./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/recursified_nla-digbench/recursified_mannadiv.c --full-output --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version de325976 Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/recursified_nla-digbench/recursified_mannadiv.c -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 305ef194ca8c72f4da0a6deb18ed40b72305718d65c18a21aa3fcb3830c499e5 --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --- Real Ultimate output --- This is Ultimate 0.2.4-tmp.dk.referee-eval-de32597-m [2024-09-18 16:51:41,752 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-18 16:51:41,809 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-18 16:51:41,815 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-18 16:51:41,817 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-18 16:51:41,842 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-18 16:51:41,842 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-18 16:51:41,843 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-18 16:51:41,843 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-18 16:51:41,846 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-18 16:51:41,846 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-18 16:51:41,846 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-18 16:51:41,847 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-18 16:51:41,847 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-18 16:51:41,847 INFO L153 SettingsManager]: * Use SBE=true [2024-09-18 16:51:41,847 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-18 16:51:41,848 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-18 16:51:41,849 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-18 16:51:41,849 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-18 16:51:41,849 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-18 16:51:41,849 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-18 16:51:41,850 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-18 16:51:41,850 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-18 16:51:41,850 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-18 16:51:41,850 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-18 16:51:41,850 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-18 16:51:41,851 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-18 16:51:41,851 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-18 16:51:41,852 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-18 16:51:41,852 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-18 16:51:41,852 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-18 16:51:41,852 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-18 16:51:41,853 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-18 16:51:41,853 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-18 16:51:41,853 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-18 16:51:41,853 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-18 16:51:41,854 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-18 16:51:41,854 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-18 16:51:41,854 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-18 16:51:41,854 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-18 16:51:41,854 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-18 16:51:41,855 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-18 16:51:41,855 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 305ef194ca8c72f4da0a6deb18ed40b72305718d65c18a21aa3fcb3830c499e5 Applying setting for plugin de.uni_freiburg.informatik.ultimate.boogie.procedureinliner: Inline calls to implemented procedures -> NEVER Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Generate GraphML witnesses -> false [2024-09-18 16:51:42,031 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-18 16:51:42,050 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-18 16:51:42,053 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-18 16:51:42,054 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-18 16:51:42,054 INFO L274 PluginConnector]: CDTParser initialized [2024-09-18 16:51:42,055 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/recursified_nla-digbench/recursified_mannadiv.c [2024-09-18 16:51:43,264 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-18 16:51:43,394 INFO L384 CDTParser]: Found 1 translation units. [2024-09-18 16:51:43,395 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_mannadiv.c [2024-09-18 16:51:43,400 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/ca4b13fc3/a6bf3b71739a4d45b3c9a9bc987900c8/FLAG7f2939bde [2024-09-18 16:51:43,412 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/ca4b13fc3/a6bf3b71739a4d45b3c9a9bc987900c8 [2024-09-18 16:51:43,414 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-18 16:51:43,415 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-09-18 16:51:43,416 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-18 16:51:43,416 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-18 16:51:43,420 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-18 16:51:43,420 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.09 04:51:43" (1/1) ... [2024-09-18 16:51:43,421 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@fcb0e3d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43, skipping insertion in model container [2024-09-18 16:51:43,421 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.09 04:51:43" (1/1) ... [2024-09-18 16:51:43,435 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-18 16:51:43,535 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_mannadiv.c[1105,1118] [2024-09-18 16:51:43,546 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-18 16:51:43,553 INFO L200 MainTranslator]: Completed pre-run [2024-09-18 16:51:43,561 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_mannadiv.c[1105,1118] [2024-09-18 16:51:43,570 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-18 16:51:43,586 INFO L204 MainTranslator]: Completed translation [2024-09-18 16:51:43,587 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43 WrapperNode [2024-09-18 16:51:43,587 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-18 16:51:43,588 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-18 16:51:43,588 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-18 16:51:43,588 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-18 16:51:43,593 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43" (1/1) ... [2024-09-18 16:51:43,599 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43" (1/1) ... [2024-09-18 16:51:43,604 INFO L138 Inliner]: procedures = 16, calls = 57, calls flagged for inlining = 0, calls inlined = 0, statements flattened = 0 [2024-09-18 16:51:43,604 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-18 16:51:43,605 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-18 16:51:43,605 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-18 16:51:43,605 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-18 16:51:43,613 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43" (1/1) ... [2024-09-18 16:51:43,613 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43" (1/1) ... [2024-09-18 16:51:43,616 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43" (1/1) ... [2024-09-18 16:51:43,639 INFO L175 MemorySlicer]: Split 31 memory accesses to 6 slices as follows [2, 5, 7, 5, 7, 5]. 23 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2, 0, 0, 0, 0, 0]. The 10 writes are split as follows [0, 1, 3, 2, 3, 1]. [2024-09-18 16:51:43,639 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43" (1/1) ... [2024-09-18 16:51:43,639 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43" (1/1) ... [2024-09-18 16:51:43,646 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43" (1/1) ... [2024-09-18 16:51:43,652 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43" (1/1) ... [2024-09-18 16:51:43,653 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43" (1/1) ... [2024-09-18 16:51:43,654 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43" (1/1) ... [2024-09-18 16:51:43,656 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-18 16:51:43,657 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-18 16:51:43,657 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-18 16:51:43,657 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-18 16:51:43,658 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43" (1/1) ... [2024-09-18 16:51:43,664 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-18 16:51:43,678 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:51:43,690 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-18 16:51:43,693 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-18 16:51:43,727 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-18 16:51:43,728 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2024-09-18 16:51:43,728 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2024-09-18 16:51:43,728 INFO L130 BoogieDeclarations]: Found specification of procedure main [2024-09-18 16:51:43,728 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2024-09-18 16:51:43,728 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-09-18 16:51:43,728 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-09-18 16:51:43,728 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-09-18 16:51:43,728 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-09-18 16:51:43,728 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-09-18 16:51:43,728 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-09-18 16:51:43,729 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-09-18 16:51:43,729 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-09-18 16:51:43,729 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-09-18 16:51:43,729 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2024-09-18 16:51:43,729 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2024-09-18 16:51:43,729 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2024-09-18 16:51:43,729 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#5 [2024-09-18 16:51:43,729 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2024-09-18 16:51:43,729 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2024-09-18 16:51:43,729 INFO L130 BoogieDeclarations]: Found specification of procedure func_to_recursive_line_31_to_42_0 [2024-09-18 16:51:43,729 INFO L138 BoogieDeclarations]: Found implementation of procedure func_to_recursive_line_31_to_42_0 [2024-09-18 16:51:43,730 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-18 16:51:43,730 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-18 16:51:43,730 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-09-18 16:51:43,730 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-09-18 16:51:43,730 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2024-09-18 16:51:43,730 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2024-09-18 16:51:43,730 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2024-09-18 16:51:43,730 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#5 [2024-09-18 16:51:43,730 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-18 16:51:43,730 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-18 16:51:43,731 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-09-18 16:51:43,848 INFO L242 CfgBuilder]: Building ICFG [2024-09-18 16:51:43,850 INFO L268 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-18 16:51:44,030 INFO L? ?]: Removed 8 outVars from TransFormulas that were not future-live. [2024-09-18 16:51:44,030 INFO L291 CfgBuilder]: Performing block encoding [2024-09-18 16:51:44,043 INFO L313 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-18 16:51:44,043 INFO L318 CfgBuilder]: Removed 1 assume(true) statements. [2024-09-18 16:51:44,044 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.09 04:51:44 BoogieIcfgContainer [2024-09-18 16:51:44,044 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-18 16:51:44,045 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-18 16:51:44,045 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-18 16:51:44,047 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-18 16:51:44,047 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.09 04:51:43" (1/3) ... [2024-09-18 16:51:44,048 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1acb6df9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.09 04:51:44, skipping insertion in model container [2024-09-18 16:51:44,048 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.09 04:51:43" (2/3) ... [2024-09-18 16:51:44,048 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1acb6df9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.09 04:51:44, skipping insertion in model container [2024-09-18 16:51:44,048 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.09 04:51:44" (3/3) ... [2024-09-18 16:51:44,053 INFO L112 eAbstractionObserver]: Analyzing ICFG recursified_mannadiv.c [2024-09-18 16:51:44,065 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-18 16:51:44,065 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-09-18 16:51:44,099 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-18 16:51:44,104 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@67d0ce, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-18 16:51:44,104 INFO L337 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-09-18 16:51:44,107 INFO L276 IsEmpty]: Start isEmpty. Operand has 35 states, 20 states have (on average 1.3) internal successors, (26), 22 states have internal predecessors, (26), 8 states have call successors, (8), 5 states have call predecessors, (8), 5 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2024-09-18 16:51:44,112 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2024-09-18 16:51:44,112 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:51:44,113 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:51:44,113 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:51:44,116 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:51:44,116 INFO L85 PathProgramCache]: Analyzing trace with hash -1619877398, now seen corresponding path program 1 times [2024-09-18 16:51:44,123 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:51:44,123 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1514561911] [2024-09-18 16:51:44,123 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:51:44,124 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:51:44,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:51:44,268 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-18 16:51:44,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:51:44,277 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-18 16:51:44,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:51:44,281 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-18 16:51:44,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:51:44,285 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-18 16:51:44,286 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:51:44,286 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1514561911] [2024-09-18 16:51:44,286 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1514561911] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-18 16:51:44,287 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-18 16:51:44,287 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-09-18 16:51:44,288 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [732354067] [2024-09-18 16:51:44,288 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-18 16:51:44,291 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-09-18 16:51:44,291 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:51:44,309 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-09-18 16:51:44,309 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-18 16:51:44,312 INFO L87 Difference]: Start difference. First operand has 35 states, 20 states have (on average 1.3) internal successors, (26), 22 states have internal predecessors, (26), 8 states have call successors, (8), 5 states have call predecessors, (8), 5 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) Second operand has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-09-18 16:51:44,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:51:44,343 INFO L93 Difference]: Finished difference Result 64 states and 83 transitions. [2024-09-18 16:51:44,344 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-09-18 16:51:44,345 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 24 [2024-09-18 16:51:44,345 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:51:44,350 INFO L225 Difference]: With dead ends: 64 [2024-09-18 16:51:44,350 INFO L226 Difference]: Without dead ends: 31 [2024-09-18 16:51:44,372 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-18 16:51:44,378 INFO L434 NwaCegarLoop]: 37 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 37 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 2 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-18 16:51:44,379 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 37 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 2 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-18 16:51:44,394 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2024-09-18 16:51:44,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 31. [2024-09-18 16:51:44,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 18 states have (on average 1.1666666666666667) internal successors, (21), 20 states have internal predecessors, (21), 8 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-09-18 16:51:44,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2024-09-18 16:51:44,429 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 24 [2024-09-18 16:51:44,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:51:44,430 INFO L474 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2024-09-18 16:51:44,430 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-09-18 16:51:44,431 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:51:44,433 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2024-09-18 16:51:44,434 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2024-09-18 16:51:44,434 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:51:44,435 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:51:44,435 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-18 16:51:44,435 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:51:44,436 