceCheckUtils]: 2: Hoare triple {39553#true} assume true; {39553#true} is VALID [2022-04-28 03:59:26,230 INFO L290 TraceCheckUtils]: 1: Hoare triple {39553#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {39553#true} is VALID [2022-04-28 03:59:26,230 INFO L272 TraceCheckUtils]: 0: Hoare triple {39553#true} call ULTIMATE.init(); {39553#true} is VALID [2022-04-28 03:59:26,230 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:59:26,230 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1796070478] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:59:26,230 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:59:26,230 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:59:28,145 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:59:28,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [111677870] [2022-04-28 03:59:28,145 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [111677870] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:59:28,146 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:59:28,146 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [50] imperfect sequences [] total 50 [2022-04-28 03:59:28,146 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [64560745] [2022-04-28 03:59:28,146 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:59:28,146 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 50 states have (on average 3.78) internal successors, (189), 49 states have internal predecessors, (189), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 193 [2022-04-28 03:59:28,146 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:59:28,146 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 50 states, 50 states have (on average 3.78) internal successors, (189), 49 states have internal predecessors, (189), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:28,276 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 193 edges. 193 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:59:28,277 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2022-04-28 03:59:28,277 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:59:28,277 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2022-04-28 03:59:28,277 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=325, Invalid=3097, Unknown=0, NotChecked=0, Total=3422 [2022-04-28 03:59:28,278 INFO L87 Difference]: Start difference. First operand 196 states and 200 transitions. Second operand has 50 states, 50 states have (on average 3.78) internal successors, (189), 49 states have internal predecessors, (189), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:45,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:59:45,071 INFO L93 Difference]: Finished difference Result 223 states and 232 transitions. [2022-04-28 03:59:45,071 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2022-04-28 03:59:45,071 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 50 states have (on average 3.78) internal successors, (189), 49 states have internal predecessors, (189), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 193 [2022-04-28 03:59:45,071 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 03:59:45,071 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50 states, 50 states have (on average 3.78) internal successors, (189), 49 states have internal predecessors, (189), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:45,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 212 transitions. [2022-04-28 03:59:45,073 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50 states, 50 states have (on average 3.78) internal successors, (189), 49 states have internal predecessors, (189), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:45,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 212 transitions. [2022-04-28 03:59:45,074 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 50 states and 212 transitions. [2022-04-28 03:59:45,238 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 212 edges. 212 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:59:45,241 INFO L225 Difference]: With dead ends: 223 [2022-04-28 03:59:45,241 INFO L226 Difference]: Without dead ends: 205 [2022-04-28 03:59:45,242 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 273 GetRequests, 168 SyntacticMatches, 1 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1754 ImplicationChecksByTransitivity, 2.6s TimeCoverageRelationStatistics Valid=710, Invalid=10420, Unknown=0, NotChecked=0, Total=11130 [2022-04-28 03:59:45,242 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 146 mSDsluCounter, 237 mSDsCounter, 0 mSdLazyCounter, 8837 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 146 SdHoareTripleChecker+Valid, 293 SdHoareTripleChecker+Invalid, 8887 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 8837 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.5s IncrementalHoareTripleChecker+Time [2022-04-28 03:59:45,242 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [146 Valid, 293 Invalid, 8887 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 8837 Invalid, 0 Unknown, 0 Unchecked, 6.5s Time] [2022-04-28 03:59:45,243 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2022-04-28 03:59:48,977 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 200. [2022-04-28 03:59:48,977 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 03:59:48,977 INFO L82 GeneralOperation]: Start isEquivalent. First operand 205 states. Second operand has 200 states, 195 states have (on average 1.0256410256410255) internal successors, (200), 195 states have internal predecessors, (200), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:48,977 INFO L74 IsIncluded]: Start isIncluded. First operand 205 states. Second operand has 200 states, 195 states have (on average 1.0256410256410255) internal successors, (200), 195 states have internal predecessors, (200), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:48,977 INFO L87 Difference]: Start difference. First operand 205 states. Second operand has 200 states, 195 states have (on average 1.0256410256410255) internal successors, (200), 195 states have internal predecessors, (200), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:48,980 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:59:48,980 INFO L93 Difference]: Finished difference Result 205 states and 209 transitions. [2022-04-28 03:59:48,980 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 209 transitions. [2022-04-28 03:59:48,980 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:59:48,980 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:59:48,981 INFO L74 IsIncluded]: Start isIncluded. First operand has 200 states, 195 states have (on average 1.0256410256410255) internal successors, (200), 195 states have internal predecessors, (200), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 205 states. [2022-04-28 03:59:48,981 INFO L87 Difference]: Start difference. First operand has 200 states, 195 states have (on average 1.0256410256410255) internal successors, (200), 195 states have internal predecessors, (200), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 205 states. [2022-04-28 03:59:48,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 03:59:48,984 INFO L93 Difference]: Finished difference Result 205 states and 209 transitions. [2022-04-28 03:59:48,984 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 209 transitions. [2022-04-28 03:59:48,984 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 03:59:48,984 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 03:59:48,984 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 03:59:48,984 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 03:59:48,985 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 200 states, 195 states have (on average 1.0256410256410255) internal successors, (200), 195 states have internal predecessors, (200), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:48,987 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 200 states to 200 states and 204 transitions. [2022-04-28 03:59:48,988 INFO L78 Accepts]: Start accepts. Automaton has 200 states and 204 transitions. Word has length 193 [2022-04-28 03:59:48,988 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 03:59:48,988 INFO L495 AbstractCegarLoop]: Abstraction has 200 states and 204 transitions. [2022-04-28 03:59:48,988 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 50 states have (on average 3.78) internal successors, (189), 49 states have internal predecessors, (189), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:48,988 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 200 states and 204 transitions. [2022-04-28 03:59:49,586 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 204 edges. 204 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:59:49,586 INFO L276 IsEmpty]: Start isEmpty. Operand 200 states and 204 transitions. [2022-04-28 03:59:49,587 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 198 [2022-04-28 03:59:49,587 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 03:59:49,587 INFO L195 NwaCegarLoop]: trace histogram [47, 46, 46, 45, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 03:59:49,603 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Ended with exit code 0 [2022-04-28 03:59:49,787 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 45 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable45 [2022-04-28 03:59:49,787 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 03:59:49,787 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 03:59:49,788 INFO L85 PathProgramCache]: Analyzing trace with hash -152511509, now seen corresponding path program 44 times [2022-04-28 03:59:49,788 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 03:59:49,788 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1761236758] [2022-04-28 03:59:52,607 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:59:52,864 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:59:53,102 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 03:59:53,108 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 03:59:53,113 INFO L85 PathProgramCache]: Analyzing trace with hash -247392857, now seen corresponding path program 1 times [2022-04-28 03:59:53,113 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 03:59:53,113 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1689110583] [2022-04-28 03:59:53,113 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:59:53,113 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 03:59:53,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:59:53,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 03:59:53,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:59:53,168 INFO L290 TraceCheckUtils]: 0: Hoare triple {41068#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {41060#true} is VALID [2022-04-28 03:59:53,168 INFO L290 TraceCheckUtils]: 1: Hoare triple {41060#true} assume true; {41060#true} is VALID [2022-04-28 03:59:53,168 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {41060#true} {41060#true} #48#return; {41060#true} is VALID [2022-04-28 03:59:53,168 INFO L272 TraceCheckUtils]: 0: Hoare triple {41060#true} call ULTIMATE.init(); {41068#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 03:59:53,168 INFO L290 TraceCheckUtils]: 1: Hoare triple {41068#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {41060#true} is VALID [2022-04-28 03:59:53,169 INFO L290 TraceCheckUtils]: 2: Hoare triple {41060#true} assume true; {41060#true} is VALID [2022-04-28 03:59:53,169 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {41060#true} {41060#true} #48#return; {41060#true} is VALID [2022-04-28 03:59:53,169 INFO L272 TraceCheckUtils]: 4: Hoare triple {41060#true} call #t~ret7 := main(); {41060#true} is VALID [2022-04-28 03:59:53,169 INFO L290 TraceCheckUtils]: 5: Hoare triple {41060#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {41065#(= main_~x~0 0)} is VALID [2022-04-28 03:59:53,170 INFO L290 TraceCheckUtils]: 6: Hoare triple {41065#(= main_~x~0 0)} [318] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_317| |v_main_#t~post4_316|)) (.cse1 (= v_main_~x~0_2148 v_main_~x~0_2147))) (or (and .cse0 .cse1) (and .cse0 .cse1 (<= 500000 v_main_~x~0_2148)) (and (< v_main_~x~0_2147 500001) (< v_main_~x~0_2148 v_main_~x~0_2147)))) InVars {main_~x~0=v_main_~x~0_2148, main_#t~post4=|v_main_#t~post4_317|} OutVars{main_~x~0=v_main_~x~0_2147, main_#t~post4=|v_main_#t~post4_316|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {41066#(<= main_~x~0 500000)} is VALID [2022-04-28 03:59:53,170 INFO L290 TraceCheckUtils]: 7: Hoare triple {41066#(<= main_~x~0 500000)} [319] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {41066#(<= main_~x~0 500000)} is VALID [2022-04-28 03:59:53,171 INFO L290 TraceCheckUtils]: 8: Hoare triple {41066#(<= main_~x~0 500000)} [320] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_2150)) (.cse1 (= v_main_~y~0_1692 v_main_~y~0_1691)) (.cse2 (= |v_main_#t~post6_571| |v_main_#t~post6_569|))) (or (and (< v_main_~y~0_1692 v_main_~y~0_1691) (< v_main_~y~0_1691 (+ 2 (div (+ (* (- 1) v_main_~x~0_2150) 999999) 2) v_main_~y~0_1692)) .cse0 (= (+ v_main_~x~0_2149 (* 2 v_main_~y~0_1692)) (+ v_main_~x~0_2150 (* 2 v_main_~y~0_1691)))) (and (= v_main_~x~0_2149 v_main_~x~0_2150) (or (not .cse0) (not (< v_main_~x~0_2150 1000000))) .cse1 .cse2) (and (= v_main_~x~0_2150 v_main_~x~0_2149) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_1692, main_~x~0=v_main_~x~0_2150, main_#t~post6=|v_main_#t~post6_571|} OutVars{main_~y~0=v_main_~y~0_1691, main_~x~0=v_main_~x~0_2149, main_#t~post6=|v_main_#t~post6_569|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {41067#(<= main_~x~0 999999)} is VALID [2022-04-28 03:59:53,171 INFO L290 TraceCheckUtils]: 9: Hoare triple {41067#(<= main_~x~0 999999)} [321] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {41067#(<= main_~x~0 999999)} is VALID [2022-04-28 03:59:53,172 INFO L290 TraceCheckUtils]: 10: Hoare triple {41067#(<= main_~x~0 999999)} [322] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~x~0_2152 v_main_~x~0_2151)) (.cse2 (= |v_main_#t~post5_269| |v_main_#t~post5_268|)) (.cse3 (= v_main_~y~0_1694 v_main_~y~0_1693)) (.cse4 (= |v_main_#t~post6_574| |v_main_#t~post6_570|)) (.cse0 (<= 500000 v_main_~x~0_2152))) (or (and (or (not (< v_main_~x~0_2152 750000)) (not .cse0)) .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4) (let ((.cse5 (+ v_main_~x~0_2152 v_main_~y~0_1693))) (and (= (+ v_main_~x~0_2151 v_main_~y~0_1694) .cse5) (< v_main_~y~0_1694 v_main_~y~0_1693) (< .cse5 (+ 750001 v_main_~y~0_1694)) .cse0)))) InVars {main_~y~0=v_main_~y~0_1694, main_#t~post5=|v_main_#t~post5_269|, main_~x~0=v_main_~x~0_2152, main_#t~post6=|v_main_#t~post6_574|} OutVars{main_~y~0=v_main_~y~0_1693, main_#t~post5=|v_main_#t~post5_268|, main_~x~0=v_main_~x~0_2151, main_#t~post6=|v_main_#t~post6_570|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {41067#(<= main_~x~0 999999)} is VALID [2022-04-28 03:59:53,173 INFO L290 TraceCheckUtils]: 11: Hoare triple {41067#(<= main_~x~0 999999)} [317] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {41061#false} is VALID [2022-04-28 03:59:53,173 INFO L272 TraceCheckUtils]: 12: Hoare triple {41061#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {41061#false} is VALID [2022-04-28 03:59:53,173 INFO L290 TraceCheckUtils]: 13: Hoare triple {41061#false} ~cond := #in~cond; {41061#false} is VALID [2022-04-28 03:59:53,173 INFO L290 TraceCheckUtils]: 14: Hoare triple {41061#false} assume 0 == ~cond; {41061#false} is VALID [2022-04-28 03:59:53,173 INFO L290 TraceCheckUtils]: 15: Hoare triple {41061#false} assume !false; {41061#false} is VALID [2022-04-28 03:59:53,173 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-04-28 03:59:53,173 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 03:59:53,173 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1689110583] [2022-04-28 03:59:53,173 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1689110583] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 03:59:53,174 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [644592384] [2022-04-28 03:59:53,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 03:59:53,174 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 03:59:53,174 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 03:59:53,176 INFO L229 MonitoredProcess]: Starting monitored process 46 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 03:59:53,177 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Waiting until timeout for monitored process [2022-04-28 03:59:53,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:59:53,209 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 03:59:53,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 03:59:53,219 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 03:59:53,428 INFO L272 TraceCheckUtils]: 0: Hoare triple {41060#true} call ULTIMATE.init(); {41060#true} is VALID [2022-04-28 03:59:53,428 INFO L290 TraceCheckUtils]: 1: Hoare triple {41060#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {41060#true} is VALID [2022-04-28 03:59:53,428 INFO L290 TraceCheckUtils]: 2: Hoare triple {41060#true} assume true; {41060#true} is VALID [2022-04-28 03:59:53,428 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {41060#true} {41060#true} #48#return; {41060#true} is VALID [2022-04-28 03:59:53,428 INFO L272 TraceCheckUtils]: 4: Hoare triple {41060#true} call #t~ret7 := main(); {41060#true} is VALID [2022-04-28 03:59:53,428 INFO L290 TraceCheckUtils]: 5: Hoare triple {41060#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {41087#(<= main_~x~0 0)} is VALID [2022-04-28 03:59:53,429 INFO L290 TraceCheckUtils]: 6: Hoare triple {41087#(<= main_~x~0 0)} [318] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_317| |v_main_#t~post4_316|)) (.cse1 (= v_main_~x~0_2148 v_main_~x~0_2147))) (or (and .cse0 .cse1) (and .cse0 .cse1 (<= 500000 v_main_~x~0_2148)) (and (< v_main_~x~0_2147 500001) (< v_main_~x~0_2148 v_main_~x~0_2147)))) InVars {main_~x~0=v_main_~x~0_2148, main_#t~post4=|v_main_#t~post4_317|} OutVars{main_~x~0=v_main_~x~0_2147, main_#t~post4=|v_main_#t~post4_316|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {41066#(<= main_~x~0 500000)} is VALID [2022-04-28 03:59:53,429 INFO L290 TraceCheckUtils]: 7: Hoare triple {41066#(<= main_~x~0 500000)} [319] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {41066#(<= main_~x~0 500000)} is VALID [2022-04-28 03:59:53,430 INFO L290 TraceCheckUtils]: 8: Hoare triple {41066#(<= main_~x~0 500000)} [320] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_2150)) (.cse1 (= v_main_~y~0_1692 v_main_~y~0_1691)) (.cse2 (= |v_main_#t~post6_571| |v_main_#t~post6_569|))) (or (and (< v_main_~y~0_1692 v_main_~y~0_1691) (< v_main_~y~0_1691 (+ 2 (div (+ (* (- 1) v_main_~x~0_2150) 999999) 2) v_main_~y~0_1692)) .cse0 (= (+ v_main_~x~0_2149 (* 2 v_main_~y~0_1692)) (+ v_main_~x~0_2150 (* 2 v_main_~y~0_1691)))) (and (= v_main_~x~0_2149 v_main_~x~0_2150) (or (not .cse0) (not (< v_main_~x~0_2150 1000000))) .cse1 .cse2) (and (= v_main_~x~0_2150 v_main_~x~0_2149) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_1692, main_~x~0=v_main_~x~0_2150, main_#t~post6=|v_main_#t~post6_571|} OutVars{main_~y~0=v_main_~y~0_1691, main_~x~0=v_main_~x~0_2149, main_#t~post6=|v_main_#t~post6_569|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {41066#(<= main_~x~0 500000)} is VALID [2022-04-28 03:59:53,430 INFO L290 TraceCheckUtils]: 9: Hoare triple {41066#(<= main_~x~0 500000)} [321] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {41066#(<= main_~x~0 500000)} is VALID [2022-04-28 03:59:53,431 INFO L290 TraceCheckUtils]: 10: Hoare triple {41066#(<= main_~x~0 500000)} [322] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~x~0_2152 v_main_~x~0_2151)) (.cse2 (= |v_main_#t~post5_269| |v_main_#t~post5_268|)) (.cse3 (= v_main_~y~0_1694 v_main_~y~0_1693)) (.cse4 (= |v_main_#t~post6_574| |v_main_#t~post6_570|)) (.cse0 (<= 500000 v_main_~x~0_2152))) (or (and (or (not (< v_main_~x~0_2152 750000)) (not .cse0)) .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4) (let ((.cse5 (+ v_main_~x~0_2152 v_main_~y~0_1693))) (and (= (+ v_main_~x~0_2151 v_main_~y~0_1694) .cse5) (< v_main_~y~0_1694 v_main_~y~0_1693) (< .cse5 (+ 750001 v_main_~y~0_1694)) .cse0)))) InVars {main_~y~0=v_main_~y~0_1694, main_#t~post5=|v_main_#t~post5_269|, main_~x~0=v_main_~x~0_2152, main_#t~post6=|v_main_#t~post6_574|} OutVars{main_~y~0=v_main_~y~0_1693, main_#t~post5=|v_main_#t~post5_268|, main_~x~0=v_main_~x~0_2151, main_#t~post6=|v_main_#t~post6_570|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {41103#(< main_~x~0 750001)} is VALID [2022-04-28 03:59:53,431 INFO L290 TraceCheckUtils]: 11: Hoare triple {41103#(< main_~x~0 750001)} [317] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {41061#false} is VALID [2022-04-28 03:59:53,432 INFO L272 TraceCheckUtils]: 12: Hoare triple {41061#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {41061#false} is VALID [2022-04-28 03:59:53,432 INFO L290 TraceCheckUtils]: 13: Hoare triple {41061#false} ~cond := #in~cond; {41061#false} is VALID [2022-04-28 03:59:53,432 INFO L290 TraceCheckUtils]: 14: Hoare triple {41061#false} assume 0 == ~cond; {41061#false} is VALID [2022-04-28 03:59:53,432 INFO L290 TraceCheckUtils]: 15: Hoare triple {41061#false} assume !false; {41061#false} is VALID [2022-04-28 03:59:53,432 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:59:53,432 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 03:59:53,848 INFO L290 TraceCheckUtils]: 15: Hoare triple {41061#false} assume !false; {41061#false} is VALID [2022-04-28 03:59:53,848 INFO L290 TraceCheckUtils]: 14: Hoare triple {41122#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {41061#false} is VALID [2022-04-28 03:59:53,848 INFO L290 TraceCheckUtils]: 13: Hoare triple {41126#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {41122#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 03:59:53,849 INFO L272 TraceCheckUtils]: 12: Hoare triple {41130#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {41126#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 03:59:53,850 INFO L290 TraceCheckUtils]: 11: Hoare triple {41134#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [317] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {41130#(= main_~x~0 1000000)} is VALID [2022-04-28 03:59:53,851 INFO L290 TraceCheckUtils]: 10: Hoare triple {41134#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [322] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= v_main_~x~0_2152 v_main_~x~0_2151)) (.cse2 (= |v_main_#t~post5_269| |v_main_#t~post5_268|)) (.cse3 (= v_main_~y~0_1694 v_main_~y~0_1693)) (.cse4 (= |v_main_#t~post6_574| |v_main_#t~post6_570|)) (.cse0 (<= 500000 v_main_~x~0_2152))) (or (and (or (not (< v_main_~x~0_2152 750000)) (not .cse0)) .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4) (let ((.cse5 (+ v_main_~x~0_2152 v_main_~y~0_1693))) (and (= (+ v_main_~x~0_2151 v_main_~y~0_1694) .cse5) (< v_main_~y~0_1694 v_main_~y~0_1693) (< .cse5 (+ 750001 v_main_~y~0_1694)) .cse0)))) InVars {main_~y~0=v_main_~y~0_1694, main_#t~post5=|v_main_#t~post5_269|, main_~x~0=v_main_~x~0_2152, main_#t~post6=|v_main_#t~post6_574|} OutVars{main_~y~0=v_main_~y~0_1693, main_#t~post5=|v_main_#t~post5_268|, main_~x~0=v_main_~x~0_2151, main_#t~post6=|v_main_#t~post6_570|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {41134#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:59:53,851 INFO L290 TraceCheckUtils]: 9: Hoare triple {41134#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [321] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {41134#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:59:53,852 INFO L290 TraceCheckUtils]: 8: Hoare triple {41144#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [320] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_2150)) (.cse1 (= v_main_~y~0_1692 v_main_~y~0_1691)) (.cse2 (= |v_main_#t~post6_571| |v_main_#t~post6_569|))) (or (and (< v_main_~y~0_1692 v_main_~y~0_1691) (< v_main_~y~0_1691 (+ 2 (div (+ (* (- 1) v_main_~x~0_2150) 999999) 2) v_main_~y~0_1692)) .cse0 (= (+ v_main_~x~0_2149 (* 2 v_main_~y~0_1692)) (+ v_main_~x~0_2150 (* 2 v_main_~y~0_1691)))) (and (= v_main_~x~0_2149 v_main_~x~0_2150) (or (not .cse0) (not (< v_main_~x~0_2150 1000000))) .cse1 .cse2) (and (= v_main_~x~0_2150 v_main_~x~0_2149) .cse1 .cse2))) InVars {main_~y~0=v_main_~y~0_1692, main_~x~0=v_main_~x~0_2150, main_#t~post6=|v_main_#t~post6_571|} OutVars{main_~y~0=v_main_~y~0_1691, main_~x~0=v_main_~x~0_2149, main_#t~post6=|v_main_#t~post6_569|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {41134#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 03:59:53,853 INFO L290 TraceCheckUtils]: 7: Hoare triple {41144#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [319] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {41144#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:59:53,854 INFO L290 TraceCheckUtils]: 6: Hoare triple {41144#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [318] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_317| |v_main_#t~post4_316|)) (.cse1 (= v_main_~x~0_2148 v_main_~x~0_2147))) (or (and .cse0 .cse1) (and .cse0 .cse1 (<= 500000 v_main_~x~0_2148)) (and (< v_main_~x~0_2147 500001) (< v_main_~x~0_2148 v_main_~x~0_2147)))) InVars {main_~x~0=v_main_~x~0_2148, main_#t~post4=|v_main_#t~post4_317|} OutVars{main_~x~0=v_main_~x~0_2147, main_#t~post4=|v_main_#t~post4_316|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {41144#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:59:53,854 INFO L290 TraceCheckUtils]: 5: Hoare triple {41060#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {41144#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 03:59:53,854 INFO L272 TraceCheckUtils]: 4: Hoare triple {41060#true} call #t~ret7 := main(); {41060#true} is VALID [2022-04-28 03:59:53,854 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {41060#true} {41060#true} #48#return; {41060#true} is VALID [2022-04-28 03:59:53,854 INFO L290 TraceCheckUtils]: 2: Hoare triple {41060#true} assume true; {41060#true} is VALID [2022-04-28 03:59:53,854 INFO L290 TraceCheckUtils]: 1: Hoare triple {41060#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {41060#true} is VALID [2022-04-28 03:59:53,854 INFO L272 TraceCheckUtils]: 0: Hoare triple {41060#true} call ULTIMATE.init(); {41060#true} is VALID [2022-04-28 03:59:53,855 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 03:59:53,855 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [644592384] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 03:59:53,855 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 03:59:53,855 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 13 [2022-04-28 03:59:55,843 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 03:59:55,843 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1761236758] [2022-04-28 03:59:55,843 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1761236758] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 03:59:55,843 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 03:59:55,843 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [51] imperfect sequences [] total 51 [2022-04-28 03:59:55,843 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [905135505] [2022-04-28 03:59:55,843 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 03:59:55,843 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 51 states have (on average 3.784313725490196) internal successors, (193), 50 states have internal predecessors, (193), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 197 [2022-04-28 03:59:55,844 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 03:59:55,844 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 51 states, 51 states have (on average 3.784313725490196) internal successors, (193), 50 states have internal predecessors, (193), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 03:59:55,978 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 197 edges. 197 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 03:59:55,978 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-04-28 03:59:55,978 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 03:59:55,978 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-04-28 03:59:55,978 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=340, Invalid=3320, Unknown=0, NotChecked=0, Total=3660 [2022-04-28 03:59:55,979 INFO L87 Difference]: Start difference. First operand 200 states and 204 transitions. Second operand has 51 states, 51 states have (on average 3.784313725490196) internal successors, (193), 50 states have internal predecessors, (193), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:13,289 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 04:00:13,290 INFO L93 Difference]: Finished difference Result 227 states and 236 transitions. [2022-04-28 04:00:13,290 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2022-04-28 04:00:13,290 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 51 states have (on average 3.784313725490196) internal successors, (193), 50 states have internal predecessors, (193), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 197 [2022-04-28 04:00:13,290 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 04:00:13,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 51 states have (on average 3.784313725490196) internal successors, (193), 50 states have internal predecessors, (193), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:13,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 216 transitions. [2022-04-28 04:00:13,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 51 states have (on average 3.784313725490196) internal successors, (193), 50 states have internal predecessors, (193), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:13,293 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 216 transitions. [2022-04-28 04:00:13,293 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 51 states and 216 transitions. [2022-04-28 04:00:13,459 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 216 edges. 216 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 04:00:13,469 INFO L225 Difference]: With dead ends: 227 [2022-04-28 04:00:13,469 INFO L226 Difference]: Without dead ends: 209 [2022-04-28 04:00:13,470 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 278 GetRequests, 169 SyntacticMatches, 2 SemanticMatches, 107 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1963 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=733, Invalid=11039, Unknown=0, NotChecked=0, Total=11772 [2022-04-28 04:00:13,470 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 150 mSDsluCounter, 237 mSDsCounter, 0 mSdLazyCounter, 9029 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 150 SdHoareTripleChecker+Valid, 294 SdHoareTripleChecker+Invalid, 9080 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 9029 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.7s IncrementalHoareTripleChecker+Time [2022-04-28 04:00:13,470 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [150 Valid, 294 Invalid, 9080 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 9029 Invalid, 0 Unknown, 0 Unchecked, 6.7s Time] [2022-04-28 04:00:13,471 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209 states. [2022-04-28 04:00:17,383 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209 to 204. [2022-04-28 04:00:17,384 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 04:00:17,384 INFO L82 GeneralOperation]: Start isEquivalent. First operand 209 states. Second operand has 204 states, 199 states have (on average 1.0251256281407035) internal successors, (204), 199 states have internal predecessors, (204), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:17,384 INFO L74 IsIncluded]: Start isIncluded. First operand 209 states. Second operand has 204 states, 199 states have (on average 1.0251256281407035) internal successors, (204), 199 states have internal predecessors, (204), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:17,384 INFO L87 Difference]: Start difference. First operand 209 states. Second operand has 204 states, 199 states have (on average 1.0251256281407035) internal successors, (204), 199 states have internal predecessors, (204), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:17,386 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 04:00:17,386 INFO L93 Difference]: Finished difference Result 209 states and 213 transitions. [2022-04-28 04:00:17,386 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 213 transitions. [2022-04-28 04:00:17,386 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 04:00:17,386 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 04:00:17,386 INFO L74 IsIncluded]: Start isIncluded. First operand has 204 states, 199 states have (on average 1.0251256281407035) internal successors, (204), 199 states have internal predecessors, (204), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 209 states. [2022-04-28 04:00:17,387 INFO L87 Difference]: Start difference. First operand has 204 states, 199 states have (on average 1.0251256281407035) internal successors, (204), 199 states have internal predecessors, (204), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 209 states. [2022-04-28 04:00:17,389 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 04:00:17,389 INFO L93 Difference]: Finished difference Result 209 states and 213 transitions. [2022-04-28 04:00:17,389 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 213 transitions. [2022-04-28 04:00:17,389 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 04:00:17,389 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 04:00:17,389 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 04:00:17,389 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 04:00:17,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 199 states have (on average 1.0251256281407035) internal successors, (204), 199 states have internal predecessors, (204), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:17,391 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 208 transitions. [2022-04-28 04:00:17,391 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 208 transitions. Word has length 197 [2022-04-28 04:00:17,391 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 04:00:17,392 INFO L495 AbstractCegarLoop]: Abstraction has 204 states and 208 transitions. [2022-04-28 04:00:17,392 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 51 states have (on average 3.784313725490196) internal successors, (193), 50 states have internal predecessors, (193), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:17,392 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 204 states and 208 transitions. [2022-04-28 04:00:18,014 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 208 edges. 