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:51:44,436 INFO L85 PathProgramCache]: Analyzing trace with hash 1787806574, now seen corresponding path program 1 times [2024-09-18 16:51:44,436 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:51:44,436 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [684685088] [2024-09-18 16:51:44,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:51:44,436 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:51:44,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:51:44,520 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1995391487] [2024-09-18 16:51:44,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:51:44,521 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:51:44,521 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:51:44,524 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:51:44,525 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-18 16:51:44,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:51:44,641 INFO L262 TraceCheckSpWp]: Trace formula consists of 203 conjuncts, 63 conjuncts are in the unsatisfiable core [2024-09-18 16:51:44,651 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:51:44,685 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:51:44,698 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:51:44,704 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-18 16:51:44,709 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:51:44,790 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:51:44,797 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-18 16:51:44,840 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-18 16:51:44,841 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-18 16:51:44,841 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:51:44,841 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [684685088] [2024-09-18 16:51:44,842 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:51:44,842 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1995391487] [2024-09-18 16:51:44,842 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1995391487] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-18 16:51:44,842 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-18 16:51:44,842 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-09-18 16:51:44,843 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [313198132] [2024-09-18 16:51:44,843 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-18 16:51:44,843 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-09-18 16:51:44,843 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:51:44,844 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-09-18 16:51:44,844 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2024-09-18 16:51:44,845 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 8 states, 6 states have (on average 2.0) internal successors, (12), 6 states have internal predecessors, (12), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2024-09-18 16:51:44,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:51:44,994 INFO L93 Difference]: Finished difference Result 46 states and 52 transitions. [2024-09-18 16:51:44,995 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-18 16:51:44,995 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 2.0) internal successors, (12), 6 states have internal predecessors, (12), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 24 [2024-09-18 16:51:44,995 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:51:44,996 INFO L225 Difference]: With dead ends: 46 [2024-09-18 16:51:44,996 INFO L226 Difference]: Without dead ends: 44 [2024-09-18 16:51:44,997 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2024-09-18 16:51:44,998 INFO L434 NwaCegarLoop]: 23 mSDtfsCounter, 14 mSDsluCounter, 126 mSDsCounter, 0 mSdLazyCounter, 94 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 149 SdHoareTripleChecker+Invalid, 98 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 94 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-18 16:51:44,998 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 149 Invalid, 98 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 94 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-18 16:51:45,001 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44 states. [2024-09-18 16:51:45,011 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44 to 42. [2024-09-18 16:51:45,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42 states, 26 states have (on average 1.1538461538461537) internal successors, (30), 28 states have internal predecessors, (30), 9 states have call successors, (9), 7 states have call predecessors, (9), 6 states have return successors, (8), 7 states have call predecessors, (8), 7 states have call successors, (8) [2024-09-18 16:51:45,015 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42 states to 42 states and 47 transitions. [2024-09-18 16:51:45,016 INFO L78 Accepts]: Start accepts. Automaton has 42 states and 47 transitions. Word has length 24 [2024-09-18 16:51:45,016 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:51:45,016 INFO L474 AbstractCegarLoop]: Abstraction has 42 states and 47 transitions. [2024-09-18 16:51:45,017 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 2.0) internal successors, (12), 6 states have internal predecessors, (12), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2024-09-18 16:51:45,017 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:51:45,017 INFO L276 IsEmpty]: Start isEmpty. Operand 42 states and 47 transitions. [2024-09-18 16:51:45,018 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2024-09-18 16:51:45,018 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:51:45,018 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:51:45,032 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-09-18 16:51:45,222 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:51:45,223 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:51:45,223 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:51:45,223 INFO L85 PathProgramCache]: Analyzing trace with hash -1422973788, now seen corresponding path program 1 times [2024-09-18 16:51:45,223 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:51:45,223 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1338765092] [2024-09-18 16:51:45,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:51:45,223 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:51:45,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:51:45,307 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [479510520] [2024-09-18 16:51:45,307 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:51:45,307 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:51:45,307 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:51:45,309 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:51:45,314 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-18 16:51:45,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:51:45,393 INFO L262 TraceCheckSpWp]: Trace formula consists of 226 conjuncts, 43 conjuncts are in the unsatisfiable core [2024-09-18 16:51:45,397 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:51:45,406 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:51:45,409 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-18 16:51:45,418 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:51:45,454 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:51:45,747 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2024-09-18 16:51:45,787 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-18 16:51:45,787 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-18 16:51:45,787 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:51:45,788 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1338765092] [2024-09-18 16:51:45,788 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:51:45,788 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [479510520] [2024-09-18 16:51:45,788 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [479510520] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-18 16:51:45,788 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-18 16:51:45,789 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2024-09-18 16:51:45,789 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1087272710] [2024-09-18 16:51:45,789 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-18 16:51:45,789 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2024-09-18 16:51:45,790 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:51:45,790 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2024-09-18 16:51:45,792 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=88, Unknown=0, NotChecked=0, Total=110 [2024-09-18 16:51:45,792 INFO L87 Difference]: Start difference. First operand 42 states and 47 transitions. Second operand has 11 states, 9 states have (on average 2.111111111111111) internal successors, (19), 8 states have internal predecessors, (19), 4 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-18 16:51:46,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:51:46,076 INFO L93 Difference]: Finished difference Result 52 states and 56 transitions. [2024-09-18 16:51:46,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-09-18 16:51:46,078 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 9 states have (on average 2.111111111111111) internal successors, (19), 8 states have internal predecessors, (19), 4 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 34 [2024-09-18 16:51:46,078 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:51:46,080 INFO L225 Difference]: With dead ends: 52 [2024-09-18 16:51:46,080 INFO L226 Difference]: Without dead ends: 42 [2024-09-18 16:51:46,081 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=46, Invalid=194, Unknown=0, NotChecked=0, Total=240 [2024-09-18 16:51:46,082 INFO L434 NwaCegarLoop]: 13 mSDtfsCounter, 19 mSDsluCounter, 57 mSDsCounter, 0 mSdLazyCounter, 259 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 70 SdHoareTripleChecker+Invalid, 268 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 259 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-18 16:51:46,084 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 70 Invalid, 268 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 259 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-18 16:51:46,085 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42 states. [2024-09-18 16:51:46,096 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42 to 42. [2024-09-18 16:51:46,097 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42 states, 26 states have (on average 1.1153846153846154) internal successors, (29), 27 states have internal predecessors, (29), 9 states have call successors, (9), 7 states have call predecessors, (9), 6 states have return successors, (8), 7 states have call predecessors, (8), 7 states have call successors, (8) [2024-09-18 16:51:46,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42 states to 42 states and 46 transitions. [2024-09-18 16:51:46,097 INFO L78 Accepts]: Start accepts. Automaton has 42 states and 46 transitions. Word has length 34 [2024-09-18 16:51:46,098 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:51:46,098 INFO L474 AbstractCegarLoop]: Abstraction has 42 states and 46 transitions. [2024-09-18 16:51:46,098 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 9 states have (on average 2.111111111111111) internal successors, (19), 8 states have internal predecessors, (19), 4 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-18 16:51:46,098 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:51:46,098 INFO L276 IsEmpty]: Start isEmpty. Operand 42 states and 46 transitions. [2024-09-18 16:51:46,099 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2024-09-18 16:51:46,099 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:51:46,101 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:51:46,126 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-09-18 16:51:46,302 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:51:46,302 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:51:46,303 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:51:46,303 INFO L85 PathProgramCache]: Analyzing trace with hash 480719411, now seen corresponding path program 1 times [2024-09-18 16:51:46,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:51:46,303 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [985086665] [2024-09-18 16:51:46,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:51:46,303 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:51:46,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:51:46,362 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [351746683] [2024-09-18 16:51:46,365 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:51:46,365 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:51:46,365 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:51:46,369 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:51:46,370 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-18 16:51:46,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:51:46,466 INFO L262 TraceCheckSpWp]: Trace formula consists of 289 conjuncts, 139 conjuncts are in the unsatisfiable core [2024-09-18 16:51:46,474 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:51:46,480 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:51:46,483 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:51:46,498 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-18 16:51:46,502 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:51:46,519 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:51:46,691 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:51:46,696 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:51:46,703 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 17 [2024-09-18 16:51:46,786 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 13 [2024-09-18 16:51:46,789 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2024-09-18 16:51:46,865 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-18 16:51:46,865 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:51:47,121 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-18 16:51:47,121 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:51:47,121 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [985086665] [2024-09-18 16:51:47,121 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:51:47,121 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [351746683] [2024-09-18 16:51:47,121 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [351746683] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-18 16:51:47,122 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-18 16:51:47,122 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 11] total 19 [2024-09-18 16:51:47,122 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [417956648] [2024-09-18 16:51:47,122 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-18 16:51:47,122 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2024-09-18 16:51:47,123 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:51:47,123 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2024-09-18 16:51:47,123 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=286, Unknown=0, NotChecked=0, Total=342 [2024-09-18 16:51:47,124 INFO L87 Difference]: Start difference. First operand 42 states and 46 transitions. Second operand has 19 states, 15 states have (on average 2.066666666666667) internal successors, (31), 14 states have internal predecessors, (31), 9 states have call successors, (12), 7 states have call predecessors, (12), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-18 16:51:47,654 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:51:47,655 INFO L93 Difference]: Finished difference Result 63 states and 76 transitions. [2024-09-18 16:51:47,655 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2024-09-18 16:51:47,656 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 15 states have (on average 2.066666666666667) internal successors, (31), 14 states have internal predecessors, (31), 9 states have call successors, (12), 7 states have call predecessors, (12), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 35 [2024-09-18 16:51:47,658 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:51:47,659 INFO L225 Difference]: With dead ends: 63 [2024-09-18 16:51:47,659 INFO L226 Difference]: Without dead ends: 59 [2024-09-18 16:51:47,659 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 49 SyntacticMatches, 3 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 127 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=167, Invalid=763, Unknown=0, NotChecked=0, Total=930 [2024-09-18 16:51:47,660 INFO L434 NwaCegarLoop]: 26 mSDtfsCounter, 54 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 257 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 244 SdHoareTripleChecker+Invalid, 275 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 257 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-18 16:51:47,660 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 244 Invalid, 275 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 257 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-18 16:51:47,661 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2024-09-18 16:51:47,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 55. [2024-09-18 16:51:47,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 35 states have (on average 1.1142857142857143) internal successors, (39), 36 states have internal predecessors, (39), 11 states have call successors, (11), 9 states have call predecessors, (11), 8 states have return successors, (12), 9 states have call predecessors, (12), 9 states have call successors, (12) [2024-09-18 16:51:47,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 62 transitions. [2024-09-18 16:51:47,682 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 62 transitions. Word has length 35 [2024-09-18 16:51:47,683 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:51:47,683 INFO L474 AbstractCegarLoop]: Abstraction has 55 states and 62 transitions. [2024-09-18 16:51:47,683 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 15 states have (on average 2.066666666666667) internal successors, (31), 14 states have internal predecessors, (31), 9 states have call successors, (12), 7 states have call predecessors, (12), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-18 16:51:47,683 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:51:47,683 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 62 transitions. [2024-09-18 16:51:47,686 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2024-09-18 16:51:47,687 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:51:47,687 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:51:47,700 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-09-18 16:51:47,887 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:51:47,888 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:51:47,888 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:51:47,888 INFO L85 PathProgramCache]: Analyzing trace with hash 474321093, now seen corresponding path program 1 times [2024-09-18 16:51:47,888 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:51:47,889 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1253202015] [2024-09-18 16:51:47,889 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:51:47,889 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:51:47,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:51:47,935 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [474390197] [2024-09-18 16:51:47,936 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:51:47,936 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:51:47,936 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:51:47,937 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:51:47,938 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-18 16:51:48,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:51:48,031 INFO L262 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 113 conjuncts are in the unsatisfiable core [2024-09-18 16:51:48,036 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:51:48,042 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:51:48,097 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:51:48,100 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:51:48,106 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-18 16:51:48,126 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:51:48,605 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-18 16:51:48,842 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:51:48,847 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:51:48,854 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 48 treesize of output 21 [2024-09-18 16:51:48,858 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 13 [2024-09-18 16:51:48,912 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-18 16:51:48,913 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 29 [2024-09-18 16:51:49,005 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 13 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-18 16:51:49,005 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:51:49,926 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:51:49,926 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1253202015] [2024-09-18 16:51:49,926 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:51:49,926 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [474390197] [2024-09-18 16:51:49,926 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [474390197] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:51:49,926 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-18 16:51:49,926 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2024-09-18 16:51:49,926 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [442364773] [2024-09-18 16:51:49,927 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-18 16:51:49,927 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-09-18 16:51:49,927 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:51:49,927 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-09-18 16:51:49,928 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=81, Invalid=569, Unknown=0, NotChecked=0, Total=650 [2024-09-18 16:51:49,928 INFO L87 Difference]: Start difference. First operand 55 states and 62 transitions. Second operand has 21 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 18 states have internal predecessors, (28), 8 states have call successors, (9), 4 states have call predecessors, (9), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-18 16:51:53,956 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-18 16:51:54,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:51:54,707 INFO L93 Difference]: Finished difference Result 68 states and 77 transitions. [2024-09-18 16:51:54,707 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-18 16:51:54,708 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 18 states have internal predecessors, (28), 8 states have call successors, (9), 4 states have call predecessors, (9), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) Word has length 47 [2024-09-18 16:51:54,708 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:51:54,709 INFO L225 Difference]: With dead ends: 68 [2024-09-18 16:51:54,709 INFO L226 Difference]: Without dead ends: 58 [2024-09-18 16:51:54,710 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 24 SyntacticMatches, 7 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 290 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=134, Invalid=1056, Unknown=0, NotChecked=0, Total=1190 [2024-09-18 16:51:54,711 INFO L434 NwaCegarLoop]: 17 mSDtfsCounter, 24 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 480 mSolverCounterSat, 6 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 487 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 480 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.4s IncrementalHoareTripleChecker+Time [2024-09-18 16:51:54,711 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 129 Invalid, 487 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 480 Invalid, 1 Unknown, 0 Unchecked, 4.4s Time] [2024-09-18 16:51:54,712 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2024-09-18 16:51:54,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 58. [2024-09-18 16:51:54,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 37 states have (on average 1.0810810810810811) internal successors, (40), 38 states have internal predecessors, (40), 12 states have call successors, (12), 10 states have call predecessors, (12), 8 states have return successors, (15), 9 states have call predecessors, (15), 10 states have call successors, (15) [2024-09-18 16:51:54,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 67 transitions. [2024-09-18 16:51:54,730 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 67 transitions. Word has length 47 [2024-09-18 16:51:54,731 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:51:54,731 INFO L474 AbstractCegarLoop]: Abstraction has 58 states and 67 transitions. [2024-09-18 16:51:54,731 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 18 states have internal predecessors, (28), 8 states have call successors, (9), 4 states have call predecessors, (9), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-18 16:51:54,731 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:51:54,731 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 67 transitions. [2024-09-18 16:51:54,732 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2024-09-18 16:51:54,732 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:51:54,733 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:51:54,745 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2024-09-18 16:51:54,936 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:51:54,937 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:51:54,937 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:51:54,937 INFO L85 PathProgramCache]: Analyzing trace with hash -343327357, now seen corresponding path program 1 times [2024-09-18 16:51:54,937 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:51:54,938 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1685669528] [2024-09-18 16:51:54,938 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:51:54,938 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:51:54,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:51:54,964 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [2022195048] [2024-09-18 16:51:54,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:51:54,964 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:51:54,964 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:51:54,966 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:51:54,969 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-18 16:51:55,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:51:55,064 INFO L262 TraceCheckSpWp]: Trace formula consists of 309 conjuncts, 82 conjuncts are in the unsatisfiable core [2024-09-18 16:51:55,067 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:51:55,123 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-18 16:51:55,127 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:51:55,132 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:51:55,162 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:51:55,610 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:51:55,688 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 13 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-18 16:51:55,689 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:51:55,992 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:51:55,993 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1685669528] [2024-09-18 16:51:55,993 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:51:55,993 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2022195048] [2024-09-18 16:51:55,993 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2022195048] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:51:55,993 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-18 16:51:55,993 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2024-09-18 16:51:55,993 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [449968672] [2024-09-18 16:51:55,994 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-18 16:51:55,994 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-09-18 16:51:55,994 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:51:55,994 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-09-18 16:51:55,995 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=74, Invalid=478, Unknown=0, NotChecked=0, Total=552 [2024-09-18 16:51:55,995 INFO L87 Difference]: Start difference. First operand 58 states and 67 transitions. Second operand has 21 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 18 states have internal predecessors, (28), 8 states have call successors, (9), 4 states have call predecessors, (9), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-18 16:52:00,020 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-18 16:52:00,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:52:00,537 INFO L93 Difference]: Finished difference Result 66 states and 77 transitions. [2024-09-18 16:52:00,537 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-18 16:52:00,537 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 18 states have internal predecessors, (28), 8 states have call successors, (9), 4 states have call predecessors, (9), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) Word has length 47 [2024-09-18 16:52:00,537 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:52:00,541 INFO L225 Difference]: With dead ends: 66 [2024-09-18 16:52:00,541 INFO L226 Difference]: Without dead ends: 60 [2024-09-18 16:52:00,544 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 60 GetRequests, 23 SyntacticMatches, 7 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 255 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=118, Invalid=874, Unknown=0, NotChecked=0, Total=992 [2024-09-18 16:52:00,545 INFO L434 NwaCegarLoop]: 17 mSDtfsCounter, 20 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 395 mSolverCounterSat, 7 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 22 SdHoareTripleChecker+Valid, 116 SdHoareTripleChecker+Invalid, 403 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 395 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.3s IncrementalHoareTripleChecker+Time [2024-09-18 16:52:00,545 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [22 Valid, 116 Invalid, 403 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 395 Invalid, 1 Unknown, 0 Unchecked, 4.3s Time] [2024-09-18 16:52:00,545 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2024-09-18 16:52:00,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 57. [2024-09-18 16:52:00,575 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 37 states have (on average 1.0810810810810811) internal successors, (40), 37 states have internal predecessors, (40), 11 states have call successors, (11), 10 states have call predecessors, (11), 8 states have return successors, (12), 9 states have call predecessors, (12), 9 states have call successors, (12) [2024-09-18 16:52:00,576 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 63 transitions. [2024-09-18 16:52:00,581 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 63 transitions. Word has length 47 [2024-09-18 16:52:00,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:52:00,582 INFO L474 AbstractCegarLoop]: Abstraction has 57 states and 63 transitions. [2024-09-18 16:52:00,582 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 18 states have internal predecessors, (28), 8 states have call successors, (9), 4 states have call predecessors, (9), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-18 16:52:00,582 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:52:00,582 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 63 transitions. [2024-09-18 16:52:00,583 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2024-09-18 16:52:00,583 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:52:00,583 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:52:00,596 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2024-09-18 16:52:00,784 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2024-09-18 16:52:00,784 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:52:00,784 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:52:00,785 INFO L85 PathProgramCache]: Analyzing trace with hash 1442337340, now seen corresponding path program 2 times [2024-09-18 16:52:00,785 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:52:00,785 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [88988618] [2024-09-18 16:52:00,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:52:00,785 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:52:00,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:52:00,814 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [888331175] [2024-09-18 16:52:00,814 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-18 16:52:00,814 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:52:00,814 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:52:00,818 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:52:00,827 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-18 16:52:00,932 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-18 16:52:00,932 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-18 16:52:00,936 WARN L260 TraceCheckSpWp]: Trace formula consists of 402 conjuncts, 215 conjuncts are in the unsatisfiable core [2024-09-18 16:52:00,940 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:52:00,943 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:52:00,945 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:52:00,948 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:52:00,951 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:52:00,959 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:52:01,195 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:52:01,678 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-18 16:52:02,048 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:52:02,143 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:52:02,152 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:52:02,247 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 18 proven. 