208 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 04:00:18,014 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 208 transitions. [2022-04-28 04:00:18,014 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 202 [2022-04-28 04:00:18,014 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 04:00:18,015 INFO L195 NwaCegarLoop]: trace histogram [48, 47, 47, 46, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 04:00:18,030 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Forceful destruction successful, exit code 0 [2022-04-28 04:00:18,215 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 46 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-04-28 04:00:18,215 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 04:00:18,216 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 04:00:18,216 INFO L85 PathProgramCache]: Analyzing trace with hash 187090370, now seen corresponding path program 45 times [2022-04-28 04:00:18,216 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 04:00:18,216 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [984487522] [2022-04-28 04:00:22,283 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 04:00:22,331 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 04:00:23,547 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 04:00:23,680 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 04:00:23,896 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 04:00:23,897 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 04:00:23,900 INFO L85 PathProgramCache]: Analyzing trace with hash -606967833, now seen corresponding path program 1 times [2022-04-28 04:00:23,900 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 04:00:23,900 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1765703348] [2022-04-28 04:00:23,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 04:00:23,901 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 04:00:23,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:00:23,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 04:00:23,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:00:23,953 INFO L290 TraceCheckUtils]: 0: Hoare triple {42603#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {42595#true} is VALID [2022-04-28 04:00:23,954 INFO L290 TraceCheckUtils]: 1: Hoare triple {42595#true} assume true; {42595#true} is VALID [2022-04-28 04:00:23,954 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {42595#true} {42595#true} #48#return; {42595#true} is VALID [2022-04-28 04:00:23,954 INFO L272 TraceCheckUtils]: 0: Hoare triple {42595#true} call ULTIMATE.init(); {42603#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 04:00:23,954 INFO L290 TraceCheckUtils]: 1: Hoare triple {42603#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {42595#true} is VALID [2022-04-28 04:00:23,954 INFO L290 TraceCheckUtils]: 2: Hoare triple {42595#true} assume true; {42595#true} is VALID [2022-04-28 04:00:23,954 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {42595#true} {42595#true} #48#return; {42595#true} is VALID [2022-04-28 04:00:23,955 INFO L272 TraceCheckUtils]: 4: Hoare triple {42595#true} call #t~ret7 := main(); {42595#true} is VALID [2022-04-28 04:00:23,955 INFO L290 TraceCheckUtils]: 5: Hoare triple {42595#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {42600#(= main_~x~0 0)} is VALID [2022-04-28 04:00:23,955 INFO L290 TraceCheckUtils]: 6: Hoare triple {42600#(= main_~x~0 0)} [324] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2219 v_main_~x~0_2218)) (.cse1 (= |v_main_#t~post4_324| |v_main_#t~post4_323|))) (or (and (< v_main_~x~0_2218 500001) (< v_main_~x~0_2219 v_main_~x~0_2218)) (and (<= 500000 v_main_~x~0_2219) .cse0 .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2219, main_#t~post4=|v_main_#t~post4_324|} OutVars{main_~x~0=v_main_~x~0_2218, main_#t~post4=|v_main_#t~post4_323|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {42601#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:23,956 INFO L290 TraceCheckUtils]: 7: Hoare triple {42601#(<= main_~x~0 500000)} [325] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {42601#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:23,957 INFO L290 TraceCheckUtils]: 8: Hoare triple {42601#(<= main_~x~0 500000)} [326] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2221 v_main_~x~0_2220)) (.cse1 (= |v_main_#t~post6_584| |v_main_#t~post6_582|)) (.cse2 (= v_main_~y~0_1753 v_main_~y~0_1752)) (.cse3 (<= 750000 v_main_~x~0_2221))) (or (and .cse0 .cse1 .cse2) (and .cse0 .cse1 .cse2 (or (not .cse3) (not (< v_main_~x~0_2221 1000000)))) (and (= (+ v_main_~x~0_2220 (* 2 v_main_~y~0_1753)) (+ v_main_~x~0_2221 (* 2 v_main_~y~0_1752))) (< v_main_~y~0_1752 (+ 2 (div (+ 999999 (* (- 1) v_main_~x~0_2221)) 2) v_main_~y~0_1753)) (< v_main_~y~0_1753 v_main_~y~0_1752) .cse3))) InVars {main_~y~0=v_main_~y~0_1753, main_~x~0=v_main_~x~0_2221, main_#t~post6=|v_main_#t~post6_584|} OutVars{main_~y~0=v_main_~y~0_1752, main_~x~0=v_main_~x~0_2220, main_#t~post6=|v_main_#t~post6_582|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {42601#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:23,957 INFO L290 TraceCheckUtils]: 9: Hoare triple {42601#(<= main_~x~0 500000)} [327] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {42601#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:23,958 INFO L290 TraceCheckUtils]: 10: Hoare triple {42601#(<= main_~x~0 500000)} [328] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2223 v_main_~x~0_2222)) (.cse5 (<= 500000 v_main_~x~0_2223)) (.cse1 (= |v_main_#t~post5_275| |v_main_#t~post5_274|)) (.cse2 (= |v_main_#t~post6_587| |v_main_#t~post6_583|)) (.cse3 (= v_main_~y~0_1755 v_main_~y~0_1754))) (or (and .cse0 .cse1 .cse2 .cse3) (let ((.cse4 (+ v_main_~x~0_2223 v_main_~y~0_1754))) (and (< v_main_~y~0_1755 v_main_~y~0_1754) (= (+ v_main_~x~0_2222 v_main_~y~0_1755) .cse4) (< .cse4 (+ 750001 v_main_~y~0_1755)) .cse5)) (and .cse0 (or (not .cse5) (not (< v_main_~x~0_2223 750000))) .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1755, main_#t~post5=|v_main_#t~post5_275|, main_~x~0=v_main_~x~0_2223, main_#t~post6=|v_main_#t~post6_587|} OutVars{main_~y~0=v_main_~y~0_1754, main_#t~post5=|v_main_#t~post5_274|, main_~x~0=v_main_~x~0_2222, main_#t~post6=|v_main_#t~post6_583|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {42602#(<= main_~x~0 750000)} is VALID [2022-04-28 04:00:23,958 INFO L290 TraceCheckUtils]: 11: Hoare triple {42602#(<= main_~x~0 750000)} [323] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {42596#false} is VALID [2022-04-28 04:00:23,959 INFO L272 TraceCheckUtils]: 12: Hoare triple {42596#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {42596#false} is VALID [2022-04-28 04:00:23,959 INFO L290 TraceCheckUtils]: 13: Hoare triple {42596#false} ~cond := #in~cond; {42596#false} is VALID [2022-04-28 04:00:23,959 INFO L290 TraceCheckUtils]: 14: Hoare triple {42596#false} assume 0 == ~cond; {42596#false} is VALID [2022-04-28 04:00:23,962 INFO L290 TraceCheckUtils]: 15: Hoare triple {42596#false} assume !false; {42596#false} is VALID [2022-04-28 04:00:23,962 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 04:00:23,962 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 04:00:23,962 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1765703348] [2022-04-28 04:00:23,962 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1765703348] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 04:00:23,962 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [657604366] [2022-04-28 04:00:23,962 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 04:00:23,962 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 04:00:23,963 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 04:00:23,964 INFO L229 MonitoredProcess]: Starting monitored process 47 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 04:00:23,976 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Waiting until timeout for monitored process [2022-04-28 04:00:24,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:00:24,003 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 04:00:24,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:00:24,012 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 04:00:24,191 INFO L272 TraceCheckUtils]: 0: Hoare triple {42595#true} call ULTIMATE.init(); {42595#true} is VALID [2022-04-28 04:00:24,192 INFO L290 TraceCheckUtils]: 1: Hoare triple {42595#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {42595#true} is VALID [2022-04-28 04:00:24,192 INFO L290 TraceCheckUtils]: 2: Hoare triple {42595#true} assume true; {42595#true} is VALID [2022-04-28 04:00:24,192 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {42595#true} {42595#true} #48#return; {42595#true} is VALID [2022-04-28 04:00:24,192 INFO L272 TraceCheckUtils]: 4: Hoare triple {42595#true} call #t~ret7 := main(); {42595#true} is VALID [2022-04-28 04:00:24,192 INFO L290 TraceCheckUtils]: 5: Hoare triple {42595#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {42622#(<= main_~x~0 0)} is VALID [2022-04-28 04:00:24,193 INFO L290 TraceCheckUtils]: 6: Hoare triple {42622#(<= main_~x~0 0)} [324] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2219 v_main_~x~0_2218)) (.cse1 (= |v_main_#t~post4_324| |v_main_#t~post4_323|))) (or (and (< v_main_~x~0_2218 500001) (< v_main_~x~0_2219 v_main_~x~0_2218)) (and (<= 500000 v_main_~x~0_2219) .cse0 .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2219, main_#t~post4=|v_main_#t~post4_324|} OutVars{main_~x~0=v_main_~x~0_2218, main_#t~post4=|v_main_#t~post4_323|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {42601#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:24,193 INFO L290 TraceCheckUtils]: 7: Hoare triple {42601#(<= main_~x~0 500000)} [325] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {42601#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:24,194 INFO L290 TraceCheckUtils]: 8: Hoare triple {42601#(<= main_~x~0 500000)} [326] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2221 v_main_~x~0_2220)) (.cse1 (= |v_main_#t~post6_584| |v_main_#t~post6_582|)) (.cse2 (= v_main_~y~0_1753 v_main_~y~0_1752)) (.cse3 (<= 750000 v_main_~x~0_2221))) (or (and .cse0 .cse1 .cse2) (and .cse0 .cse1 .cse2 (or (not .cse3) (not (< v_main_~x~0_2221 1000000)))) (and (= (+ v_main_~x~0_2220 (* 2 v_main_~y~0_1753)) (+ v_main_~x~0_2221 (* 2 v_main_~y~0_1752))) (< v_main_~y~0_1752 (+ 2 (div (+ 999999 (* (- 1) v_main_~x~0_2221)) 2) v_main_~y~0_1753)) (< v_main_~y~0_1753 v_main_~y~0_1752) .cse3))) InVars {main_~y~0=v_main_~y~0_1753, main_~x~0=v_main_~x~0_2221, main_#t~post6=|v_main_#t~post6_584|} OutVars{main_~y~0=v_main_~y~0_1752, main_~x~0=v_main_~x~0_2220, main_#t~post6=|v_main_#t~post6_582|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {42601#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:24,194 INFO L290 TraceCheckUtils]: 9: Hoare triple {42601#(<= main_~x~0 500000)} [327] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {42601#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:24,195 INFO L290 TraceCheckUtils]: 10: Hoare triple {42601#(<= main_~x~0 500000)} [328] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2223 v_main_~x~0_2222)) (.cse5 (<= 500000 v_main_~x~0_2223)) (.cse1 (= |v_main_#t~post5_275| |v_main_#t~post5_274|)) (.cse2 (= |v_main_#t~post6_587| |v_main_#t~post6_583|)) (.cse3 (= v_main_~y~0_1755 v_main_~y~0_1754))) (or (and .cse0 .cse1 .cse2 .cse3) (let ((.cse4 (+ v_main_~x~0_2223 v_main_~y~0_1754))) (and (< v_main_~y~0_1755 v_main_~y~0_1754) (= (+ v_main_~x~0_2222 v_main_~y~0_1755) .cse4) (< .cse4 (+ 750001 v_main_~y~0_1755)) .cse5)) (and .cse0 (or (not .cse5) (not (< v_main_~x~0_2223 750000))) .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1755, main_#t~post5=|v_main_#t~post5_275|, main_~x~0=v_main_~x~0_2223, main_#t~post6=|v_main_#t~post6_587|} OutVars{main_~y~0=v_main_~y~0_1754, main_#t~post5=|v_main_#t~post5_274|, main_~x~0=v_main_~x~0_2222, main_#t~post6=|v_main_#t~post6_583|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {42602#(<= main_~x~0 750000)} is VALID [2022-04-28 04:00:24,195 INFO L290 TraceCheckUtils]: 11: Hoare triple {42602#(<= main_~x~0 750000)} [323] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {42596#false} is VALID [2022-04-28 04:00:24,195 INFO L272 TraceCheckUtils]: 12: Hoare triple {42596#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {42596#false} is VALID [2022-04-28 04:00:24,195 INFO L290 TraceCheckUtils]: 13: Hoare triple {42596#false} ~cond := #in~cond; {42596#false} is VALID [2022-04-28 04:00:24,199 INFO L290 TraceCheckUtils]: 14: Hoare triple {42596#false} assume 0 == ~cond; {42596#false} is VALID [2022-04-28 04:00:24,199 INFO L290 TraceCheckUtils]: 15: Hoare triple {42596#false} assume !false; {42596#false} is VALID [2022-04-28 04:00:24,199 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 04:00:24,199 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 04:00:24,695 INFO L290 TraceCheckUtils]: 15: Hoare triple {42596#false} assume !false; {42596#false} is VALID [2022-04-28 04:00:24,695 INFO L290 TraceCheckUtils]: 14: Hoare triple {42656#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {42596#false} is VALID [2022-04-28 04:00:24,696 INFO L290 TraceCheckUtils]: 13: Hoare triple {42660#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {42656#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 04:00:24,696 INFO L272 TraceCheckUtils]: 12: Hoare triple {42664#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {42660#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 04:00:24,696 INFO L290 TraceCheckUtils]: 11: Hoare triple {42668#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [323] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {42664#(= main_~x~0 1000000)} is VALID [2022-04-28 04:00:24,697 INFO L290 TraceCheckUtils]: 10: Hoare triple {42668#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [328] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2223 v_main_~x~0_2222)) (.cse5 (<= 500000 v_main_~x~0_2223)) (.cse1 (= |v_main_#t~post5_275| |v_main_#t~post5_274|)) (.cse2 (= |v_main_#t~post6_587| |v_main_#t~post6_583|)) (.cse3 (= v_main_~y~0_1755 v_main_~y~0_1754))) (or (and .cse0 .cse1 .cse2 .cse3) (let ((.cse4 (+ v_main_~x~0_2223 v_main_~y~0_1754))) (and (< v_main_~y~0_1755 v_main_~y~0_1754) (= (+ v_main_~x~0_2222 v_main_~y~0_1755) .cse4) (< .cse4 (+ 750001 v_main_~y~0_1755)) .cse5)) (and .cse0 (or (not .cse5) (not (< v_main_~x~0_2223 750000))) .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1755, main_#t~post5=|v_main_#t~post5_275|, main_~x~0=v_main_~x~0_2223, main_#t~post6=|v_main_#t~post6_587|} OutVars{main_~y~0=v_main_~y~0_1754, main_#t~post5=|v_main_#t~post5_274|, main_~x~0=v_main_~x~0_2222, main_#t~post6=|v_main_#t~post6_583|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {42668#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 04:00:24,698 INFO L290 TraceCheckUtils]: 9: Hoare triple {42668#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [327] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {42668#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 04:00:24,699 INFO L290 TraceCheckUtils]: 8: Hoare triple {42678#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [326] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2221 v_main_~x~0_2220)) (.cse1 (= |v_main_#t~post6_584| |v_main_#t~post6_582|)) (.cse2 (= v_main_~y~0_1753 v_main_~y~0_1752)) (.cse3 (<= 750000 v_main_~x~0_2221))) (or (and .cse0 .cse1 .cse2) (and .cse0 .cse1 .cse2 (or (not .cse3) (not (< v_main_~x~0_2221 1000000)))) (and (= (+ v_main_~x~0_2220 (* 2 v_main_~y~0_1753)) (+ v_main_~x~0_2221 (* 2 v_main_~y~0_1752))) (< v_main_~y~0_1752 (+ 2 (div (+ 999999 (* (- 1) v_main_~x~0_2221)) 2) v_main_~y~0_1753)) (< v_main_~y~0_1753 v_main_~y~0_1752) .cse3))) InVars {main_~y~0=v_main_~y~0_1753, main_~x~0=v_main_~x~0_2221, main_#t~post6=|v_main_#t~post6_584|} OutVars{main_~y~0=v_main_~y~0_1752, main_~x~0=v_main_~x~0_2220, main_#t~post6=|v_main_#t~post6_582|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {42668#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 04:00:24,699 INFO L290 TraceCheckUtils]: 7: Hoare triple {42678#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [325] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {42678#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 04:00:24,700 INFO L290 TraceCheckUtils]: 6: Hoare triple {42678#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} [324] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2219 v_main_~x~0_2218)) (.cse1 (= |v_main_#t~post4_324| |v_main_#t~post4_323|))) (or (and (< v_main_~x~0_2218 500001) (< v_main_~x~0_2219 v_main_~x~0_2218)) (and (<= 500000 v_main_~x~0_2219) .cse0 .