15 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-18 16:52:02,247 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:52:05,250 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 42 treesize of output 34 [2024-09-18 16:52:05,279 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 34 treesize of output 30 [2024-09-18 16:52:09,338 WARN L854 $PredicateComparison]: unable to prove that (let ((.cse2 (select |c_old(#memory_int#3)| |c_func_to_recursive_line_31_to_42_0_#in~y1.base|))) (let ((.cse4 (select |c_old(#memory_int#4)| |c_func_to_recursive_line_31_to_42_0_#in~y2.base|)) (.cse5 (forall ((|v_func_to_recursive_line_31_to_42_0_#in~x2.base_BEFORE_CALL_8| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_8| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_10| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_10| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x1.base_BEFORE_CALL_6| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_8| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x1.offset_BEFORE_CALL_6| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x2.offset_BEFORE_CALL_8| Int)) (= (select (select |c_#memory_int#5| |v_func_to_recursive_line_31_to_42_0_#in~x1.base_BEFORE_CALL_6|) |v_func_to_recursive_line_31_to_42_0_#in~x1.offset_BEFORE_CALL_6|) (+ (select (select |c_#memory_int#4| |v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_10|) |v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_10|) (* (select (select |c_#memory_int#1| |v_func_to_recursive_line_31_to_42_0_#in~x2.base_BEFORE_CALL_8|) |v_func_to_recursive_line_31_to_42_0_#in~x2.offset_BEFORE_CALL_8|) (select (select |c_#memory_int#3| |v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_8|) |v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_8|)))))) (.cse3 (select .cse2 |c_func_to_recursive_line_31_to_42_0_#in~y1.offset|)) (.cse6 (select (select |c_#memory_int#1| |c_func_to_recursive_line_31_to_42_0_#in~x2.base|) |c_func_to_recursive_line_31_to_42_0_#in~x2.offset|))) (and (forall ((|v_func_to_recursive_line_31_to_42_0_#in~x2.base_BEFORE_CALL_8| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_8| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_10| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_10| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x1.base_BEFORE_CALL_6| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_8| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x1.offset_BEFORE_CALL_6| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x2.offset_BEFORE_CALL_8| Int)) (let ((.cse0 (select (select |c_#memory_int#5| |v_func_to_recursive_line_31_to_42_0_#in~x1.base_BEFORE_CALL_6|) |v_func_to_recursive_line_31_to_42_0_#in~x1.offset_BEFORE_CALL_6|)) (.cse1 (select (select |c_#memory_int#1| |v_func_to_recursive_line_31_to_42_0_#in~x2.base_BEFORE_CALL_8|) |v_func_to_recursive_line_31_to_42_0_#in~x2.offset_BEFORE_CALL_8|))) (or (= .cse0 (+ (select (select |c_#memory_int#4| |v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_10|) |v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_10|) (* .cse1 (select (select |c_#memory_int#3| |v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_8|) |v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_8|)))) (not (= .cse0 (+ (* .cse1 (select (select (store |c_old(#memory_int#3)| |c_func_to_recursive_line_31_to_42_0_#in~y1.base| (store .cse2 |c_func_to_recursive_line_31_to_42_0_#in~y1.offset| (+ .cse3 1))) |v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_8|) |v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_8|)) (select (select (store |c_old(#memory_int#4)| |c_func_to_recursive_line_31_to_42_0_#in~y2.base| (store .cse4 |c_func_to_recursive_line_31_to_42_0_#in~y2.offset| 0)) |v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_10|) |v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_10|))))))) (or (< 0 (select (select |c_old(#memory_int#2)| |c_func_to_recursive_line_31_to_42_0_#in~y3.base|) |c_func_to_recursive_line_31_to_42_0_#in~y3.offset|)) .cse5) (or (= (+ (select .cse4 |c_func_to_recursive_line_31_to_42_0_#in~y2.offset|) 1) .cse6) .cse5) (or .cse5 (< (select (select |c_#memory_int#5| |c_func_to_recursive_line_31_to_42_0_#in~x1.base|) |c_func_to_recursive_line_31_to_42_0_#in~x1.offset|) (+ .cse6 (* .cse3 .cse6) 1)))))) is different from false [2024-09-18 16:52:09,870 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:52:09,870 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [88988618] [2024-09-18 16:52:09,870 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:52:09,870 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [888331175] [2024-09-18 16:52:09,870 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [888331175] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:52:09,870 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-18 16:52:09,870 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2024-09-18 16:52:09,870 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [745514972] [2024-09-18 16:52:09,871 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-18 16:52:09,871 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2024-09-18 16:52:09,871 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:52:09,871 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2024-09-18 16:52:09,872 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=102, Invalid=893, Unknown=1, NotChecked=60, Total=1056 [2024-09-18 16:52:09,872 INFO L87 Difference]: Start difference. First operand 57 states and 63 transitions. Second operand has 25 states, 20 states have (on average 1.65) internal successors, (33), 20 states have internal predecessors, (33), 8 states have call successors, (11), 4 states have call predecessors, (11), 5 states have return successors, (9), 7 states have call predecessors, (9), 7 states have call successors, (9) [2024-09-18 16:52:11,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:52:11,306 INFO L93 Difference]: Finished difference Result 68 states and 81 transitions. [2024-09-18 16:52:11,306 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2024-09-18 16:52:11,306 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 20 states have (on average 1.65) internal successors, (33), 20 states have internal predecessors, (33), 8 states have call successors, (11), 4 states have call predecessors, (11), 5 states have return successors, (9), 7 states have call predecessors, (9), 7 states have call successors, (9) Word has length 60 [2024-09-18 16:52:11,307 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:52:11,308 INFO L225 Difference]: With dead ends: 68 [2024-09-18 16:52:11,308 INFO L226 Difference]: Without dead ends: 62 [2024-09-18 16:52:11,309 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 323 ImplicationChecksByTransitivity, 5.7s TimeCoverageRelationStatistics Valid=190, Invalid=1619, Unknown=1, NotChecked=82, Total=1892 [2024-09-18 16:52:11,309 INFO L434 NwaCegarLoop]: 19 mSDtfsCounter, 34 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 541 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 126 SdHoareTripleChecker+Invalid, 561 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 541 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2024-09-18 16:52:11,309 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 126 Invalid, 561 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 541 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2024-09-18 16:52:11,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2024-09-18 16:52:11,324 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 60. [2024-09-18 16:52:11,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 38 states have (on average 1.0789473684210527) internal successors, (41), 39 states have internal predecessors, (41), 12 states have call successors, (12), 10 states have call predecessors, (12), 9 states have return successors, (17), 10 states have call predecessors, (17), 10 states have call successors, (17) [2024-09-18 16:52:11,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 70 transitions. [2024-09-18 16:52:11,325 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 70 transitions. Word has length 60 [2024-09-18 16:52:11,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:52:11,325 INFO L474 AbstractCegarLoop]: Abstraction has 60 states and 70 transitions. [2024-09-18 16:52:11,325 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 20 states have (on average 1.65) internal successors, (33), 20 states have internal predecessors, (33), 8 states have call successors, (11), 4 states have call predecessors, (11), 5 states have return successors, (9), 7 states have call predecessors, (9), 7 states have call successors, (9) [2024-09-18 16:52:11,326 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:52:11,326 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 70 transitions. [2024-09-18 16:52:11,327 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2024-09-18 16:52:11,327 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:52:11,327 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:52:11,344 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2024-09-18 16:52:11,530 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:52:11,531 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:52:11,531 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:52:11,531 INFO L85 PathProgramCache]: Analyzing trace with hash 1661192058, now seen corresponding path program 1 times [2024-09-18 16:52:11,531 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:52:11,531 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [323602460] [2024-09-18 16:52:11,531 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:52:11,532 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:52:11,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:52:11,997 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-18 16:52:11,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:52:11,999 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-18 16:52:12,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:52:12,002 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-18 16:52:12,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:52:12,013 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2024-09-18 16:52:12,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:52:12,393 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-18 16:52:12,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:52:12,403 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-18 16:52:12,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:52:12,762 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-18 16:52:12,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:52:12,774 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-18 16:52:12,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:52:12,875 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-18 16:52:12,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:52:12,880 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 9 proven. 17 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2024-09-18 16:52:12,880 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:52:12,880 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [323602460] [2024-09-18 16:52:12,881 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [323602460] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:52:12,881 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [27805107] [2024-09-18 16:52:12,881 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:52:12,881 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:52:12,881 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:52:12,884 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:52:12,888 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-18 16:52:13,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:52:13,004 INFO L262 TraceCheckSpWp]: Trace formula consists of 397 conjuncts, 55 conjuncts are in the unsatisfiable core [2024-09-18 16:52:13,006 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:52:13,011 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:52:13,015 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:52:13,204 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-18 16:52:13,303 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2024-09-18 16:52:13,354 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 10 proven. 14 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-18 16:52:13,355 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:52:13,663 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-18 16:52:13,986 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 10 proven. 19 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-09-18 16:52:13,986 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [27805107] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-18 16:52:13,986 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-18 16:52:13,986 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 10, 12] total 33 [2024-09-18 16:52:13,986 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1325421278] [2024-09-18 16:52:13,986 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-18 16:52:13,987 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2024-09-18 16:52:13,987 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:52:13,987 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2024-09-18 16:52:13,987 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=115, Invalid=941, Unknown=0, NotChecked=0, Total=1056 [2024-09-18 16:52:13,988 INFO L87 Difference]: Start difference. First operand 60 states and 70 transitions. Second operand has 33 states, 25 states have (on average 2.24) internal successors, (56), 29 states have internal predecessors, (56), 15 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (18), 12 states have call predecessors, (18), 14 states have call successors, (18) [2024-09-18 16:52:15,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:52:15,278 INFO L93 Difference]: Finished difference Result 80 states and 106 transitions. [2024-09-18 16:52:15,278 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2024-09-18 16:52:15,279 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 25 states have (on average 2.24) internal successors, (56), 29 states have internal predecessors, (56), 15 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (18), 12 states have call predecessors, (18), 14 states have call successors, (18) Word has length 60 [2024-09-18 16:52:15,279 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:52:15,280 INFO L225 Difference]: With dead ends: 80 [2024-09-18 16:52:15,280 INFO L226 Difference]: Without dead ends: 72 [2024-09-18 16:52:15,281 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 127 SyntacticMatches, 0 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 292 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=279, Invalid=1791, Unknown=0, NotChecked=0, Total=2070 [2024-09-18 16:52:15,282 INFO L434 NwaCegarLoop]: 22 mSDtfsCounter, 74 mSDsluCounter, 130 mSDsCounter, 0 mSdLazyCounter, 968 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 152 SdHoareTripleChecker+Invalid, 1034 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 968 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-09-18 16:52:15,282 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 152 Invalid, 1034 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 968 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-09-18 16:52:15,285 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2024-09-18 16:52:15,324 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 66. [2024-09-18 16:52:15,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 41 states have (on average 1.0731707317073171) internal successors, (44), 42 states have internal predecessors, (44), 12 states have call successors, (12), 10 states have call predecessors, (12), 12 states have return successors, (23), 13 states have call predecessors, (23), 10 states have call successors, (23) [2024-09-18 16:52:15,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 79 transitions. [2024-09-18 16:52:15,325 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 79 transitions. Word has length 60 [2024-09-18 16:52:15,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:52:15,331 INFO L474 AbstractCegarLoop]: Abstraction has 66 states and 79 transitions. [2024-09-18 16:52:15,331 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 25 states have (on average 2.24) internal successors, (56), 29 states have internal predecessors, (56), 15 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (18), 12 states have call predecessors, (18), 14 states have call successors, (18) [2024-09-18 16:52:15,332 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:52:15,332 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 79 transitions. [2024-09-18 16:52:15,333 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2024-09-18 16:52:15,333 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:52:15,333 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:52:15,349 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2024-09-18 16:52:15,533 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:52:15,534 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:52:15,534 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:52:15,535 INFO L85 PathProgramCache]: Analyzing trace with hash 1588805500, now seen corresponding path program 2 times [2024-09-18 16:52:15,535 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:52:15,535 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1642508925] [2024-09-18 16:52:15,535 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:52:15,535 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:52:15,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:52:15,578 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1589125043] [2024-09-18 16:52:15,578 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-18 16:52:15,578 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:52:15,578 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:52:15,580 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:52:15,588 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-18 16:52:15,718 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-18 16:52:15,718 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-18 16:52:15,727 INFO L262 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 153 conjuncts are in the unsatisfiable core [2024-09-18 16:52:15,731 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:52:15,734 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:52:15,736 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:52:15,760 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:52:15,765 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:52:15,770 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-18 16:52:15,793 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:52:16,336 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 24 [2024-09-18 16:52:16,339 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 39 treesize of output 31 [2024-09-18 16:52:17,020 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:52:17,088 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-18 16:52:17,088 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 28 [2024-09-18 16:52:17,184 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 3 proven. 32 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-18 16:52:17,184 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:52:22,929 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 71 treesize of output 63 [2024-09-18 16:52:22,936 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 63 treesize of output 51 [2024-09-18 16:52:22,941 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 51 treesize of output 47 [2024-09-18 16:53:06,915 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:53:06,915 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1642508925] [2024-09-18 16:53:06,915 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:53:06,915 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1589125043] [2024-09-18 16:53:06,915 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1589125043] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:53:06,915 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-18 16:53:06,916 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2024-09-18 16:53:06,916 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1124878954] [2024-09-18 16:53:06,916 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-18 16:53:06,916 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2024-09-18 16:53:06,916 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:53:06,916 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2024-09-18 16:53:06,917 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=115, Invalid=997, Unknown=10, NotChecked=0, Total=1122 [2024-09-18 16:53:06,917 INFO L87 Difference]: Start difference. First operand 66 states and 79 transitions. Second operand has 27 states, 21 states have (on average 1.7619047619047619) internal successors, (37), 23 states have internal predecessors, (37), 9 states have call successors, (11), 4 states have call predecessors, (11), 7 states have return successors, (9), 8 states have call predecessors, (9), 8 states have call successors, (9) [2024-09-18 16:53:11,008 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-18 16:53:12,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:53:12,634 INFO L93 Difference]: Finished difference Result 74 states and 88 transitions. [2024-09-18 16:53:12,635 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2024-09-18 16:53:12,636 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 21 states have (on average 1.7619047619047619) internal successors, (37), 23 states have internal predecessors, (37), 9 states have call successors, (11), 4 states have call predecessors, (11), 7 states have return successors, (9), 8 states have call predecessors, (9), 8 states have call successors, (9) Word has length 60 [2024-09-18 16:53:12,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:53:12,637 INFO L225 Difference]: With dead ends: 74 [2024-09-18 16:53:12,637 INFO L226 Difference]: Without dead ends: 68 [2024-09-18 16:53:12,638 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 83 GetRequests, 37 SyntacticMatches, 2 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 447 ImplicationChecksByTransitivity, 49.8s TimeCoverageRelationStatistics Valid=208, Invalid=1852, Unknown=10, NotChecked=0, Total=2070 [2024-09-18 16:53:12,638 INFO L434 NwaCegarLoop]: 19 mSDtfsCounter, 22 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 575 mSolverCounterSat, 10 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 586 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 575 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.9s IncrementalHoareTripleChecker+Time [2024-09-18 16:53:12,638 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 177 Invalid, 586 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 575 Invalid, 1 Unknown, 0 Unchecked, 4.9s Time] [2024-09-18 16:53:12,638 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2024-09-18 16:53:12,658 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2024-09-18 16:53:12,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 42 states have (on average 1.0714285714285714) internal successors, (45), 43 states have internal predecessors, (45), 12 states have call successors, (12), 10 states have call predecessors, (12), 13 states have return successors, (25), 14 states have call predecessors, (25), 10 states have call successors, (25) [2024-09-18 16:53:12,659 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 82 transitions. [2024-09-18 16:53:12,659 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 82 transitions. Word has length 60 [2024-09-18 16:53:12,659 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:53:12,659 INFO L474 AbstractCegarLoop]: Abstraction has 68 states and 82 transitions. [2024-09-18 16:53:12,659 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 21 states have (on average 1.7619047619047619) internal successors, (37), 23 states have internal predecessors, (37), 9 states have call successors, (11), 4 states have call predecessors, (11), 7 states have return successors, (9), 8 states have call predecessors, (9), 8 states have call successors, (9) [2024-09-18 16:53:12,660 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:53:12,660 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 82 transitions. [2024-09-18 16:53:12,660 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2024-09-18 16:53:12,661 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:53:12,661 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:53:12,674 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2024-09-18 16:53:12,862 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:53:12,863 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:53:12,863 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:53:12,863 INFO L85 PathProgramCache]: Analyzing trace with hash -742771557, now seen corresponding path program 3 times [2024-09-18 16:53:12,863 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:53:12,864 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [342121933] [2024-09-18 16:53:12,864 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:53:12,864 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:53:12,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:53:12,898 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [272579404] [2024-09-18 16:53:12,898 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-18 16:53:12,898 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:53:12,898 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:53:12,899 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:53:12,903 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-09-18 16:53:13,051 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-09-18 16:53:13,052 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-18 16:53:13,055 INFO L262 TraceCheckSpWp]: Trace formula consists of 473 conjuncts, 133 conjuncts are in the unsatisfiable core [2024-09-18 16:53:13,059 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:53:13,106 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:13,111 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:13,118 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-18 16:53:13,146 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:13,885 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:53:14,006 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 13 proven. 30 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2024-09-18 16:53:14,006 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:53:15,186 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:53:15,186 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [342121933] [2024-09-18 16:53:15,187 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:53:15,187 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [272579404] [2024-09-18 16:53:15,187 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [272579404] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:53:15,187 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-18 16:53:15,187 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20] total 20 [2024-09-18 16:53:15,187 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1989680661] [2024-09-18 16:53:15,187 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-18 16:53:15,187 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2024-09-18 16:53:15,187 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:53:15,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2024-09-18 16:53:15,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=57, Invalid=495, Unknown=0, NotChecked=0, Total=552 [2024-09-18 16:53:15,188 INFO L87 Difference]: Start difference. First operand 68 states and 82 transitions. Second operand has 20 states, 16 states have (on average 1.9375) internal successors, (31), 17 states have internal predecessors, (31), 8 states have call successors, (10), 3 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 7 states have call successors, (10) [2024-09-18 16:53:16,067 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:53:16,067 INFO L93 Difference]: Finished difference Result 76 states and 91 transitions. [2024-09-18 16:53:16,068 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2024-09-18 16:53:16,068 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 16 states have (on average 1.9375) internal successors, (31), 17 states have internal predecessors, (31), 8 states have call successors, (10), 3 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 7 states have call successors, (10) Word has length 73 [2024-09-18 16:53:16,068 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:53:16,069 INFO L225 Difference]: With dead ends: 76 [2024-09-18 16:53:16,069 INFO L226 Difference]: Without dead ends: 70 [2024-09-18 16:53:16,069 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 87 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 159 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=108, Invalid=948, Unknown=0, NotChecked=0, Total=1056 [2024-09-18 16:53:16,070 INFO L434 NwaCegarLoop]: 17 mSDtfsCounter, 17 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 480 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 494 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 480 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-18 16:53:16,070 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 138 Invalid, 494 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 480 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-18 16:53:16,071 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2024-09-18 16:53:16,089 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2024-09-18 16:53:16,090 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 43 states have (on average 1.069767441860465) internal successors, (46), 44 states have internal predecessors, (46), 12 states have call successors, (12), 10 states have call predecessors, (12), 14 states have return successors, (27), 15 states have call predecessors, (27), 10 states have call successors, (27) [2024-09-18 16:53:16,090 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 85 transitions. [2024-09-18 16:53:16,090 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 85 transitions. Word has length 73 [2024-09-18 16:53:16,090 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:53:16,091 INFO L474 AbstractCegarLoop]: Abstraction has 70 states and 85 transitions. [2024-09-18 16:53:16,091 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 16 states have (on average 1.9375) internal successors, (31), 17 states have internal predecessors, (31), 8 states have call successors, (10), 3 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 7 states have call successors, (10) [2024-09-18 16:53:16,091 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:53:16,091 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 85 transitions. [2024-09-18 16:53:16,092 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2024-09-18 16:53:16,092 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:53:16,092 INFO L216 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:53:16,108 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2024-09-18 16:53:16,296 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2024-09-18 16:53:16,297 INFO L399 AbstractCegarLoop]: === Iteration 11 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:53:16,297 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:53:16,297 INFO L85 PathProgramCache]: Analyzing trace with hash -1760672172, now seen corresponding path program 4 times [2024-09-18 16:53:16,297 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:53:16,297 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [988898135] [2024-09-18 16:53:16,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:53:16,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:53:16,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:53:16,341 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [729881805] [2024-09-18 16:53:16,341 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-18 16:53:16,341 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:53:16,341 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:53:16,343 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:53:16,347 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-09-18 16:53:16,491 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-18 16:53:16,491 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-18 16:53:16,500 INFO L262 TraceCheckSpWp]: Trace formula consists of 473 conjuncts, 143 conjuncts are in the unsatisfiable core [2024-09-18 16:53:16,504 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:53:16,508 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:16,512 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:16,516 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-18 16:53:16,532 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:17,460 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:53:17,585 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 10 proven. 39 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2024-09-18 16:53:17,585 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:53:18,813 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:53:18,813 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [988898135] [2024-09-18 16:53:18,813 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:53:18,813 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [729881805] [2024-09-18 16:53:18,813 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [729881805] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:53:18,814 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-18 16:53:18,814 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18] total 18 [2024-09-18 16:53:18,814 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1091793092] [2024-09-18 16:53:18,814 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-18 16:53:18,814 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2024-09-18 16:53:18,814 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:53:18,815 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2024-09-18 16:53:18,815 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=372, Unknown=0, NotChecked=0, Total=420 [2024-09-18 16:53:18,815 INFO L87 Difference]: Start difference. First operand 70 states and 85 transitions. Second operand has 18 states, 14 states have (on average 2.0714285714285716) internal successors, (29), 15 states have internal predecessors, (29), 7 states have call successors, (10), 3 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 6 states have call successors, (10) [2024-09-18 16:53:19,563 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:53:19,564 INFO L93 Difference]: Finished difference Result 78 states and 94 transitions. [2024-09-18 16:53:19,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2024-09-18 16:53:19,564 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 14 states have (on average 2.0714285714285716) internal successors, (29), 15 states have internal predecessors, (29), 7 states have call successors, (10), 3 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 6 states have call successors, (10) Word has length 86 [2024-09-18 16:53:19,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:53:19,565 INFO L225 Difference]: With dead ends: 78 [2024-09-18 16:53:19,565 INFO L226 Difference]: Without dead ends: 72 [2024-09-18 16:53:19,566 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 70 SyntacticMatches, 2 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 101 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=75, Invalid=575, Unknown=0, NotChecked=0, Total=650 [2024-09-18 16:53:19,566 INFO L434 NwaCegarLoop]: 18 mSDtfsCounter, 18 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 487 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 139 SdHoareTripleChecker+Invalid, 497 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 487 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-18 16:53:19,566 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 139 Invalid, 497 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 487 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-18 16:53:19,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2024-09-18 16:53:19,589 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 72. [2024-09-18 16:53:19,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 44 states have (on average 1.0681818181818181) internal successors, (47), 45 states have internal predecessors, (47), 12 states have call successors, (12), 10 states have call predecessors, (12), 15 states have return successors, (29), 16 states have call predecessors, (29), 10 states have call successors, (29) [2024-09-18 16:53:19,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 88 transitions. [2024-09-18 16:53:19,591 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 88 transitions. Word has length 86 [2024-09-18 16:53:19,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:53:19,592 INFO L474 AbstractCegarLoop]: Abstraction has 72 states and 88 transitions. [2024-09-18 16:53:19,592 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 14 states have (on average 2.0714285714285716) internal successors, (29), 15 states have internal predecessors, (29), 7 states have call successors, (10), 3 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 6 states have call successors, (10) [2024-09-18 16:53:19,592 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:53:19,592 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 88 transitions. [2024-09-18 16:53:19,592 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2024-09-18 16:53:19,592 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:53:19,593 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:53:19,606 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2024-09-18 16:53:19,793 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2024-09-18 16:53:19,793 INFO L399 AbstractCegarLoop]: === Iteration 12 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:53:19,793 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:53:19,793 INFO L85 PathProgramCache]: Analyzing trace with hash 1369950782, now seen corresponding path program 2 times [2024-09-18 16:53:19,794 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:53:19,794 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [315721017] [2024-09-18 16:53:19,794 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:53:19,794 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:53:19,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:53:19,840 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [113672966] [2024-09-18 16:53:19,841 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-18 16:53:19,841 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:53:19,841 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:53:19,844 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:53:19,845 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-09-18 16:53:19,986 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-18 16:53:19,986 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-18 16:53:19,991 WARN L260 TraceCheckSpWp]: Trace formula consists of 397 conjuncts, 219 conjuncts are in the unsatisfiable core [2024-09-18 16:53:19,995 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:53:20,008 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:53:20,015 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:53:20,097 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:53:20,103 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:53:20,107 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-18 16:53:20,140 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:21,402 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-18 16:53:22,344 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 36 treesize of output 13 [2024-09-18 16:53:22,357 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 15 [2024-09-18 16:53:22,374 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 32 treesize of output 20 [2024-09-18 16:53:22,469 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 32 treesize of output 20 [2024-09-18 16:53:22,474 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 16 [2024-09-18 16:53:22,498 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-18 16:53:22,499 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 38 treesize of output 54 [2024-09-18 16:53:22,634 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 7 proven. 