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2219, main_#t~post4=|v_main_#t~post4_324|} OutVars{main_~x~0=v_main_~x~0_2218, main_#t~post4=|v_main_#t~post4_323|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {42678#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 04:00:24,701 INFO L290 TraceCheckUtils]: 5: Hoare triple {42595#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {42678#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (not (<= 750000 main_~x~0)) (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2) (div (+ (- 1000001) main_~x~0) 2)) 0)))} is VALID [2022-04-28 04:00:24,701 INFO L272 TraceCheckUtils]: 4: Hoare triple {42595#true} call #t~ret7 := main(); {42595#true} is VALID [2022-04-28 04:00:24,701 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {42595#true} {42595#true} #48#return; {42595#true} is VALID [2022-04-28 04:00:24,701 INFO L290 TraceCheckUtils]: 2: Hoare triple {42595#true} assume true; {42595#true} is VALID [2022-04-28 04:00:24,701 INFO L290 TraceCheckUtils]: 1: Hoare triple {42595#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {42595#true} is VALID [2022-04-28 04:00:24,701 INFO L272 TraceCheckUtils]: 0: Hoare triple {42595#true} call ULTIMATE.init(); {42595#true} is VALID [2022-04-28 04:00:24,701 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 04:00:24,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [657604366] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 04:00:24,701 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 04:00:24,701 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 04:00:26,768 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 04:00:26,768 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [984487522] [2022-04-28 04:00:26,768 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [984487522] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 04:00:26,768 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 04:00:26,768 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [52] imperfect sequences [] total 52 [2022-04-28 04:00:26,768 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [768528821] [2022-04-28 04:00:26,768 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 04:00:26,769 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 52 states have (on average 3.7884615384615383) internal successors, (197), 51 states have internal predecessors, (197), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 201 [2022-04-28 04:00:26,769 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 04:00:26,769 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 52 states, 52 states have (on average 3.7884615384615383) internal successors, (197), 51 states have internal predecessors, (197), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:26,905 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 201 edges. 201 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 04:00:26,905 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-04-28 04:00:26,905 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 04:00:26,906 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-04-28 04:00:26,906 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=290, Invalid=3370, Unknown=0, NotChecked=0, Total=3660 [2022-04-28 04:00:26,906 INFO L87 Difference]: Start difference. First operand 204 states and 208 transitions. Second operand has 52 states, 52 states have (on average 3.7884615384615383) internal successors, (197), 51 states have internal predecessors, (197), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:45,185 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 04:00:45,186 INFO L93 Difference]: Finished difference Result 231 states and 240 transitions. [2022-04-28 04:00:45,186 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-04-28 04:00:45,186 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 52 states have (on average 3.7884615384615383) internal successors, (197), 51 states have internal predecessors, (197), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 201 [2022-04-28 04:00:45,186 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 04:00:45,186 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 52 states have (on average 3.7884615384615383) internal successors, (197), 51 states have internal predecessors, (197), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:45,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 220 transitions. [2022-04-28 04:00:45,188 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 52 states have (on average 3.7884615384615383) internal successors, (197), 51 states have internal predecessors, (197), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:45,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 220 transitions. [2022-04-28 04:00:45,189 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 52 states and 220 transitions. [2022-04-28 04:00:45,361 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 220 edges. 220 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 04:00:45,364 INFO L225 Difference]: With dead ends: 231 [2022-04-28 04:00:45,364 INFO L226 Difference]: Without dead ends: 213 [2022-04-28 04:00:45,365 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 283 GetRequests, 172 SyntacticMatches, 3 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1964 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=642, Invalid=11348, Unknown=0, NotChecked=0, Total=11990 [2022-04-28 04:00:45,365 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 153 mSDsluCounter, 242 mSDsCounter, 0 mSdLazyCounter, 9413 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 153 SdHoareTripleChecker+Valid, 300 SdHoareTripleChecker+Invalid, 9465 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 9413 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.1s IncrementalHoareTripleChecker+Time [2022-04-28 04:00:45,366 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [153 Valid, 300 Invalid, 9465 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 9413 Invalid, 0 Unknown, 0 Unchecked, 7.1s Time] [2022-04-28 04:00:45,366 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2022-04-28 04:00:49,468 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 208. [2022-04-28 04:00:49,469 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 04:00:49,469 INFO L82 GeneralOperation]: Start isEquivalent. First operand 213 states. Second operand has 208 states, 203 states have (on average 1.0246305418719213) internal successors, (208), 203 states have internal predecessors, (208), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:49,469 INFO L74 IsIncluded]: Start isIncluded. First operand 213 states. Second operand has 208 states, 203 states have (on average 1.0246305418719213) internal successors, (208), 203 states have internal predecessors, (208), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:49,469 INFO L87 Difference]: Start difference. First operand 213 states. Second operand has 208 states, 203 states have (on average 1.0246305418719213) internal successors, (208), 203 states have internal predecessors, (208), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:49,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 04:00:49,471 INFO L93 Difference]: Finished difference Result 213 states and 217 transitions. [2022-04-28 04:00:49,471 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 217 transitions. [2022-04-28 04:00:49,471 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 04:00:49,471 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 04:00:49,471 INFO L74 IsIncluded]: Start isIncluded. First operand has 208 states, 203 states have (on average 1.0246305418719213) internal successors, (208), 203 states have internal predecessors, (208), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 213 states. [2022-04-28 04:00:49,472 INFO L87 Difference]: Start difference. First operand has 208 states, 203 states have (on average 1.0246305418719213) internal successors, (208), 203 states have internal predecessors, (208), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 213 states. [2022-04-28 04:00:49,474 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 04:00:49,474 INFO L93 Difference]: Finished difference Result 213 states and 217 transitions. [2022-04-28 04:00:49,474 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 217 transitions. [2022-04-28 04:00:49,475 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 04:00:49,475 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 04:00:49,475 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 04:00:49,475 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 04:00:49,475 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 208 states, 203 states have (on average 1.0246305418719213) internal successors, (208), 203 states have internal predecessors, (208), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:49,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 208 states to 208 states and 212 transitions. [2022-04-28 04:00:49,478 INFO L78 Accepts]: Start accepts. Automaton has 208 states and 212 transitions. Word has length 201 [2022-04-28 04:00:49,478 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 04:00:49,479 INFO L495 AbstractCegarLoop]: Abstraction has 208 states and 212 transitions. [2022-04-28 04:00:49,479 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 52 states have (on average 3.7884615384615383) internal successors, (197), 51 states have internal predecessors, (197), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:49,479 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 208 states and 212 transitions. [2022-04-28 04:00:50,098 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 212 edges. 212 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 04:00:50,098 INFO L276 IsEmpty]: Start isEmpty. Operand 208 states and 212 transitions. [2022-04-28 04:00:50,098 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 206 [2022-04-28 04:00:50,098 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 04:00:50,099 INFO L195 NwaCegarLoop]: trace histogram [49, 48, 48, 47, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 04:00:50,115 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Forceful destruction successful, exit code 0 [2022-04-28 04:00:50,299 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable47,47 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 04:00:50,299 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 04:00:50,299 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 04:00:50,299 INFO L85 PathProgramCache]: Analyzing trace with hash -1742869479, now seen corresponding path program 46 times [2022-04-28 04:00:50,299 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 04:00:50,300 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [684904767] [2022-04-28 04:00:50,412 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 04:00:50,616 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 04:00:50,859 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 04:00:50,860 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 04:00:50,863 INFO L85 PathProgramCache]: Analyzing trace with hash -966542809, now seen corresponding path program 1 times [2022-04-28 04:00:50,863 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 04:00:50,863 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1740722168] [2022-04-28 04:00:50,863 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 04:00:50,863 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 04:00:50,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:00:50,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 04:00:50,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:00:50,903 INFO L290 TraceCheckUtils]: 0: Hoare triple {44164#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {44156#true} is VALID [2022-04-28 04:00:50,903 INFO L290 TraceCheckUtils]: 1: Hoare triple {44156#true} assume true; {44156#true} is VALID [2022-04-28 04:00:50,903 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {44156#true} {44156#true} #48#return; {44156#true} is VALID [2022-04-28 04:00:50,903 INFO L272 TraceCheckUtils]: 0: Hoare triple {44156#true} call ULTIMATE.init(); {44164#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 04:00:50,903 INFO L290 TraceCheckUtils]: 1: Hoare triple {44164#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {44156#true} is VALID [2022-04-28 04:00:50,903 INFO L290 TraceCheckUtils]: 2: Hoare triple {44156#true} assume true; {44156#true} is VALID [2022-04-28 04:00:50,903 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {44156#true} {44156#true} #48#return; {44156#true} is VALID [2022-04-28 04:00:50,904 INFO L272 TraceCheckUtils]: 4: Hoare triple {44156#true} call #t~ret7 := main(); {44156#true} is VALID [2022-04-28 04:00:50,904 INFO L290 TraceCheckUtils]: 5: Hoare triple {44156#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {44161#(= main_~x~0 0)} is VALID [2022-04-28 04:00:50,904 INFO L290 TraceCheckUtils]: 6: Hoare triple {44161#(= main_~x~0 0)} [330] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_331| |v_main_#t~post4_330|)) (.cse1 (= v_main_~x~0_2291 v_main_~x~0_2290))) (or (and .cse0 (<= 500000 v_main_~x~0_2291) .cse1) (and (< v_main_~x~0_2291 v_main_~x~0_2290) (< v_main_~x~0_2290 500001)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2291, main_#t~post4=|v_main_#t~post4_331|} OutVars{main_~x~0=v_main_~x~0_2290, main_#t~post4=|v_main_#t~post4_330|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {44162#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:50,905 INFO L290 TraceCheckUtils]: 7: Hoare triple {44162#(<= main_~x~0 500000)} [331] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {44162#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:50,905 INFO L290 TraceCheckUtils]: 8: Hoare triple {44162#(<= main_~x~0 500000)} [332] L11-2-->L10-2_primed: Formula: (let ((.cse2 (<= 750000 v_main_~x~0_2293)) (.cse0 (= v_main_~y~0_1815 v_main_~y~0_1814)) (.cse1 (= |v_main_#t~post6_597| |v_main_#t~post6_595|))) (or (and (= v_main_~x~0_2293 v_main_~x~0_2292) .cse0 .cse1) (and .cse2 (< v_main_~y~0_1814 (+ (div (+ 999999 (* (- 1) v_main_~x~0_2293)) 2) 2 v_main_~y~0_1815)) (= (+ v_main_~x~0_2292 (* 2 v_main_~y~0_1815)) (+ v_main_~x~0_2293 (* 2 v_main_~y~0_1814))) (< v_main_~y~0_1815 v_main_~y~0_1814)) (and (= v_main_~x~0_2292 v_main_~x~0_2293) (or (not (< v_main_~x~0_2293 1000000)) (not .cse2)) .cse0 .cse1))) InVars {main_~y~0=v_main_~y~0_1815, main_~x~0=v_main_~x~0_2293, main_#t~post6=|v_main_#t~post6_597|} OutVars{main_~y~0=v_main_~y~0_1814, main_~x~0=v_main_~x~0_2292, main_#t~post6=|v_main_#t~post6_595|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {44162#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:50,906 INFO L290 TraceCheckUtils]: 9: Hoare triple {44162#(<= main_~x~0 500000)} [333] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {44162#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:50,906 INFO L290 TraceCheckUtils]: 10: Hoare triple {44162#(<= main_~x~0 500000)} [334] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= |v_main_#t~post6_600| |v_main_#t~post6_596|)) (.cse2 (= |v_main_#t~post5_281| |v_main_#t~post5_280|)) (.cse3 (= v_main_~x~0_2295 v_main_~x~0_2294)) (.cse4 (= v_main_~y~0_1817 v_main_~y~0_1816)) (.cse0 (<= 500000 v_main_~x~0_2295))) (or (and (= (+ v_main_~x~0_2295 v_main_~y~0_1816) (+ v_main_~x~0_2294 v_main_~y~0_1817)) (< v_main_~x~0_2294 750001) (< v_main_~x~0_2295 v_main_~x~0_2294) .cse0) (and .