24 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-09-18 16:53:22,634 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:53:25,654 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:53:25,654 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [315721017] [2024-09-18 16:53:25,654 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:53:25,654 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [113672966] [2024-09-18 16:53:25,654 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [113672966] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:53:25,654 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-18 16:53:25,654 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2024-09-18 16:53:25,654 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [344535706] [2024-09-18 16:53:25,654 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-18 16:53:25,655 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2024-09-18 16:53:25,655 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:53:25,655 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2024-09-18 16:53:25,655 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=101, Invalid=955, Unknown=0, NotChecked=0, Total=1056 [2024-09-18 16:53:25,656 INFO L87 Difference]: Start difference. First operand 72 states and 88 transitions. Second operand has 28 states, 21 states have (on average 1.619047619047619) internal successors, (34), 23 states have internal predecessors, (34), 9 states have call successors, (10), 4 states have call predecessors, (10), 7 states have return successors, (9), 7 states have call predecessors, (9), 8 states have call successors, (9) [2024-09-18 16:53:29,727 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-18 16:53:32,549 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:53:32,549 INFO L93 Difference]: Finished difference Result 80 states and 97 transitions. [2024-09-18 16:53:32,550 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2024-09-18 16:53:32,550 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 21 states have (on average 1.619047619047619) internal successors, (34), 23 states have internal predecessors, (34), 9 states have call successors, (10), 4 states have call predecessors, (10), 7 states have return successors, (9), 7 states have call predecessors, (9), 8 states have call successors, (9) Word has length 60 [2024-09-18 16:53:32,551 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:53:32,551 INFO L225 Difference]: With dead ends: 80 [2024-09-18 16:53:32,551 INFO L226 Difference]: Without dead ends: 74 [2024-09-18 16:53:32,552 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 28 SyntacticMatches, 6 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 762 ImplicationChecksByTransitivity, 3.1s TimeCoverageRelationStatistics Valid=317, Invalid=3105, Unknown=0, NotChecked=0, Total=3422 [2024-09-18 16:53:32,553 INFO L434 NwaCegarLoop]: 20 mSDtfsCounter, 44 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 849 mSolverCounterSat, 30 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 880 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 849 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.3s IncrementalHoareTripleChecker+Time [2024-09-18 16:53:32,553 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 205 Invalid, 880 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 849 Invalid, 1 Unknown, 0 Unchecked, 5.3s Time] [2024-09-18 16:53:32,553 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2024-09-18 16:53:32,576 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 72. [2024-09-18 16:53:32,576 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 44 states have (on average 1.0681818181818181) internal successors, (47), 45 states have internal predecessors, (47), 12 states have call successors, (12), 10 states have call predecessors, (12), 15 states have return successors, (29), 16 states have call predecessors, (29), 10 states have call successors, (29) [2024-09-18 16:53:32,577 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 88 transitions. [2024-09-18 16:53:32,577 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 88 transitions. Word has length 60 [2024-09-18 16:53:32,577 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:53:32,577 INFO L474 AbstractCegarLoop]: Abstraction has 72 states and 88 transitions. [2024-09-18 16:53:32,577 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 21 states have (on average 1.619047619047619) internal successors, (34), 23 states have internal predecessors, (34), 9 states have call successors, (10), 4 states have call predecessors, (10), 7 states have return successors, (9), 7 states have call predecessors, (9), 8 states have call successors, (9) [2024-09-18 16:53:32,578 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:53:32,578 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 88 transitions. [2024-09-18 16:53:32,578 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2024-09-18 16:53:32,578 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:53:32,578 INFO L216 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 5, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:53:32,594 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2024-09-18 16:53:32,779 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,12 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:53:32,779 INFO L399 AbstractCegarLoop]: === Iteration 13 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:53:32,779 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:53:32,779 INFO L85 PathProgramCache]: Analyzing trace with hash 104908723, now seen corresponding path program 5 times [2024-09-18 16:53:32,779 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:53:32,780 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1357090211] [2024-09-18 16:53:32,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:53:32,780 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:53:32,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:53:32,821 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [128981596] [2024-09-18 16:53:32,821 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-18 16:53:32,822 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:53:32,822 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:53:32,823 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:53:32,824 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2024-09-18 16:53:33,101 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 7 check-sat command(s) [2024-09-18 16:53:33,101 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-18 16:53:33,107 INFO L262 TraceCheckSpWp]: Trace formula consists of 641 conjuncts, 181 conjuncts are in the unsatisfiable core [2024-09-18 16:53:33,111 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:53:33,132 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:33,136 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:33,143 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-18 16:53:33,162 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:34,110 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:53:34,233 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 17 proven. 64 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2024-09-18 16:53:34,234 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:53:35,578 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:53:35,579 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1357090211] [2024-09-18 16:53:35,579 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:53:35,579 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [128981596] [2024-09-18 16:53:35,579 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [128981596] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:53:35,579 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-18 16:53:35,579 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2024-09-18 16:53:35,579 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1699832230] [2024-09-18 16:53:35,579 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-18 16:53:35,580 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-09-18 16:53:35,580 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:53:35,580 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-09-18 16:53:35,580 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=61, Invalid=589, Unknown=0, NotChecked=0, Total=650 [2024-09-18 16:53:35,581 INFO L87 Difference]: Start difference. First operand 72 states and 88 transitions. Second operand has 22 states, 18 states have (on average 1.8333333333333333) internal successors, (33), 19 states have internal predecessors, (33), 8 states have call successors, (10), 3 states have call predecessors, (10), 8 states have return successors, (12), 10 states have call predecessors, (12), 7 states have call successors, (12) [2024-09-18 16:53:36,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:53:36,572 INFO L93 Difference]: Finished difference Result 82 states and 100 transitions. [2024-09-18 16:53:36,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2024-09-18 16:53:36,573 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 18 states have (on average 1.8333333333333333) internal successors, (33), 19 states have internal predecessors, (33), 8 states have call successors, (10), 3 states have call predecessors, (10), 8 states have return successors, (12), 10 states have call predecessors, (12), 7 states have call successors, (12) Word has length 99 [2024-09-18 16:53:36,573 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:53:36,574 INFO L225 Difference]: With dead ends: 82 [2024-09-18 16:53:36,574 INFO L226 Difference]: Without dead ends: 76 [2024-09-18 16:53:36,575 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 113 GetRequests, 80 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 173 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=112, Invalid=1078, Unknown=0, NotChecked=0, Total=1190 [2024-09-18 16:53:36,575 INFO L434 NwaCegarLoop]: 19 mSDtfsCounter, 17 mSDsluCounter, 189 mSDsCounter, 0 mSdLazyCounter, 652 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 665 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 652 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2024-09-18 16:53:36,575 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 208 Invalid, 665 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 652 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2024-09-18 16:53:36,576 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2024-09-18 16:53:36,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 74. [2024-09-18 16:53:36,596 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 45 states have (on average 1.0666666666666667) internal successors, (48), 46 states have internal predecessors, (48), 12 states have call successors, (12), 10 states have call predecessors, (12), 16 states have return successors, (31), 17 states have call predecessors, (31), 10 states have call successors, (31) [2024-09-18 16:53:36,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 91 transitions. [2024-09-18 16:53:36,597 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 91 transitions. Word has length 99 [2024-09-18 16:53:36,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:53:36,597 INFO L474 AbstractCegarLoop]: Abstraction has 74 states and 91 transitions. [2024-09-18 16:53:36,597 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 18 states have (on average 1.8333333333333333) internal successors, (33), 19 states have internal predecessors, (33), 8 states have call successors, (10), 3 states have call predecessors, (10), 8 states have return successors, (12), 10 states have call predecessors, (12), 7 states have call successors, (12) [2024-09-18 16:53:36,597 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:53:36,597 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 91 transitions. [2024-09-18 16:53:36,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2024-09-18 16:53:36,598 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:53:36,598 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:53:36,613 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2024-09-18 16:53:36,798 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2024-09-18 16:53:36,799 INFO L399 AbstractCegarLoop]: === Iteration 14 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:53:36,799 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:53:36,799 INFO L85 PathProgramCache]: Analyzing trace with hash -1693025251, now seen corresponding path program 3 times [2024-09-18 16:53:36,799 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:53:36,799 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1891579738] [2024-09-18 16:53:36,799 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:53:36,799 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:53:36,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:53:36,838 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1138946285] [2024-09-18 16:53:36,838 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-18 16:53:36,838 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:53:36,838 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:53:36,839 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:53:36,843 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2024-09-18 16:53:37,068 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-09-18 16:53:37,068 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-18 16:53:37,072 INFO L262 TraceCheckSpWp]: Trace formula consists of 488 conjuncts, 195 conjuncts are in the unsatisfiable core [2024-09-18 16:53:37,076 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:53:37,092 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:53:37,159 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:37,163 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:37,168 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-18 16:53:37,204 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:37,479 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-18 16:53:37,811 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:38,142 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2024-09-18 16:53:38,147 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:53:38,293 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 10 proven. 47 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2024-09-18 16:53:38,293 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:53:44,281 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 86 treesize of output 82 [2024-09-18 16:53:44,348 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 86 treesize of output 82 [2024-09-18 16:53:44,371 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 86 treesize of output 82 [2024-09-18 16:53:44,519 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:53:44,519 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1891579738] [2024-09-18 16:53:44,519 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:53:44,519 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1138946285] [2024-09-18 16:53:44,519 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1138946285] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:53:44,519 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-18 16:53:44,519 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2024-09-18 16:53:44,519 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1104807060] [2024-09-18 16:53:44,519 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-18 16:53:44,520 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2024-09-18 16:53:44,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:53:44,520 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2024-09-18 16:53:44,520 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=88, Invalid=903, Unknown=1, NotChecked=0, Total=992 [2024-09-18 16:53:44,520 INFO L87 Difference]: Start difference. First operand 74 states and 91 transitions. Second operand has 25 states, 20 states have (on average 2.0) internal successors, (40), 21 states have internal predecessors, (40), 11 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (11), 10 states have call predecessors, (11), 10 states have call successors, (11) [2024-09-18 16:53:45,778 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:53:45,778 INFO L93 Difference]: Finished difference Result 82 states and 101 transitions. [2024-09-18 16:53:45,778 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2024-09-18 16:53:45,779 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 20 states have (on average 2.0) internal successors, (40), 21 states have internal predecessors, (40), 11 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (11), 10 states have call predecessors, (11), 10 states have call successors, (11) Word has length 73 [2024-09-18 16:53:45,779 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:53:45,779 INFO L225 Difference]: With dead ends: 82 [2024-09-18 16:53:45,779 INFO L226 Difference]: Without dead ends: 76 [2024-09-18 16:53:45,780 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 51 SyntacticMatches, 0 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 317 ImplicationChecksByTransitivity, 5.5s TimeCoverageRelationStatistics Valid=165, Invalid=1640, Unknown=1, NotChecked=0, Total=1806 [2024-09-18 16:53:45,780 INFO L434 NwaCegarLoop]: 17 mSDtfsCounter, 17 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 727 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 166 SdHoareTripleChecker+Invalid, 739 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 727 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2024-09-18 16:53:45,781 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 166 Invalid, 739 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 727 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2024-09-18 16:53:45,781 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2024-09-18 16:53:45,802 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2024-09-18 16:53:45,802 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 46 states have (on average 1.065217391304348) internal successors, (49), 47 states have internal predecessors, (49), 12 states have call successors, (12), 10 states have call predecessors, (12), 17 states have return successors, (33), 18 states have call predecessors, (33), 10 states have call successors, (33) [2024-09-18 16:53:45,802 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 94 transitions. [2024-09-18 16:53:45,802 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 94 transitions. Word has length 73 [2024-09-18 16:53:45,803 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:53:45,803 INFO L474 AbstractCegarLoop]: Abstraction has 76 states and 94 transitions. [2024-09-18 16:53:45,803 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 20 states have (on average 2.0) internal successors, (40), 21 states have internal predecessors, (40), 11 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (11), 10 states have call predecessors, (11), 10 states have call successors, (11) [2024-09-18 16:53:45,803 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:53:45,803 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 94 transitions. [2024-09-18 16:53:45,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2024-09-18 16:53:45,804 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:53:45,804 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:53:45,817 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2024-09-18 16:53:46,007 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2024-09-18 16:53:46,008 INFO L399 AbstractCegarLoop]: === Iteration 15 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:53:46,008 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:53:46,008 INFO L85 PathProgramCache]: Analyzing trace with hash -608758051, now seen corresponding path program 3 times [2024-09-18 16:53:46,008 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:53:46,008 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1463028488] [2024-09-18 16:53:46,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:53:46,009 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:53:46,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:53:46,028 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1454291217] [2024-09-18 16:53:46,028 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-18 16:53:46,028 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:53:46,028 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:53:46,030 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:53:46,030 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2024-09-18 16:53:46,214 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-09-18 16:53:46,214 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-18 16:53:46,219 WARN L260 TraceCheckSpWp]: Trace formula consists of 478 conjuncts, 270 conjuncts are in the unsatisfiable core [2024-09-18 16:53:46,223 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:53:46,230 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:53:46,235 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:53:46,269 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-18 16:53:46,273 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:46,278 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:46,309 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:53:47,285 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-18 16:53:47,889 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:53:47,896 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:53:47,902 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:53:48,035 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 20 proven. 25 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2024-09-18 16:53:48,035 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:53:53,675 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 68 treesize of output 60 [2024-09-18 16:53:53,682 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 60 treesize of output 56 [2024-09-18 16:53:53,688 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 56 treesize of output 52 [2024-09-18 16:53:57,730 WARN L854 $PredicateComparison]: unable to prove that (let ((.cse5 (select |c_old(#memory_int#3)| |c_func_to_recursive_line_31_to_42_0_#in~y1.base|))) (let ((.cse0 (forall ((|v_func_to_recursive_line_31_to_42_0_#in~x1.offset_BEFORE_CALL_22| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_66| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_66| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x1.base_BEFORE_CALL_24| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_30| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_30| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x2.base_BEFORE_CALL_36| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x2.offset_BEFORE_CALL_34| Int)) (= (select (select |c_#memory_int#5| |v_func_to_recursive_line_31_to_42_0_#in~x1.base_BEFORE_CALL_24|) |v_func_to_recursive_line_31_to_42_0_#in~x1.offset_BEFORE_CALL_22|) (+ (select (select |c_#memory_int#4| |v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_66|) |v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_66|) (* (select (select |c_#memory_int#1| |v_func_to_recursive_line_31_to_42_0_#in~x2.base_BEFORE_CALL_36|) |v_func_to_recursive_line_31_to_42_0_#in~x2.offset_BEFORE_CALL_34|) (select (select |c_#memory_int#3| |v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_30|) |v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_30|)))))) (.cse1 (select (select |c_#memory_int#1| |c_func_to_recursive_line_31_to_42_0_#in~x2.base|) |c_func_to_recursive_line_31_to_42_0_#in~x2.offset|)) (.cse2 (select .cse5 |c_func_to_recursive_line_31_to_42_0_#in~y1.offset|)) (.cse3 (select |c_old(#memory_int#4)| |c_func_to_recursive_line_31_to_42_0_#in~y2.base|))) (and (or .cse0 (< (select (select |c_#memory_int#5| |c_func_to_recursive_line_31_to_42_0_#in~x1.base|) |c_func_to_recursive_line_31_to_42_0_#in~x1.offset|) (+ .cse1 (* .cse2 .cse1) 1))) (or (< 1 (select (select |c_old(#memory_int#2)| |c_func_to_recursive_line_31_to_42_0_#in~y3.base|) |c_func_to_recursive_line_31_to_42_0_#in~y3.offset|)) .cse0) (or .cse0 (= (+ (select .cse3 |c_func_to_recursive_line_31_to_42_0_#in~y2.offset|) 2) .cse1)) (forall ((|v_func_to_recursive_line_31_to_42_0_#in~x1.offset_BEFORE_CALL_22| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_66| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_66| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x1.base_BEFORE_CALL_24| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_30| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_30| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x2.base_BEFORE_CALL_36| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x2.offset_BEFORE_CALL_34| Int)) (let ((.cse6 (select (select |c_#memory_int#5| |v_func_to_recursive_line_31_to_42_0_#in~x1.base_BEFORE_CALL_24|) |v_func_to_recursive_line_31_to_42_0_#in~x1.offset_BEFORE_CALL_22|)) (.cse4 (select (select |c_#memory_int#1| |v_func_to_recursive_line_31_to_42_0_#in~x2.base_BEFORE_CALL_36|) |v_func_to_recursive_line_31_to_42_0_#in~x2.offset_BEFORE_CALL_34|))) (or (not (= (+ (* .cse4 (select (select (store |c_old(#memory_int#3)| |c_func_to_recursive_line_31_to_42_0_#in~y1.base| (store .cse5 |c_func_to_recursive_line_31_to_42_0_#in~y1.offset| (+ .cse2 1))) |v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_30|) |v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_30|)) (select (select (store |c_old(#memory_int#4)| |c_func_to_recursive_line_31_to_42_0_#in~y2.base| (store .cse3 |c_func_to_recursive_line_31_to_42_0_#in~y2.offset| 0)) |v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_66|) |v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_66|)) .cse6)) (= .cse6 (+ (select (select |c_#memory_int#4| |v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_66|) |v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_66|) (* .cse4 (select (select |c_#memory_int#3| |v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_30|) |v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_30|)))))))))) is different from false [2024-09-18 16:54:00,124 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:54:00,125 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1463028488] [2024-09-18 16:54:00,125 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:54:00,125 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1454291217] [2024-09-18 16:54:00,125 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1454291217] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:54:00,125 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-18 16:54:00,125 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2024-09-18 16:54:00,125 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [235052731] [2024-09-18 16:54:00,125 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-18 16:54:00,126 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-09-18 16:54:00,126 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:54:00,126 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-09-18 16:54:00,126 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=73, Invalid=742, Unknown=1, NotChecked=54, Total=870 [2024-09-18 16:54:00,126 INFO L87 Difference]: Start difference. First operand 76 states and 94 transitions. Second operand has 22 states, 17 states have (on average 1.8235294117647058) internal successors, (31), 18 states have internal predecessors, (31), 8 states have call successors, (10), 3 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 7 states have call successors, (10) [2024-09-18 16:54:01,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:54:01,995 INFO L93 Difference]: Finished difference Result 86 states and 106 transitions. [2024-09-18 16:54:01,995 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2024-09-18 16:54:01,995 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 17 states have (on average 1.8235294117647058) internal successors, (31), 18 states have internal predecessors, (31), 8 states have call successors, (10), 3 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 7 states have call successors, (10) Word has length 73 [2024-09-18 16:54:01,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:54:01,996 INFO L225 Difference]: With dead ends: 86 [2024-09-18 16:54:01,998 INFO L226 Difference]: Without dead ends: 80 [2024-09-18 16:54:01,998 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 243 ImplicationChecksByTransitivity, 6.9s TimeCoverageRelationStatistics Valid=145, Invalid=1498, Unknown=1, NotChecked=78, Total=1722 [2024-09-18 16:54:01,998 INFO L434 NwaCegarLoop]: 20 mSDtfsCounter, 21 mSDsluCounter, 134 mSDsCounter, 0 mSdLazyCounter, 694 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 706 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 694 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2024-09-18 16:54:02,000 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 154 Invalid, 706 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 694 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2024-09-18 16:54:02,001 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2024-09-18 16:54:02,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 76. [2024-09-18 16:54:02,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 46 states have (on average 1.065217391304348) internal successors, (49), 47 states have internal predecessors, (49), 12 states have call successors, (12), 10 states have call predecessors, (12), 17 states have return successors, (33), 18 states have call predecessors, (33), 10 states have call successors, (33) [2024-09-18 16:54:02,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 94 transitions. [2024-09-18 16:54:02,023 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 94 transitions. Word has length 73 [2024-09-18 16:54:02,024 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:54:02,024 INFO L474 AbstractCegarLoop]: Abstraction has 76 states and 94 transitions. [2024-09-18 16:54:02,024 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 17 states have (on average 1.8235294117647058) internal successors, (31), 18 states have internal predecessors, (31), 8 states have call successors, (10), 3 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 7 states have call successors, (10) [2024-09-18 16:54:02,024 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:54:02,024 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 94 transitions. [2024-09-18 16:54:02,025 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2024-09-18 16:54:02,025 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:54:02,025 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:54:02,040 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2024-09-18 16:54:02,225 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2024-09-18 16:54:02,226 INFO L399 AbstractCegarLoop]: === Iteration 16 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:54:02,226 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:54:02,226 INFO L85 PathProgramCache]: Analyzing trace with hash 235247451, now seen corresponding path program 4 times [2024-09-18 16:54:02,227 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:54:02,227 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1734012525] [2024-09-18 16:54:02,227 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:54:02,227 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:54:02,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:02,732 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-18 16:54:02,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:02,734 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-18 16:54:02,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:02,735 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-18 16:54:02,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:02,744 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2024-09-18 16:54:02,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:03,025 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-18 16:54:03,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:03,035 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-18 16:54:03,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:03,277 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-18 16:54:03,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:03,280 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-18 16:54:03,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:03,590 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-18 16:54:03,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:03,597 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-18 16:54:03,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:03,610 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-18 16:54:03,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:03,612 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 23 proven. 26 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2024-09-18 16:54:03,612 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:54:03,612 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1734012525] [2024-09-18 16:54:03,612 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1734012525] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:54:03,613 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [667358029] [2024-09-18 16:54:03,613 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-18 16:54:03,613 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:54:03,613 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:54:03,614 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:54:03,615 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2024-09-18 16:54:03,802 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-18 16:54:03,802 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-18 16:54:03,805 INFO L262 TraceCheckSpWp]: Trace formula consists of 400 conjuncts, 137 conjuncts are in the unsatisfiable core [2024-09-18 16:54:03,810 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:54:03,813 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:54:03,817 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:54:04,129 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2024-09-18 16:54:04,319 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-18 16:54:04,501 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-18 16:54:04,756 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 8 proven. 32 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2024-09-18 16:54:04,756 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:54:06,731 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 4 [2024-09-18 16:54:06,828 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 17 proven. 