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (or (not (< v_main_~x~0_2295 750000)) (not .cse0))))) InVars {main_~y~0=v_main_~y~0_1817, main_#t~post5=|v_main_#t~post5_281|, main_~x~0=v_main_~x~0_2295, main_#t~post6=|v_main_#t~post6_600|} OutVars{main_~y~0=v_main_~y~0_1816, main_#t~post5=|v_main_#t~post5_280|, main_~x~0=v_main_~x~0_2294, main_#t~post6=|v_main_#t~post6_596|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {44163#(<= main_~x~0 750000)} is VALID [2022-04-28 04:00:50,907 INFO L290 TraceCheckUtils]: 11: Hoare triple {44163#(<= main_~x~0 750000)} [329] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {44157#false} is VALID [2022-04-28 04:00:50,907 INFO L272 TraceCheckUtils]: 12: Hoare triple {44157#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {44157#false} is VALID [2022-04-28 04:00:50,907 INFO L290 TraceCheckUtils]: 13: Hoare triple {44157#false} ~cond := #in~cond; {44157#false} is VALID [2022-04-28 04:00:50,907 INFO L290 TraceCheckUtils]: 14: Hoare triple {44157#false} assume 0 == ~cond; {44157#false} is VALID [2022-04-28 04:00:50,907 INFO L290 TraceCheckUtils]: 15: Hoare triple {44157#false} assume !false; {44157#false} is VALID [2022-04-28 04:00:50,907 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 04:00:50,907 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 04:00:50,907 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1740722168] [2022-04-28 04:00:50,907 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1740722168] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 04:00:50,907 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [316166092] [2022-04-28 04:00:50,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 04:00:50,908 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 04:00:50,908 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 04:00:50,908 INFO L229 MonitoredProcess]: Starting monitored process 48 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 04:00:50,909 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Waiting until timeout for monitored process [2022-04-28 04:00:50,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:00:50,936 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 04:00:50,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:00:50,945 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 04:00:51,126 INFO L272 TraceCheckUtils]: 0: Hoare triple {44156#true} call ULTIMATE.init(); {44156#true} is VALID [2022-04-28 04:00:51,126 INFO L290 TraceCheckUtils]: 1: Hoare triple {44156#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {44156#true} is VALID [2022-04-28 04:00:51,126 INFO L290 TraceCheckUtils]: 2: Hoare triple {44156#true} assume true; {44156#true} is VALID [2022-04-28 04:00:51,126 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {44156#true} {44156#true} #48#return; {44156#true} is VALID [2022-04-28 04:00:51,126 INFO L272 TraceCheckUtils]: 4: Hoare triple {44156#true} call #t~ret7 := main(); {44156#true} is VALID [2022-04-28 04:00:51,127 INFO L290 TraceCheckUtils]: 5: Hoare triple {44156#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {44183#(<= main_~x~0 0)} is VALID [2022-04-28 04:00:51,127 INFO L290 TraceCheckUtils]: 6: Hoare triple {44183#(<= main_~x~0 0)} [330] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_331| |v_main_#t~post4_330|)) (.cse1 (= v_main_~x~0_2291 v_main_~x~0_2290))) (or (and .cse0 (<= 500000 v_main_~x~0_2291) .cse1) (and (< v_main_~x~0_2291 v_main_~x~0_2290) (< v_main_~x~0_2290 500001)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2291, main_#t~post4=|v_main_#t~post4_331|} OutVars{main_~x~0=v_main_~x~0_2290, main_#t~post4=|v_main_#t~post4_330|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {44162#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:51,128 INFO L290 TraceCheckUtils]: 7: Hoare triple {44162#(<= main_~x~0 500000)} [331] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {44162#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:51,128 INFO L290 TraceCheckUtils]: 8: Hoare triple {44162#(<= main_~x~0 500000)} [332] L11-2-->L10-2_primed: Formula: (let ((.cse2 (<= 750000 v_main_~x~0_2293)) (.cse0 (= v_main_~y~0_1815 v_main_~y~0_1814)) (.cse1 (= |v_main_#t~post6_597| |v_main_#t~post6_595|))) (or (and (= v_main_~x~0_2293 v_main_~x~0_2292) .cse0 .cse1) (and .cse2 (< v_main_~y~0_1814 (+ (div (+ 999999 (* (- 1) v_main_~x~0_2293)) 2) 2 v_main_~y~0_1815)) (= (+ v_main_~x~0_2292 (* 2 v_main_~y~0_1815)) (+ v_main_~x~0_2293 (* 2 v_main_~y~0_1814))) (< v_main_~y~0_1815 v_main_~y~0_1814)) (and (= v_main_~x~0_2292 v_main_~x~0_2293) (or (not (< v_main_~x~0_2293 1000000)) (not .cse2)) .cse0 .cse1))) InVars {main_~y~0=v_main_~y~0_1815, main_~x~0=v_main_~x~0_2293, main_#t~post6=|v_main_#t~post6_597|} OutVars{main_~y~0=v_main_~y~0_1814, main_~x~0=v_main_~x~0_2292, main_#t~post6=|v_main_#t~post6_595|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {44162#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:51,129 INFO L290 TraceCheckUtils]: 9: Hoare triple {44162#(<= main_~x~0 500000)} [333] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {44162#(<= main_~x~0 500000)} is VALID [2022-04-28 04:00:51,129 INFO L290 TraceCheckUtils]: 10: Hoare triple {44162#(<= main_~x~0 500000)} [334] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= |v_main_#t~post6_600| |v_main_#t~post6_596|)) (.cse2 (= |v_main_#t~post5_281| |v_main_#t~post5_280|)) (.cse3 (= v_main_~x~0_2295 v_main_~x~0_2294)) (.cse4 (= v_main_~y~0_1817 v_main_~y~0_1816)) (.cse0 (<= 500000 v_main_~x~0_2295))) (or (and (= (+ v_main_~x~0_2295 v_main_~y~0_1816) (+ v_main_~x~0_2294 v_main_~y~0_1817)) (< v_main_~x~0_2294 750001) (< v_main_~x~0_2295 v_main_~x~0_2294) .cse0) (and .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (or (not (< v_main_~x~0_2295 750000)) (not .cse0))))) InVars {main_~y~0=v_main_~y~0_1817, main_#t~post5=|v_main_#t~post5_281|, main_~x~0=v_main_~x~0_2295, main_#t~post6=|v_main_#t~post6_600|} OutVars{main_~y~0=v_main_~y~0_1816, main_#t~post5=|v_main_#t~post5_280|, main_~x~0=v_main_~x~0_2294, main_#t~post6=|v_main_#t~post6_596|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {44163#(<= main_~x~0 750000)} is VALID [2022-04-28 04:00:51,130 INFO L290 TraceCheckUtils]: 11: Hoare triple {44163#(<= main_~x~0 750000)} [329] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {44157#false} is VALID [2022-04-28 04:00:51,130 INFO L272 TraceCheckUtils]: 12: Hoare triple {44157#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {44157#false} is VALID [2022-04-28 04:00:51,130 INFO L290 TraceCheckUtils]: 13: Hoare triple {44157#false} ~cond := #in~cond; {44157#false} is VALID [2022-04-28 04:00:51,130 INFO L290 TraceCheckUtils]: 14: Hoare triple {44157#false} assume 0 == ~cond; {44157#false} is VALID [2022-04-28 04:00:51,130 INFO L290 TraceCheckUtils]: 15: Hoare triple {44157#false} assume !false; {44157#false} is VALID [2022-04-28 04:00:51,130 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 04:00:51,130 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 04:00:51,537 INFO L290 TraceCheckUtils]: 15: Hoare triple {44157#false} assume !false; {44157#false} is VALID [2022-04-28 04:00:51,538 INFO L290 TraceCheckUtils]: 14: Hoare triple {44217#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {44157#false} is VALID [2022-04-28 04:00:51,538 INFO L290 TraceCheckUtils]: 13: Hoare triple {44221#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {44217#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 04:00:51,539 INFO L272 TraceCheckUtils]: 12: Hoare triple {44225#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {44221#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 04:00:51,539 INFO L290 TraceCheckUtils]: 11: Hoare triple {44229#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [329] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {44225#(= main_~x~0 1000000)} is VALID [2022-04-28 04:00:51,540 INFO L290 TraceCheckUtils]: 10: Hoare triple {44229#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [334] L11-2-->L10-2_primed: Formula: (let ((.cse1 (= |v_main_#t~post6_600| |v_main_#t~post6_596|)) (.cse2 (= |v_main_#t~post5_281| |v_main_#t~post5_280|)) (.cse3 (= v_main_~x~0_2295 v_main_~x~0_2294)) (.cse4 (= v_main_~y~0_1817 v_main_~y~0_1816)) (.cse0 (<= 500000 v_main_~x~0_2295))) (or (and (= (+ v_main_~x~0_2295 v_main_~y~0_1816) (+ v_main_~x~0_2294 v_main_~y~0_1817)) (< v_main_~x~0_2294 750001) (< v_main_~x~0_2295 v_main_~x~0_2294) .cse0) (and .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (or (not (< v_main_~x~0_2295 750000)) (not .cse0))))) InVars {main_~y~0=v_main_~y~0_1817, main_#t~post5=|v_main_#t~post5_281|, main_~x~0=v_main_~x~0_2295, main_#t~post6=|v_main_#t~post6_600|} OutVars{main_~y~0=v_main_~y~0_1816, main_#t~post5=|v_main_#t~post5_280|, main_~x~0=v_main_~x~0_2294, main_#t~post6=|v_main_#t~post6_596|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {44229#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 04:00:51,540 INFO L290 TraceCheckUtils]: 9: Hoare triple {44229#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [333] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {44229#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 04:00:51,541 INFO L290 TraceCheckUtils]: 8: Hoare triple {44239#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [332] L11-2-->L10-2_primed: Formula: (let ((.cse2 (<= 750000 v_main_~x~0_2293)) (.cse0 (= v_main_~y~0_1815 v_main_~y~0_1814)) (.cse1 (= |v_main_#t~post6_597| |v_main_#t~post6_595|))) (or (and (= v_main_~x~0_2293 v_main_~x~0_2292) .cse0 .cse1) (and .cse2 (< v_main_~y~0_1814 (+ (div (+ 999999 (* (- 1) v_main_~x~0_2293)) 2) 2 v_main_~y~0_1815)) (= (+ v_main_~x~0_2292 (* 2 v_main_~y~0_1815)) (+ v_main_~x~0_2293 (* 2 v_main_~y~0_1814))) (< v_main_~y~0_1815 v_main_~y~0_1814)) (and (= v_main_~x~0_2292 v_main_~x~0_2293) (or (not (< v_main_~x~0_2293 1000000)) (not .cse2)) .cse0 .cse1))) InVars {main_~y~0=v_main_~y~0_1815, main_~x~0=v_main_~x~0_2293, main_#t~post6=|v_main_#t~post6_597|} OutVars{main_~y~0=v_main_~y~0_1814, main_~x~0=v_main_~x~0_2292, main_#t~post6=|v_main_#t~post6_595|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {44229#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 04:00:51,542 INFO L290 TraceCheckUtils]: 7: Hoare triple {44239#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [331] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {44239#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 04:00:51,543 INFO L290 TraceCheckUtils]: 6: Hoare triple {44239#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [330] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= |v_main_#t~post4_331| |v_main_#t~post4_330|)) (.cse1 (= v_main_~x~0_2291 v_main_~x~0_2290))) (or (and .cse0 (<= 500000 v_main_~x~0_2291) .cse1) (and (< v_main_~x~0_2291 v_main_~x~0_2290) (< v_main_~x~0_2290 500001)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2291, main_#t~post4=|v_main_#t~post4_331|} OutVars{main_~x~0=v_main_~x~0_2290, main_#t~post4=|v_main_#t~post4_330|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {44239#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 04:00:51,544 INFO L290 TraceCheckUtils]: 5: Hoare triple {44156#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {44239#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 04:00:51,544 INFO L272 TraceCheckUtils]: 4: Hoare triple {44156#true} call #t~ret7 := main(); {44156#true} is VALID [2022-04-28 04:00:51,544 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {44156#true} {44156#true} #48#return; {44156#true} is VALID [2022-04-28 04:00:51,544 INFO L290 TraceCheckUtils]: 2: Hoare triple {44156#true} assume true; {44156#true} is VALID [2022-04-28 04:00:51,544 INFO L290 TraceCheckUtils]: 1: Hoare triple {44156#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {44156#true} is VALID [2022-04-28 04:00:51,544 INFO L272 TraceCheckUtils]: 0: Hoare triple {44156#true} call ULTIMATE.init(); {44156#true} is VALID [2022-04-28 04:00:51,544 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 04:00:51,544 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [316166092] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 04:00:51,544 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 04:00:51,544 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 04:00:53,609 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 04:00:53,609 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [684904767] [2022-04-28 04:00:53,609 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [684904767] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 04:00:53,609 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 04:00:53,609 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [53] imperfect sequences [] total 53 [2022-04-28 04:00:53,609 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1701154225] [2022-04-28 04:00:53,609 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 04:00:53,609 INFO L78 Accepts]: Start accepts. Automaton has has 53 states, 53 states have (on average 3.792452830188679) internal successors, (201), 52 states have internal predecessors, (201), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 205 [2022-04-28 04:00:53,610 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 04:00:53,610 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 53 states, 53 states have (on average 3.792452830188679) internal successors, (201), 52 states have internal predecessors, (201), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:00:53,764 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 205 edges. 205 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 04:00:53,764 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 53 states [2022-04-28 04:00:53,764 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 04:00:53,764 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 53 interpolants. [2022-04-28 04:00:53,765 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=295, Invalid=3487, Unknown=0, NotChecked=0, Total=3782 [2022-04-28 04:00:53,765 INFO L87 Difference]: Start difference. First operand 208 states and 212 transitions. Second operand has 53 states, 53 states have (on average 3.792452830188679) internal successors, (201), 52 states have internal predecessors, (201), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:12,627 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 04:01:12,627 INFO L93 Difference]: Finished difference Result 235 states and 244 transitions. [2022-04-28 04:01:12,627 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2022-04-28 04:01:12,628 INFO L78 Accepts]: Start accepts. Automaton has has 53 states, 53 states have (on average 3.792452830188679) internal successors, (201), 52 states have internal predecessors, (201), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 205 [2022-04-28 04:01:12,628 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 04:01:12,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 53 states have (on average 3.792452830188679) internal successors, (201), 52 states have internal predecessors, (201), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:12,632 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 224 transitions. [2022-04-28 04:01:12,632 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 53 states have (on average 3.792452830188679) internal successors, (201), 52 states have internal predecessors, (201), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:12,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 224 transitions. [2022-04-28 04:01:12,633 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 53 states and 224 transitions. [2022-04-28 04:01:12,807 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 224 edges. 224 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 04:01:12,810 INFO L225 Difference]: With dead ends: 235 [2022-04-28 04:01:12,810 INFO L226 Difference]: Without dead ends: 217 [2022-04-28 04:01:12,810 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 288 GetRequests, 175 SyntacticMatches, 3 SemanticMatches, 110 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2029 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=654, Invalid=11778, Unknown=0, NotChecked=0, Total=12432 [2022-04-28 04:01:12,811 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 155 mSDsluCounter, 247 mSDsCounter, 0 mSdLazyCounter, 9804 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 9857 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 9804 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.3s IncrementalHoareTripleChecker+Time [2022-04-28 04:01:12,811 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [155 Valid, 306 Invalid, 9857 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 9804 Invalid, 0 Unknown, 0 Unchecked, 7.3s Time] [2022-04-28 04:01:12,811 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 217 states. [2022-04-28 04:01:17,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 217 to 212. [2022-04-28 04:01:17,042 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 04:01:17,042 INFO L82 GeneralOperation]: Start isEquivalent. First operand 217 states. Second operand has 212 states, 207 states have (on average 1.0241545893719808) internal successors, (212), 207 states have internal predecessors, (212), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:17,042 INFO L74 IsIncluded]: Start isIncluded. First operand 217 states. Second operand has 212 states, 207 states have (on average 1.0241545893719808) internal successors, (212), 207 states have internal predecessors, (212), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:17,043 INFO L87 Difference]: Start difference. First operand 217 states. Second operand has 212 states, 207 states have (on average 1.0241545893719808) internal successors, (212), 207 states have internal predecessors, (212), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:17,049 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 04:01:17,050 INFO L93 Difference]: Finished difference Result 217 states and 221 transitions. [2022-04-28 04:01:17,050 INFO L276 IsEmpty]: Start isEmpty. Operand 217 states and 221 transitions. [2022-04-28 04:01:17,050 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 04:01:17,050 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 04:01:17,050 INFO L74 IsIncluded]: Start isIncluded. First operand has 212 states, 207 states have (on average 1.0241545893719808) internal successors, (212), 207 states have internal predecessors, (212), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 217 states. [2022-04-28 04:01:17,050 INFO L87 Difference]: Start difference. First operand has 212 states, 207 states have (on average 1.0241545893719808) internal successors, (212), 207 states have internal predecessors, (212), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 217 states. [2022-04-28 04:01:17,053 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 04:01:17,053 INFO L93 Difference]: Finished difference Result 217 states and 221 transitions. [2022-04-28 04:01:17,053 INFO L276 IsEmpty]: Start isEmpty. Operand 217 states and 221 transitions. [2022-04-28 04:01:17,054 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 04:01:17,054 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 04:01:17,054 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 04:01:17,054 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 04:01:17,054 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 212 states, 207 states have (on average 1.0241545893719808) internal successors, (212), 207 states have internal predecessors, (212), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:17,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 212 states to 212 states and 216 transitions. [2022-04-28 04:01:17,057 INFO L78 Accepts]: Start accepts. Automaton has 212 states and 216 transitions. Word has length 205 [2022-04-28 04:01:17,057 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 04:01:17,057 INFO L495 AbstractCegarLoop]: Abstraction has 212 states and 216 transitions. [2022-04-28 04:01:17,057 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 53 states, 53 states have (on average 3.792452830188679) internal successors, (201), 52 states have internal predecessors, (201), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:17,058 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 212 states and 216 transitions. [2022-04-28 04:01:17,710 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 216 edges. 216 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 04:01:17,711 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 216 transitions. [2022-04-28 04:01:17,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 210 [2022-04-28 04:01:17,711 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 04:01:17,712 INFO L195 NwaCegarLoop]: trace histogram [50, 49, 49, 48, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 04:01:17,731 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Forceful destruction successful, exit code 0 [2022-04-28 04:01:17,923 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 48 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-04-28 04:01:17,923 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 04:01:17,924 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 04:01:17,924 INFO L85 PathProgramCache]: Analyzing trace with hash -304345360, now seen corresponding path program 47 times [2022-04-28 04:01:17,924 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 04:01:17,924 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [567576111] [2022-04-28 04:01:22,001 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 04:01:22,062 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 04:01:25,032 WARN L977 rdanLoopAcceleration]: Unable to prove correctness of quantifier elimination. [2022-04-28 04:01:25,162 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 04:01:25,377 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 04:01:25,378 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 04:01:25,381 INFO L85 PathProgramCache]: Analyzing trace with hash -1326117785, now seen corresponding path program 1 times [2022-04-28 04:01:25,381 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 04:01:25,381 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1717926852] [2022-04-28 04:01:25,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 04:01:25,381 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 04:01:25,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:01:25,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 04:01:25,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:01:25,425 INFO L290 TraceCheckUtils]: 0: Hoare triple {45752#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {45744#true} is VALID [2022-04-28 04:01:25,425 INFO L290 TraceCheckUtils]: 1: Hoare triple {45744#true} assume true; {45744#true} is VALID [2022-04-28 04:01:25,425 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {45744#true} {45744#true} #48#return; {45744#true} is VALID [2022-04-28 04:01:25,426 INFO L272 TraceCheckUtils]: 0: Hoare triple {45744#true} call ULTIMATE.init(); {45752#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 04:01:25,426 INFO L290 TraceCheckUtils]: 1: Hoare triple {45752#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {45744#true} is VALID [2022-04-28 04:01:25,426 INFO L290 TraceCheckUtils]: 2: Hoare triple {45744#true} assume true; {45744#true} is VALID [2022-04-28 04:01:25,426 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {45744#true} {45744#true} #48#return; {45744#true} is VALID [2022-04-28 04:01:25,426 INFO L272 TraceCheckUtils]: 4: Hoare triple {45744#true} call #t~ret7 := main(); {45744#true} is VALID [2022-04-28 04:01:25,427 INFO L290 TraceCheckUtils]: 5: Hoare triple {45744#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {45749#(= main_~x~0 0)} is VALID [2022-04-28 04:01:25,427 INFO L290 TraceCheckUtils]: 6: Hoare triple {45749#(= main_~x~0 0)} [336] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2364 v_main_~x~0_2363)) (.cse1 (= |v_main_#t~post4_338| |v_main_#t~post4_337|))) (or (and (not (< v_main_~x~0_2364 500000)) .cse0 .cse1) (and (< v_main_~x~0_2364 v_main_~x~0_2363) (< v_main_~x~0_2363 500001)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2364, main_#t~post4=|v_main_#t~post4_338|} OutVars{main_~x~0=v_main_~x~0_2363, main_#t~post4=|v_main_#t~post4_337|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {45750#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:25,428 INFO L290 TraceCheckUtils]: 7: Hoare triple {45750#(<= main_~x~0 500000)} [337] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {45750#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:25,429 INFO L290 TraceCheckUtils]: 8: Hoare triple {45750#(<= main_~x~0 500000)} [338] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2366 v_main_~x~0_2365)) (.cse2 (<= 750000 v_main_~x~0_2366)) (.cse1 (= v_main_~y~0_1878 v_main_~y~0_1877))) (or (and (= |v_main_#t~post6_610| |v_main_#t~post6_608|) .cse0 .cse1) (and (< v_main_~y~0_1877 (+ 2 (div (+ 999999 (* (- 1) v_main_~x~0_2366)) 2) v_main_~y~0_1878)) (= (+ v_main_~x~0_2365 (* 2 v_main_~y~0_1878)) (+ v_main_~x~0_2366 (* 2 v_main_~y~0_1877))) (< v_main_~y~0_1878 v_main_~y~0_1877) .cse2) (and (= |v_main_#t~post6_608| |v_main_#t~post6_610|) .cse0 (or (not .cse2) (not (< v_main_~x~0_2366 1000000))) .cse1))) InVars {main_~y~0=v_main_~y~0_1878, main_~x~0=v_main_~x~0_2366, main_#t~post6=|v_main_#t~post6_610|} OutVars{main_~y~0=v_main_~y~0_1877, main_~x~0=v_main_~x~0_2365, main_#t~post6=|v_main_#t~post6_608|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {45750#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:25,429 INFO L290 TraceCheckUtils]: 9: Hoare triple {45750#(<= main_~x~0 500000)} [339] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {45750#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:25,430 INFO L290 TraceCheckUtils]: 10: Hoare triple {45750#(<= main_~x~0 500000)} [340] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_2368)) (.cse2 (= v_main_~x~0_2368 v_main_~x~0_2367)) (.cse3 (= v_main_~y~0_1880 v_main_~y~0_1879)) (.cse4 (= |v_main_#t~post5_287| |v_main_#t~post5_286|))) (or (let ((.cse0 (+ v_main_~x~0_2368 v_main_~y~0_1879))) (and (= (+ v_main_~x~0_2367 v_main_~y~0_1880) .cse0) (< v_main_~y~0_1880 v_main_~y~0_1879) .cse1 (< .cse0 (+ 750001 v_main_~y~0_1880)))) (and .cse2 (or (not (< v_main_~x~0_2368 750000)) (not .cse1)) (= |v_main_#t~post6_609| |v_main_#t~post6_613|) .cse3 .cse4) (and .cse2 (= |v_main_#t~post6_613| |v_main_#t~post6_609|) .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_1880, main_#t~post5=|v_main_#t~post5_287|, main_~x~0=v_main_~x~0_2368, main_#t~post6=|v_main_#t~post6_613|} OutVars{main_~y~0=v_main_~y~0_1879, main_#t~post5=|v_main_#t~post5_286|, main_~x~0=v_main_~x~0_2367, main_#t~post6=|v_main_#t~post6_609|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {45751#(<= main_~x~0 750000)} is VALID [2022-04-28 04:01:25,431 INFO L290 TraceCheckUtils]: 11: Hoare triple {45751#(<= main_~x~0 750000)} [335] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {45745#false} is VALID [2022-04-28 04:01:25,431 INFO L272 TraceCheckUtils]: 12: Hoare triple {45745#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {45745#false} is VALID [2022-04-28 04:01:25,431 INFO L290 TraceCheckUtils]: 13: Hoare triple {45745#false} ~cond := #in~cond; {45745#false} is VALID [2022-04-28 04:01:25,431 INFO L290 TraceCheckUtils]: 14: Hoare triple {45745#false} assume 0 == ~cond; {45745#false} is VALID [2022-04-28 04:01:25,431 INFO L290 TraceCheckUtils]: 15: Hoare triple {45745#false} assume !false; {45745#false} is VALID [2022-04-28 04:01:25,431 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 04:01:25,431 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 04:01:25,431 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1717926852] [2022-04-28 04:01:25,431 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1717926852] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 04:01:25,431 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [738829319] [2022-04-28 04:01:25,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 04:01:25,432 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 04:01:25,432 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 04:01:25,436 INFO L229 MonitoredProcess]: Starting monitored process 49 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 04:01:25,440 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Waiting until timeout for monitored process [2022-04-28 04:01:25,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:01:25,468 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 04:01:25,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:01:25,478 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 04:01:25,653 INFO L272 TraceCheckUtils]: 0: Hoare triple {45744#true} call ULTIMATE.init(); {45744#true} is VALID [2022-04-28 04:01:25,653 INFO L290 TraceCheckUtils]: 1: Hoare triple {45744#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {45744#true} is VALID [2022-04-28 04:01:25,653 INFO L290 TraceCheckUtils]: 2: Hoare triple {45744#true} assume true; {45744#true} is VALID [2022-04-28 04:01:25,653 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {45744#true} {45744#true} #48#return; {45744#true} is VALID [2022-04-28 04:01:25,653 INFO L272 TraceCheckUtils]: 4: Hoare triple {45744#true} call #t~ret7 := main(); {45744#true} is VALID [2022-04-28 04:01:25,654 INFO L290 TraceCheckUtils]: 5: Hoare triple {45744#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {45771#(<= main_~x~0 0)} is VALID [2022-04-28 04:01:25,654 INFO L290 TraceCheckUtils]: 6: Hoare triple {45771#(<= main_~x~0 0)} [336] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2364 v_main_~x~0_2363)) (.cse1 (= |v_main_#t~post4_338| |v_main_#t~post4_337|))) (or (and (not (< v_main_~x~0_2364 500000)) .cse0 .cse1) (and (< v_main_~x~0_2364 v_main_~x~0_2363) (< v_main_~x~0_2363 500001)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2364, main_#t~post4=|v_main_#t~post4_338|} OutVars{main_~x~0=v_main_~x~0_2363, main_#t~post4=|v_main_#t~post4_337|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {45750#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:25,654 INFO L290 TraceCheckUtils]: 7: Hoare triple {45750#(<= main_~x~0 500000)} [337] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {45750#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:25,655 INFO L290 TraceCheckUtils]: 8: Hoare triple {45750#(<= main_~x~0 500000)} [338] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2366 v_main_~x~0_2365)) (.cse2 (<= 750000 v_main_~x~0_2366)) (.cse1 (= v_main_~y~0_1878 v_main_~y~0_1877))) (or (and (= |v_main_#t~post6_610| |v_main_#t~post6_608|) .cse0 .cse1) (and (< v_main_~y~0_1877 (+ 2 (div (+ 999999 (* (- 1) v_main_~x~0_2366)) 2) v_main_~y~0_1878)) (= (+ v_main_~x~0_2365 (* 2 v_main_~y~0_1878)) (+ v_main_~x~0_2366 (* 2 v_main_~y~0_1877))) (< v_main_~y~0_1878 v_main_~y~0_1877) .cse2) (and (= |v_main_#t~post6_608| |v_main_#t~post6_610|) .cse0 (or (not .cse2) (not (< v_main_~x~0_2366 1000000))) .cse1))) InVars {main_~y~0=v_main_~y~0_1878, main_~x~0=v_main_~x~0_2366, main_#t~post6=|v_main_#t~post6_610|} OutVars{main_~y~0=v_main_~y~0_1877, main_~x~0=v_main_~x~0_2365, main_#t~post6=|v_main_#t~post6_608|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {45750#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:25,655 INFO L290 TraceCheckUtils]: 9: Hoare triple {45750#(<= main_~x~0 500000)} [339] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {45750#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:25,663 INFO L290 TraceCheckUtils]: 10: Hoare triple {45750#(<= main_~x~0 500000)} [340] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_2368)) (.cse2 (= v_main_~x~0_2368 v_main_~x~0_2367)) (.cse3 (= v_main_~y~0_1880 v_main_~y~0_1879)) (.cse4 (= |v_main_#t~post5_287| |v_main_#t~post5_286|))) (or (let ((.cse0 (+ v_main_~x~0_2368 v_main_~y~0_1879))) (and (= (+ v_main_~x~0_2367 v_main_~y~0_1880) .cse0) (< v_main_~y~0_1880 v_main_~y~0_1879) .cse1 (< .cse0 (+ 750001 v_main_~y~0_1880)))) (and .cse2 (or (not (< v_main_~x~0_2368 750000)) (not .cse1)) (= |v_main_#t~post6_609| |v_main_#t~post6_613|) .cse3 .cse4) (and .cse2 (= |v_main_#t~post6_613| |v_main_#t~post6_609|) .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_1880, main_#t~post5=|v_main_#t~post5_287|, main_~x~0=v_main_~x~0_2368, main_#t~post6=|v_main_#t~post6_613|} OutVars{main_~y~0=v_main_~y~0_1879, main_#t~post5=|v_main_#t~post5_286|, main_~x~0=v_main_~x~0_2367, main_#t~post6=|v_main_#t~post6_609|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {45751#(<= main_~x~0 750000)} is VALID [2022-04-28 04:01:25,664 INFO L290 TraceCheckUtils]: 11: Hoare triple {45751#(<= main_~x~0 750000)} [335] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {45745#false} is VALID [2022-04-28 04:01:25,664 INFO L272 TraceCheckUtils]: 12: Hoare triple {45745#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {45745#false} is VALID [2022-04-28 04:01:25,664 INFO L290 TraceCheckUtils]: 13: Hoare triple {45745#false} ~cond := #in~cond; {45745#false} is VALID [2022-04-28 04:01:25,664 INFO L290 TraceCheckUtils]: 14: Hoare triple {45745#false} assume 0 == ~cond; {45745#false} is VALID [2022-04-28 04:01:25,664 INFO L290 TraceCheckUtils]: 15: Hoare triple {45745#false} assume !false; {45745#false} is VALID [2022-04-28 04:01:25,664 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 04:01:25,664 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 04:01:26,148 INFO L290 TraceCheckUtils]: 15: Hoare triple {45745#false} assume !false; {45745#false} is VALID [2022-04-28 04:01:26,148 INFO L290 TraceCheckUtils]: 14: Hoare triple {45805#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {45745#false} is VALID [2022-04-28 04:01:26,149 INFO L290 TraceCheckUtils]: 13: Hoare triple {45809#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {45805#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 04:01:26,149 INFO L272 TraceCheckUtils]: 12: Hoare triple {45813#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {45809#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 04:01:26,150 INFO L290 TraceCheckUtils]: 11: Hoare triple {45817#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [335] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {45813#(= main_~x~0 1000000)} is VALID [2022-04-28 04:01:26,150 INFO L290 TraceCheckUtils]: 10: Hoare triple {45817#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [340] L11-2-->L10-2_primed: Formula: (let ((.cse1 (<= 500000 v_main_~x~0_2368)) (.cse2 (= v_main_~x~0_2368 v_main_~x~0_2367)) (.cse3 (= v_main_~y~0_1880 v_main_~y~0_1879)) (.cse4 (= |v_main_#t~post5_287| |v_main_#t~post5_286|))) (or (let ((.cse0 (+ v_main_~x~0_2368 v_main_~y~0_1879))) (and (= (+ v_main_~x~0_2367 v_main_~y~0_1880) .cse0) (< v_main_~y~0_1880 v_main_~y~0_1879) .cse1 (< .cse0 (+ 750001 v_main_~y~0_1880)))) (and .cse2 (or (not (< v_main_~x~0_2368 750000)) (not .cse1)) (= |v_main_#t~post6_609| |v_main_#t~post6_613|) .cse3 .cse4) (and .cse2 (= |v_main_#t~post6_613| |v_main_#t~post6_609|) .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_1880, main_#t~post5=|v_main_#t~post5_287|, main_~x~0=v_main_~x~0_2368, main_#t~post6=|v_main_#t~post6_613|} OutVars{main_~y~0=v_main_~y~0_1879, main_#t~post5=|v_main_#t~post5_286|, main_~x~0=v_main_~x~0_2367, main_#t~post6=|v_main_#t~post6_609|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {45817#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 04:01:26,151 INFO L290 TraceCheckUtils]: 9: Hoare triple {45817#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [339] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {45817#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 04:01:26,152 INFO L290 TraceCheckUtils]: 8: Hoare triple {45827#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [338] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2366 v_main_~x~0_2365)) (.cse2 (<= 750000 v_main_~x~0_2366)) (.cse1 (= v_main_~y~0_1878 v_main_~y~0_1877))) (or (and (= |v_main_#t~post6_610| |v_main_#t~post6_608|) .cse0 .cse1) (and (< v_main_~y~0_1877 (+ 2 (div (+ 999999 (* (- 1) v_main_~x~0_2366)) 2) v_main_~y~0_1878)) (= (+ v_main_~x~0_2365 (* 2 v_main_~y~0_1878)) (+ v_main_~x~0_2366 (* 2 v_main_~y~0_1877))) (< v_main_~y~0_1878 v_main_~y~0_1877) .cse2) (and (= |v_main_#t~post6_608| |v_main_#t~post6_610|) .cse0 (or (not .cse2) (not (< v_main_~x~0_2366 1000000))) .cse1))) InVars {main_~y~0=v_main_~y~0_1878, main_~x~0=v_main_~x~0_2366, main_#t~post6=|v_main_#t~post6_610|} OutVars{main_~y~0=v_main_~y~0_1877, main_~x~0=v_main_~x~0_2365, main_#t~post6=|v_main_#t~post6_608|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {45817#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 04:01:26,152 INFO L290 TraceCheckUtils]: 7: Hoare triple {45827#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [337] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {45827#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 04:01:26,154 INFO L290 TraceCheckUtils]: 6: Hoare triple {45827#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} [336] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2364 v_main_~x~0_2363)) (.cse1 (= |v_main_#t~post4_338| |v_main_#t~post4_337|))) (or (and (not (< v_main_~x~0_2364 500000)) .cse0 .cse1) (and (< v_main_~x~0_2364 v_main_~x~0_2363) (< v_main_~x~0_2363 500001)) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2364, main_#t~post4=|v_main_#t~post4_338|} OutVars{main_~x~0=v_main_~x~0_2363, main_#t~post4=|v_main_#t~post4_337|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {45827#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 04:01:26,154 INFO L290 TraceCheckUtils]: 5: Hoare triple {45744#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {45827#(and (or (< main_~x~0 1000000) (= main_~x~0 1000000)) (or (<= (+ (div (+ 999999 (* (- 1) main_~x~0)) 2) 1) (div (+ 1000000 (* (- 1) main_~x~0)) 2)) (not (<= 750000 main_~x~0))))} is VALID [2022-04-28 04:01:26,154 INFO L272 TraceCheckUtils]: 4: Hoare triple {45744#true} call #t~ret7 := main(); {45744#true} is VALID [2022-04-28 04:01:26,154 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {45744#true} {45744#true} #48#return; {45744#true} is VALID [2022-04-28 04:01:26,154 INFO L290 TraceCheckUtils]: 2: Hoare triple {45744#true} assume true; {45744#true} is VALID [2022-04-28 04:01:26,154 INFO L290 TraceCheckUtils]: 1: Hoare triple {45744#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {45744#true} is VALID [2022-04-28 04:01:26,154 INFO L272 TraceCheckUtils]: 0: Hoare triple {45744#true} call ULTIMATE.init(); {45744#true} is VALID [2022-04-28 04:01:26,154 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 04:01:26,155 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [738829319] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 04:01:26,155 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 04:01:26,155 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 04:01:28,240 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 04:01:28,240 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [567576111] [2022-04-28 04:01:28,240 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [567576111] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 04:01:28,240 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 04:01:28,240 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [54] imperfect sequences [] total 54 [2022-04-28 04:01:28,240 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [270516698] [2022-04-28 04:01:28,240 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 04:01:28,241 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 3.7962962962962963) internal successors, (205), 53 states have internal predecessors, (205), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 209 [2022-04-28 04:01:28,241 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 04:01:28,241 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 54 states, 54 states have (on average 3.7962962962962963) internal successors, (205), 53 states have internal predecessors, (205), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:28,393 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 209 edges. 209 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 04:01:28,394 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-04-28 04:01:28,394 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 04:01:28,394 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-04-28 04:01:28,394 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=300, Invalid=3606, Unknown=0, NotChecked=0, Total=3906 [2022-04-28 04:01:28,394 INFO L87 Difference]: Start difference. First operand 212 states and 216 transitions. Second operand has 54 states, 54 states have (on average 3.7962962962962963) internal successors, (205), 53 states have internal predecessors, (205), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:47,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 04:01:47,666 INFO L93 Difference]: Finished difference Result 239 states and 248 transitions. [2022-04-28 04:01:47,666 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2022-04-28 04:01:47,666 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 3.7962962962962963) internal successors, (205), 53 states have internal predecessors, (205), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 209 [2022-04-28 04:01:47,667 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-04-28 04:01:47,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 54 states have (on average 3.7962962962962963) internal successors, (205), 53 states have internal predecessors, (205), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:47,668 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 228 transitions. [2022-04-28 04:01:47,668 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 54 states have (on average 3.7962962962962963) internal successors, (205), 53 states have internal predecessors, (205), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:47,669 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 228 transitions. [2022-04-28 04:01:47,669 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 54 states and 228 transitions. [2022-04-28 04:01:47,846 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 228 edges. 228 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 04:01:47,848 INFO L225 Difference]: With dead ends: 239 [2022-04-28 04:01:47,848 INFO L226 Difference]: Without dead ends: 221 [2022-04-28 04:01:47,849 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 293 GetRequests, 178 SyntacticMatches, 3 SemanticMatches, 112 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2095 ImplicationChecksByTransitivity, 2.9s TimeCoverageRelationStatistics Valid=666, Invalid=12216, Unknown=0, NotChecked=0, Total=12882 [2022-04-28 04:01:47,849 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 158 mSDsluCounter, 252 mSDsCounter, 0 mSdLazyCounter, 10204 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 158 SdHoareTripleChecker+Valid, 312 SdHoareTripleChecker+Invalid, 10258 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 10204 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.5s IncrementalHoareTripleChecker+Time [2022-04-28 04:01:47,849 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [158 Valid, 312 Invalid, 10258 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 10204 Invalid, 0 Unknown, 0 Unchecked, 7.5s Time] [2022-04-28 04:01:47,850 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 221 states. [2022-04-28 04:01:52,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 221 to 216. [2022-04-28 04:01:52,189 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-04-28 04:01:52,189 INFO L82 GeneralOperation]: Start isEquivalent. First operand 221 states. Second operand has 216 states, 211 states have (on average 1.0236966824644549) internal successors, (216), 211 states have internal predecessors, (216), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:52,189 INFO L74 IsIncluded]: Start isIncluded. First operand 221 states. Second operand has 216 states, 211 states have (on average 1.0236966824644549) internal successors, (216), 211 states have internal predecessors, (216), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:52,190 INFO L87 Difference]: Start difference. First operand 221 states. Second operand has 216 states, 211 states have (on average 1.0236966824644549) internal successors, (216), 211 states have internal predecessors, (216), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:52,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 04:01:52,194 INFO L93 Difference]: Finished difference Result 221 states and 225 transitions. [2022-04-28 04:01:52,194 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 225 transitions. [2022-04-28 04:01:52,194 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 04:01:52,194 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 04:01:52,194 INFO L74 IsIncluded]: Start isIncluded. First operand has 216 states, 211 states have (on average 1.0236966824644549) internal successors, (216), 211 states have internal predecessors, (216), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 221 states. [2022-04-28 04:01:52,194 INFO L87 Difference]: Start difference. First operand has 216 states, 211 states have (on average 1.0236966824644549) internal successors, (216), 211 states have internal predecessors, (216), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Second operand 221 states. [2022-04-28 04:01:52,197 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-04-28 04:01:52,198 INFO L93 Difference]: Finished difference Result 221 states and 225 transitions. [2022-04-28 04:01:52,198 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 225 transitions. [2022-04-28 04:01:52,198 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-04-28 04:01:52,198 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-04-28 04:01:52,198 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-04-28 04:01:52,198 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-04-28 04:01:52,198 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 216 states, 211 states have (on average 1.0236966824644549) internal successors, (216), 211 states have internal predecessors, (216), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:52,201 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 216 states to 216 states and 220 transitions. [2022-04-28 04:01:52,202 INFO L78 Accepts]: Start accepts. Automaton has 216 states and 220 transitions. Word has length 209 [2022-04-28 04:01:52,202 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-04-28 04:01:52,202 INFO L495 AbstractCegarLoop]: Abstraction has 216 states and 220 transitions. [2022-04-28 04:01:52,202 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 3.7962962962962963) internal successors, (205), 53 states have internal predecessors, (205), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:52,202 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with 216 states and 220 transitions. [2022-04-28 04:01:52,914 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 220 edges. 220 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 04:01:52,915 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 220 transitions. [2022-04-28 04:01:52,915 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 214 [2022-04-28 04:01:52,915 INFO L187 NwaCegarLoop]: Found error trace [2022-04-28 04:01:52,915 INFO L195 NwaCegarLoop]: trace histogram [51, 50, 50, 49, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-04-28 04:01:52,931 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Forceful destruction successful, exit code 0 [2022-04-28 04:01:53,116 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 49 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-04-28 04:01:53,116 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-04-28 04:01:53,116 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-04-28 04:01:53,116 INFO L85 PathProgramCache]: Analyzing trace with hash 529460807, now seen corresponding path program 48 times [2022-04-28 04:01:53,116 INFO L118 FreeRefinementEngine]: Executing refinement strategy ACCELERATED_INTERPOLATION [2022-04-28 04:01:53,116 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleAcceleratedInterpolation [1034258949] [2022-04-28 04:01:53,275 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 1 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 04:01:53,523 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 1 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 04:01:53,773 INFO L89 AcceleratorJordan]: Jordan loop acceleration statistics: 2 HavocedVariables, 2 AssignedVariables, 0 ReadonlyVariables, Eigenvalues: {1={1=1, 2=1}}, 1 SequentialAcceleration, 0 AlternatingAcceleration, 1 QuantifierFreeResult [2022-04-28 04:01:53,774 INFO L271 tedInterpolationCore]: Starting analysis with loop acceleration approximation PRECISE [2022-04-28 04:01:53,777 INFO L85 PathProgramCache]: Analyzing trace with hash -1685692761, now seen corresponding path program 1 times [2022-04-28 04:01:53,777 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-04-28 04:01:53,777 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1244904048] [2022-04-28 04:01:53,777 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 04:01:53,777 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-04-28 04:01:53,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:01:53,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2022-04-28 04:01:53,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:01:53,820 INFO L290 TraceCheckUtils]: 0: Hoare triple {47367#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {47359#true} is VALID [2022-04-28 04:01:53,820 INFO L290 TraceCheckUtils]: 1: Hoare triple {47359#true} assume true; {47359#true} is VALID [2022-04-28 04:01:53,820 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {47359#true} {47359#true} #48#return; {47359#true} is VALID [2022-04-28 04:01:53,821 INFO L272 TraceCheckUtils]: 0: Hoare triple {47359#true} call ULTIMATE.init(); {47367#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} is VALID [2022-04-28 04:01:53,821 INFO L290 TraceCheckUtils]: 1: Hoare triple {47367#(and (= |#NULL.offset| |old(#NULL.offset)|) (= |old(#NULL.base)| |#NULL.base|))} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {47359#true} is VALID [2022-04-28 04:01:53,821 INFO L290 TraceCheckUtils]: 2: Hoare triple {47359#true} assume true; {47359#true} is VALID [2022-04-28 04:01:53,821 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {47359#true} {47359#true} #48#return; {47359#true} is VALID [2022-04-28 04:01:53,821 INFO L272 TraceCheckUtils]: 4: Hoare triple {47359#true} call #t~ret7 := main(); {47359#true} is VALID [2022-04-28 04:01:53,821 INFO L290 TraceCheckUtils]: 5: Hoare triple {47359#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {47364#(= main_~x~0 0)} is VALID [2022-04-28 04:01:53,822 INFO L290 TraceCheckUtils]: 6: Hoare triple {47364#(= main_~x~0 0)} [342] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2438 v_main_~x~0_2437)) (.cse1 (= |v_main_#t~post4_345| |v_main_#t~post4_344|))) (or (and (< v_main_~x~0_2438 v_main_~x~0_2437) (< v_main_~x~0_2437 500001)) (and .cse0 (not (< v_main_~x~0_2438 500000)) .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2438, main_#t~post4=|v_main_#t~post4_345|} OutVars{main_~x~0=v_main_~x~0_2437, main_#t~post4=|v_main_#t~post4_344|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {47365#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:53,823 INFO L290 TraceCheckUtils]: 7: Hoare triple {47365#(<= main_~x~0 500000)} [343] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {47365#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:53,824 INFO L290 TraceCheckUtils]: 8: Hoare triple {47365#(<= main_~x~0 500000)} [344] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_2440)) (.cse1 (= v_main_~y~0_1942 v_main_~y~0_1941)) (.cse2 (= v_main_~x~0_2440 v_main_~x~0_2439)) (.cse3 (= |v_main_#t~post6_623| |v_main_#t~post6_621|))) (or (and (or (not .cse0) (not (< v_main_~x~0_2440 1000000))) .cse1 .cse2 .cse3) (and (= (+ (* 2 v_main_~y~0_1941) v_main_~x~0_2440) (+ v_main_~x~0_2439 (* 2 v_main_~y~0_1942))) (< v_main_~y~0_1941 (+ 2 v_main_~y~0_1942 (div (+ 999999 (* (- 1) v_main_~x~0_2440)) 2))) (< v_main_~y~0_1942 v_main_~y~0_1941) .cse0) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1942, main_~x~0=v_main_~x~0_2440, main_#t~post6=|v_main_#t~post6_623|} OutVars{main_~y~0=v_main_~y~0_1941, main_~x~0=v_main_~x~0_2439, main_#t~post6=|v_main_#t~post6_621|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {47365#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:53,824 INFO L290 TraceCheckUtils]: 9: Hoare triple {47365#(<= main_~x~0 500000)} [345] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {47365#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:53,825 INFO L290 TraceCheckUtils]: 10: Hoare triple {47365#(<= main_~x~0 500000)} [346] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_2442)) (.cse1 (= v_main_~x~0_2442 v_main_~x~0_2441)) (.cse2 (= |v_main_#t~post5_293| |v_main_#t~post5_292|)) (.cse3 (= v_main_~y~0_1944 v_main_~y~0_1943)) (.cse4 (= |v_main_#t~post6_626| |v_main_#t~post6_622|))) (or (and .cse0 (= (+ v_main_~x~0_2442 v_main_~y~0_1943) (+ v_main_~x~0_2441 v_main_~y~0_1944)) (< v_main_~x~0_2442 v_main_~x~0_2441) (< v_main_~x~0_2441 750001)) (and .cse1 .cse2 (or (not (< v_main_~x~0_2442 750000)) (not .cse0)) .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_1944, main_#t~post5=|v_main_#t~post5_293|, main_~x~0=v_main_~x~0_2442, main_#t~post6=|v_main_#t~post6_626|} OutVars{main_~y~0=v_main_~y~0_1943, main_#t~post5=|v_main_#t~post5_292|, main_~x~0=v_main_~x~0_2441, main_#t~post6=|v_main_#t~post6_622|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {47366#(<= main_~x~0 750000)} is VALID [2022-04-28 04:01:53,825 INFO L290 TraceCheckUtils]: 11: Hoare triple {47366#(<= main_~x~0 750000)} [341] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {47360#false} is VALID [2022-04-28 04:01:53,825 INFO L272 TraceCheckUtils]: 12: Hoare triple {47360#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {47360#false} is VALID [2022-04-28 04:01:53,825 INFO L290 TraceCheckUtils]: 13: Hoare triple {47360#false} ~cond := #in~cond; {47360#false} is VALID [2022-04-28 04:01:53,825 INFO L290 TraceCheckUtils]: 14: Hoare triple {47360#false} assume 0 == ~cond; {47360#false} is VALID [2022-04-28 04:01:53,825 INFO L290 TraceCheckUtils]: 15: Hoare triple {47360#false} assume !false; {47360#false} is VALID [2022-04-28 04:01:53,826 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 04:01:53,826 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-04-28 04:01:53,826 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1244904048] [2022-04-28 04:01:53,826 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1244904048] provided 0 perfect and 1 imperfect interpolant sequences [2022-04-28 04:01:53,826 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1023266792] [2022-04-28 04:01:53,826 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-04-28 04:01:53,826 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-04-28 04:01:53,826 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-04-28 04:01:53,828 INFO L229 MonitoredProcess]: Starting monitored process 50 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-04-28 04:01:53,837 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Waiting until timeout for monitored process [2022-04-28 04:01:53,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:01:53,866 INFO L263 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 8 conjunts are in the unsatisfiable core [2022-04-28 04:01:53,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-04-28 04:01:53,874 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-04-28 04:01:54,066 INFO L272 TraceCheckUtils]: 0: Hoare triple {47359#true} call ULTIMATE.init(); {47359#true} is VALID [2022-04-28 04:01:54,066 INFO L290 TraceCheckUtils]: 1: Hoare triple {47359#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {47359#true} is VALID [2022-04-28 04:01:54,067 INFO L290 TraceCheckUtils]: 2: Hoare triple {47359#true} assume true; {47359#true} is VALID [2022-04-28 04:01:54,067 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {47359#true} {47359#true} #48#return; {47359#true} is VALID [2022-04-28 04:01:54,067 INFO L272 TraceCheckUtils]: 4: Hoare triple {47359#true} call #t~ret7 := main(); {47359#true} is VALID [2022-04-28 04:01:54,067 INFO L290 TraceCheckUtils]: 5: Hoare triple {47359#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {47386#(<= main_~x~0 0)} is VALID [2022-04-28 04:01:54,068 INFO L290 TraceCheckUtils]: 6: Hoare triple {47386#(<= main_~x~0 0)} [342] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2438 v_main_~x~0_2437)) (.cse1 (= |v_main_#t~post4_345| |v_main_#t~post4_344|))) (or (and (< v_main_~x~0_2438 v_main_~x~0_2437) (< v_main_~x~0_2437 500001)) (and .cse0 (not (< v_main_~x~0_2438 500000)) .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2438, main_#t~post4=|v_main_#t~post4_345|} OutVars{main_~x~0=v_main_~x~0_2437, main_#t~post4=|v_main_#t~post4_344|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {47365#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:54,068 INFO L290 TraceCheckUtils]: 7: Hoare triple {47365#(<= main_~x~0 500000)} [343] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {47365#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:54,069 INFO L290 TraceCheckUtils]: 8: Hoare triple {47365#(<= main_~x~0 500000)} [344] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_2440)) (.cse1 (= v_main_~y~0_1942 v_main_~y~0_1941)) (.cse2 (= v_main_~x~0_2440 v_main_~x~0_2439)) (.cse3 (= |v_main_#t~post6_623| |v_main_#t~post6_621|))) (or (and (or (not .cse0) (not (< v_main_~x~0_2440 1000000))) .cse1 .cse2 .cse3) (and (= (+ (* 2 v_main_~y~0_1941) v_main_~x~0_2440) (+ v_main_~x~0_2439 (* 2 v_main_~y~0_1942))) (< v_main_~y~0_1941 (+ 2 v_main_~y~0_1942 (div (+ 999999 (* (- 1) v_main_~x~0_2440)) 2))) (< v_main_~y~0_1942 v_main_~y~0_1941) .cse0) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1942, main_~x~0=v_main_~x~0_2440, main_#t~post6=|v_main_#t~post6_623|} OutVars{main_~y~0=v_main_~y~0_1941, main_~x~0=v_main_~x~0_2439, main_#t~post6=|v_main_#t~post6_621|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {47365#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:54,069 INFO L290 TraceCheckUtils]: 9: Hoare triple {47365#(<= main_~x~0 500000)} [345] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {47365#(<= main_~x~0 500000)} is VALID [2022-04-28 04:01:54,070 INFO L290 TraceCheckUtils]: 10: Hoare triple {47365#(<= main_~x~0 500000)} [346] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_2442)) (.cse1 (= v_main_~x~0_2442 v_main_~x~0_2441)) (.cse2 (= |v_main_#t~post5_293| |v_main_#t~post5_292|)) (.cse3 (= v_main_~y~0_1944 v_main_~y~0_1943)) (.cse4 (= |v_main_#t~post6_626| |v_main_#t~post6_622|))) (or (and .cse0 (= (+ v_main_~x~0_2442 v_main_~y~0_1943) (+ v_main_~x~0_2441 v_main_~y~0_1944)) (< v_main_~x~0_2442 v_main_~x~0_2441) (< v_main_~x~0_2441 750001)) (and .cse1 .cse2 (or (not (< v_main_~x~0_2442 750000)) (not .cse0)) .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_1944, main_#t~post5=|v_main_#t~post5_293|, main_~x~0=v_main_~x~0_2442, main_#t~post6=|v_main_#t~post6_626|} OutVars{main_~y~0=v_main_~y~0_1943, main_#t~post5=|v_main_#t~post5_292|, main_~x~0=v_main_~x~0_2441, main_#t~post6=|v_main_#t~post6_622|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {47366#(<= main_~x~0 750000)} is VALID [2022-04-28 04:01:54,070 INFO L290 TraceCheckUtils]: 11: Hoare triple {47366#(<= main_~x~0 750000)} [341] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {47360#false} is VALID [2022-04-28 04:01:54,070 INFO L272 TraceCheckUtils]: 12: Hoare triple {47360#false} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {47360#false} is VALID [2022-04-28 04:01:54,070 INFO L290 TraceCheckUtils]: 13: Hoare triple {47360#false} ~cond := #in~cond; {47360#false} is VALID [2022-04-28 04:01:54,070 INFO L290 TraceCheckUtils]: 14: Hoare triple {47360#false} assume 0 == ~cond; {47360#false} is VALID [2022-04-28 04:01:54,070 INFO L290 TraceCheckUtils]: 15: Hoare triple {47360#false} assume !false; {47360#false} is VALID [2022-04-28 04:01:54,070 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 04:01:54,070 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-04-28 04:01:54,540 INFO L290 TraceCheckUtils]: 15: Hoare triple {47360#false} assume !false; {47360#false} is VALID [2022-04-28 04:01:54,540 INFO L290 TraceCheckUtils]: 14: Hoare triple {47420#(not (<= __VERIFIER_assert_~cond 0))} assume 0 == ~cond; {47360#false} is VALID [2022-04-28 04:01:54,540 INFO L290 TraceCheckUtils]: 13: Hoare triple {47424#(< 0 |__VERIFIER_assert_#in~cond|)} ~cond := #in~cond; {47420#(not (<= __VERIFIER_assert_~cond 0))} is VALID [2022-04-28 04:01:54,541 INFO L272 TraceCheckUtils]: 12: Hoare triple {47428#(= main_~x~0 1000000)} call __VERIFIER_assert((if 1000000 == ~x~0 then 1 else 0)); {47424#(< 0 |__VERIFIER_assert_#in~cond|)} is VALID [2022-04-28 04:01:54,541 INFO L290 TraceCheckUtils]: 11: Hoare triple {47432#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [341] L10-2_primed-->L10-2: Formula: (not (< v_main_~x~0_12 1000000)) InVars {main_~x~0=v_main_~x~0_12} OutVars{main_~x~0=v_main_~x~0_12} AuxVars[] AssignedVars[] {47428#(= main_~x~0 1000000)} is VALID [2022-04-28 04:01:54,542 INFO L290 TraceCheckUtils]: 10: Hoare triple {47432#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [346] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 500000 v_main_~x~0_2442)) (.cse1 (= v_main_~x~0_2442 v_main_~x~0_2441)) (.cse2 (= |v_main_#t~post5_293| |v_main_#t~post5_292|)) (.cse3 (= v_main_~y~0_1944 v_main_~y~0_1943)) (.cse4 (= |v_main_#t~post6_626| |v_main_#t~post6_622|))) (or (and .cse0 (= (+ v_main_~x~0_2442 v_main_~y~0_1943) (+ v_main_~x~0_2441 v_main_~y~0_1944)) (< v_main_~x~0_2442 v_main_~x~0_2441) (< v_main_~x~0_2441 750001)) (and .cse1 .cse2 (or (not (< v_main_~x~0_2442 750000)) (not .cse0)) .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4))) InVars {main_~y~0=v_main_~y~0_1944, main_#t~post5=|v_main_#t~post5_293|, main_~x~0=v_main_~x~0_2442, main_#t~post6=|v_main_#t~post6_626|} OutVars{main_~y~0=v_main_~y~0_1943, main_#t~post5=|v_main_#t~post5_292|, main_~x~0=v_main_~x~0_2441, main_#t~post6=|v_main_#t~post6_622|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post5, main_#t~post6] {47432#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 04:01:54,542 INFO L290 TraceCheckUtils]: 9: Hoare triple {47432#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} [345] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {47432#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 04:01:54,543 INFO L290 TraceCheckUtils]: 8: Hoare triple {47442#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [344] L11-2-->L10-2_primed: Formula: (let ((.cse0 (<= 750000 v_main_~x~0_2440)) (.cse1 (= v_main_~y~0_1942 v_main_~y~0_1941)) (.cse2 (= v_main_~x~0_2440 v_main_~x~0_2439)) (.cse3 (= |v_main_#t~post6_623| |v_main_#t~post6_621|))) (or (and (or (not .cse0) (not (< v_main_~x~0_2440 1000000))) .cse1 .cse2 .cse3) (and (= (+ (* 2 v_main_~y~0_1941) v_main_~x~0_2440) (+ v_main_~x~0_2439 (* 2 v_main_~y~0_1942))) (< v_main_~y~0_1941 (+ 2 v_main_~y~0_1942 (div (+ 999999 (* (- 1) v_main_~x~0_2440)) 2))) (< v_main_~y~0_1942 v_main_~y~0_1941) .cse0) (and .cse1 .cse2 .cse3))) InVars {main_~y~0=v_main_~y~0_1942, main_~x~0=v_main_~x~0_2440, main_#t~post6=|v_main_#t~post6_623|} OutVars{main_~y~0=v_main_~y~0_1941, main_~x~0=v_main_~x~0_2439, main_#t~post6=|v_main_#t~post6_621|} AuxVars[] AssignedVars[main_~x~0, main_~y~0, main_#t~post6] {47432#(or (< main_~x~0 1000000) (= main_~x~0 1000000))} is VALID [2022-04-28 04:01:54,544 INFO L290 TraceCheckUtils]: 7: Hoare triple {47442#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [343] L10-2_primed-->L11-2: Formula: true InVars {} OutVars{} AuxVars[] AssignedVars[] {47442#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 04:01:54,545 INFO L290 TraceCheckUtils]: 6: Hoare triple {47442#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} [342] L11-2-->L10-2_primed: Formula: (let ((.cse0 (= v_main_~x~0_2438 v_main_~x~0_2437)) (.cse1 (= |v_main_#t~post4_345| |v_main_#t~post4_344|))) (or (and (< v_main_~x~0_2438 v_main_~x~0_2437) (< v_main_~x~0_2437 500001)) (and .cse0 (not (< v_main_~x~0_2438 500000)) .cse1) (and .cse0 .cse1))) InVars {main_~x~0=v_main_~x~0_2438, main_#t~post4=|v_main_#t~post4_345|} OutVars{main_~x~0=v_main_~x~0_2437, main_#t~post4=|v_main_#t~post4_344|} AuxVars[] AssignedVars[main_~x~0, main_#t~post4] {47442#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 04:01:54,545 INFO L290 TraceCheckUtils]: 5: Hoare triple {47359#true} ~x~0 := 0;~y~0 := 500000;~z~0 := 0;~x~0 := 0; {47442#(and (or (<= (+ 2 (div (+ 999999 (* (- 1) main_~x~0)) 2)) (div (+ (- 1000001) main_~x~0) (- 2))) (not (<= 750000 main_~x~0))) (or (< main_~x~0 1000000) (= main_~x~0 1000000)))} is VALID [2022-04-28 04:01:54,546 INFO L272 TraceCheckUtils]: 4: Hoare triple {47359#true} call #t~ret7 := main(); {47359#true} is VALID [2022-04-28 04:01:54,546 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {47359#true} {47359#true} #48#return; {47359#true} is VALID [2022-04-28 04:01:54,546 INFO L290 TraceCheckUtils]: 2: Hoare triple {47359#true} assume true; {47359#true} is VALID [2022-04-28 04:01:54,546 INFO L290 TraceCheckUtils]: 1: Hoare triple {47359#true} #NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(17, 2);call #Ultimate.allocInit(12, 3); {47359#true} is VALID [2022-04-28 04:01:54,546 INFO L272 TraceCheckUtils]: 0: Hoare triple {47359#true} call ULTIMATE.init(); {47359#true} is VALID [2022-04-28 04:01:54,546 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-04-28 04:01:54,546 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1023266792] provided 0 perfect and 2 imperfect interpolant sequences [2022-04-28 04:01:54,546 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-04-28 04:01:54,546 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 7] total 12 [2022-04-28 04:01:56,698 INFO L136 FreeRefinementEngine]: Strategy ACCELERATED_INTERPOLATION found an infeasible trace [2022-04-28 04:01:56,698 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleAcceleratedInterpolation [1034258949] [2022-04-28 04:01:56,698 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleAcceleratedInterpolation [1034258949] provided 1 perfect and 0 imperfect interpolant sequences [2022-04-28 04:01:56,698 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-04-28 04:01:56,698 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [55] imperfect sequences [] total 55 [2022-04-28 04:01:56,699 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1567363691] [2022-04-28 04:01:56,699 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-04-28 04:01:56,699 INFO L78 Accepts]: Start accepts. Automaton has has 55 states, 55 states have (on average 3.8) internal successors, (209), 54 states have internal predecessors, (209), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 213 [2022-04-28 04:01:56,699 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-04-28 04:01:56,699 INFO L86 InductivityCheck]: Starting inductivity check of a Floyd-Hoare automaton with has 55 states, 55 states have (on average 3.8) internal successors, (209), 54 states have internal predecessors, (209), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-04-28 04:01:56,843 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 213 edges. 213 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-04-28 04:01:56,843 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 55 states [2022-04-28 04:01:56,843 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy ACCELERATED_INTERPOLATION [2022-04-28 04:01:56,843 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 55 interpolants. [2022-04-28 04:01:56,844 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=305, Invalid=3727, Unknown=0, NotChecked=0, Total=4032 [2022-04-28 04:01:56,844 INFO L87 Difference]: Start difference. First operand 216 states and 220 transitions. Second operand has 55 states, 55 states have (on average 3.8) internal successors, (209), 54 states have internal predecessors, (209), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)