39 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2024-09-18 16:54:06,829 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [667358029] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-18 16:54:06,829 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-18 16:54:06,829 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 15, 17] total 47 [2024-09-18 16:54:06,829 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1666058374] [2024-09-18 16:54:06,829 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-18 16:54:06,829 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2024-09-18 16:54:06,829 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:54:06,830 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2024-09-18 16:54:06,830 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=268, Invalid=1894, Unknown=0, NotChecked=0, Total=2162 [2024-09-18 16:54:06,830 INFO L87 Difference]: Start difference. First operand 76 states and 94 transitions. Second operand has 47 states, 33 states have (on average 2.212121212121212) internal successors, (73), 42 states have internal predecessors, (73), 22 states have call successors, (26), 8 states have call predecessors, (26), 11 states have return successors, (24), 19 states have call predecessors, (24), 21 states have call successors, (24) [2024-09-18 16:54:11,233 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:54:11,234 INFO L93 Difference]: Finished difference Result 206 states and 301 transitions. [2024-09-18 16:54:11,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 61 states. [2024-09-18 16:54:11,235 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 33 states have (on average 2.212121212121212) internal successors, (73), 42 states have internal predecessors, (73), 22 states have call successors, (26), 8 states have call predecessors, (26), 11 states have return successors, (24), 19 states have call predecessors, (24), 21 states have call successors, (24) Word has length 73 [2024-09-18 16:54:11,235 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:54:11,236 INFO L225 Difference]: With dead ends: 206 [2024-09-18 16:54:11,237 INFO L226 Difference]: Without dead ends: 155 [2024-09-18 16:54:11,240 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 275 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2649 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=1184, Invalid=8322, Unknown=0, NotChecked=0, Total=9506 [2024-09-18 16:54:11,240 INFO L434 NwaCegarLoop]: 31 mSDtfsCounter, 162 mSDsluCounter, 392 mSDsCounter, 0 mSdLazyCounter, 1623 mSolverCounterSat, 267 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 423 SdHoareTripleChecker+Invalid, 1890 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 267 IncrementalHoareTripleChecker+Valid, 1623 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2024-09-18 16:54:11,240 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [164 Valid, 423 Invalid, 1890 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [267 Valid, 1623 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2024-09-18 16:54:11,241 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155 states. [2024-09-18 16:54:11,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155 to 94. [2024-09-18 16:54:11,289 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 58 states have (on average 1.103448275862069) internal successors, (64), 61 states have internal predecessors, (64), 16 states have call successors, (16), 12 states have call predecessors, (16), 19 states have return successors, (32), 20 states have call predecessors, (32), 14 states have call successors, (32) [2024-09-18 16:54:11,289 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 112 transitions. [2024-09-18 16:54:11,289 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 112 transitions. Word has length 73 [2024-09-18 16:54:11,290 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:54:11,290 INFO L474 AbstractCegarLoop]: Abstraction has 94 states and 112 transitions. [2024-09-18 16:54:11,290 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 33 states have (on average 2.212121212121212) internal successors, (73), 42 states have internal predecessors, (73), 22 states have call successors, (26), 8 states have call predecessors, (26), 11 states have return successors, (24), 19 states have call predecessors, (24), 21 states have call successors, (24) [2024-09-18 16:54:11,290 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:54:11,290 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 112 transitions. [2024-09-18 16:54:11,291 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2024-09-18 16:54:11,291 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:54:11,291 INFO L216 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:54:11,305 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2024-09-18 16:54:11,495 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2024-09-18 16:54:11,496 INFO L399 AbstractCegarLoop]: === Iteration 17 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:54:11,496 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:54:11,496 INFO L85 PathProgramCache]: Analyzing trace with hash 595133078, now seen corresponding path program 5 times [2024-09-18 16:54:11,496 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:54:11,496 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [49468520] [2024-09-18 16:54:11,496 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:54:11,497 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:54:11,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:11,999 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-18 16:54:12,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:12,000 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-18 16:54:12,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:12,001 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-18 16:54:12,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:12,010 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2024-09-18 16:54:12,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:12,410 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-18 16:54:12,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:12,414 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-18 16:54:12,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:12,975 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-18 16:54:12,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:12,979 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-18 16:54:12,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:13,478 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-18 16:54:13,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:13,486 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-18 16:54:13,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:13,986 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-18 16:54:13,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:13,993 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-18 16:54:13,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:14,118 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-18 16:54:14,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:14,122 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 24 proven. 56 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2024-09-18 16:54:14,122 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:54:14,122 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [49468520] [2024-09-18 16:54:14,122 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [49468520] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:54:14,122 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1208449357] [2024-09-18 16:54:14,123 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-18 16:54:14,123 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:54:14,123 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:54:14,124 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:54:14,125 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2024-09-18 16:54:14,339 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 6 check-sat command(s) [2024-09-18 16:54:14,340 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-18 16:54:14,343 INFO L262 TraceCheckSpWp]: Trace formula consists of 563 conjuncts, 103 conjuncts are in the unsatisfiable core [2024-09-18 16:54:14,345 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:54:14,399 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:54:14,873 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-18 16:54:15,125 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2024-09-18 16:54:15,288 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 20 proven. 54 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2024-09-18 16:54:15,289 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:54:15,688 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 14 [2024-09-18 16:54:16,004 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 14 [2024-09-18 16:54:16,435 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2024-09-18 16:54:16,867 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 14 [2024-09-18 16:54:17,125 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 18 proven. 74 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2024-09-18 16:54:17,125 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1208449357] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-18 16:54:17,125 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-18 16:54:17,125 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 16, 20] total 54 [2024-09-18 16:54:17,125 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [408424257] [2024-09-18 16:54:17,125 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-18 16:54:17,126 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2024-09-18 16:54:17,126 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:54:17,130 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2024-09-18 16:54:17,131 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=276, Invalid=2586, Unknown=0, NotChecked=0, Total=2862 [2024-09-18 16:54:17,131 INFO L87 Difference]: Start difference. First operand 94 states and 112 transitions. Second operand has 54 states, 38 states have (on average 2.289473684210526) internal successors, (87), 48 states have internal predecessors, (87), 27 states have call successors, (33), 8 states have call predecessors, (33), 10 states have return successors, (30), 22 states have call predecessors, (30), 26 states have call successors, (30) [2024-09-18 16:54:21,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:54:21,235 INFO L93 Difference]: Finished difference Result 141 states and 174 transitions. [2024-09-18 16:54:21,235 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2024-09-18 16:54:21,235 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 38 states have (on average 2.289473684210526) internal successors, (87), 48 states have internal predecessors, (87), 27 states have call successors, (33), 8 states have call predecessors, (33), 10 states have return successors, (30), 22 states have call predecessors, (30), 26 states have call successors, (30) Word has length 86 [2024-09-18 16:54:21,236 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:54:21,236 INFO L225 Difference]: With dead ends: 141 [2024-09-18 16:54:21,236 INFO L226 Difference]: Without dead ends: 129 [2024-09-18 16:54:21,238 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 282 GetRequests, 188 SyntacticMatches, 0 SemanticMatches, 94 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1980 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=1155, Invalid=7965, Unknown=0, NotChecked=0, Total=9120 [2024-09-18 16:54:21,239 INFO L434 NwaCegarLoop]: 29 mSDtfsCounter, 130 mSDsluCounter, 439 mSDsCounter, 0 mSdLazyCounter, 1978 mSolverCounterSat, 142 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 468 SdHoareTripleChecker+Invalid, 2121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 142 IncrementalHoareTripleChecker+Valid, 1978 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2024-09-18 16:54:21,239 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 468 Invalid, 2121 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [142 Valid, 1978 Invalid, 1 Unknown, 0 Unchecked, 1.8s Time] [2024-09-18 16:54:21,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 129 states. [2024-09-18 16:54:21,286 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 129 to 104. [2024-09-18 16:54:21,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104 states, 63 states have (on average 1.0952380952380953) internal successors, (69), 66 states have internal predecessors, (69), 16 states have call successors, (16), 12 states have call predecessors, (16), 24 states have return successors, (40), 25 states have call predecessors, (40), 14 states have call successors, (40) [2024-09-18 16:54:21,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104 states to 104 states and 125 transitions. [2024-09-18 16:54:21,287 INFO L78 Accepts]: Start accepts. Automaton has 104 states and 125 transitions. Word has length 86 [2024-09-18 16:54:21,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:54:21,287 INFO L474 AbstractCegarLoop]: Abstraction has 104 states and 125 transitions. [2024-09-18 16:54:21,287 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 38 states have (on average 2.289473684210526) internal successors, (87), 48 states have internal predecessors, (87), 27 states have call successors, (33), 8 states have call predecessors, (33), 10 states have return successors, (30), 22 states have call predecessors, (30), 26 states have call successors, (30) [2024-09-18 16:54:21,288 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:54:21,288 INFO L276 IsEmpty]: Start isEmpty. Operand 104 states and 125 transitions. [2024-09-18 16:54:21,288 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2024-09-18 16:54:21,288 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:54:21,288 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:54:21,306 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Ended with exit code 0 [2024-09-18 16:54:21,492 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16,17 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:54:21,493 INFO L399 AbstractCegarLoop]: === Iteration 18 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:54:21,493 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:54:21,493 INFO L85 PathProgramCache]: Analyzing trace with hash 101233945, now seen corresponding path program 6 times [2024-09-18 16:54:21,493 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:54:21,493 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2127138374] [2024-09-18 16:54:21,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:54:21,493 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:54:21,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:54:21,511 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1215763115] [2024-09-18 16:54:21,511 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-09-18 16:54:21,511 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:54:21,511 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:54:21,512 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:54:21,513 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2024-09-18 16:54:21,736 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 5 check-sat command(s) [2024-09-18 16:54:21,736 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-18 16:54:21,740 WARN L260 TraceCheckSpWp]: Trace formula consists of 480 conjuncts, 244 conjuncts are in the unsatisfiable core [2024-09-18 16:54:21,743 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:54:21,750 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:54:21,754 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:54:21,783 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-18 16:54:21,800 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:54:22,174 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:54:22,196 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:54:22,900 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:54:23,088 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 13 [2024-09-18 16:54:23,093 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2024-09-18 16:54:23,185 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 36 proven. 24 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2024-09-18 16:54:23,185 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:54:26,425 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 76 treesize of output 72 [2024-09-18 16:54:26,430 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 122 treesize of output 114 [2024-09-18 16:54:26,782 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:54:26,783 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2127138374] [2024-09-18 16:54:26,783 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:54:26,783 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1215763115] [2024-09-18 16:54:26,783 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1215763115] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:54:26,783 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-18 16:54:26,783 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2024-09-18 16:54:26,783 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [802766444] [2024-09-18 16:54:26,783 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-18 16:54:26,784 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2024-09-18 16:54:26,784 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:54:26,784 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2024-09-18 16:54:26,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=84, Invalid=728, Unknown=0, NotChecked=0, Total=812 [2024-09-18 16:54:26,785 INFO L87 Difference]: Start difference. First operand 104 states and 125 transitions. Second operand has 24 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 19 states have internal predecessors, (35), 10 states have call successors, (12), 4 states have call predecessors, (12), 6 states have return successors, (10), 9 states have call predecessors, (10), 9 states have call successors, (10) [2024-09-18 16:54:27,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:54:27,984 INFO L93 Difference]: Finished difference Result 118 states and 141 transitions. [2024-09-18 16:54:27,985 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2024-09-18 16:54:27,985 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 19 states have internal predecessors, (35), 10 states have call successors, (12), 4 states have call predecessors, (12), 6 states have return successors, (10), 9 states have call predecessors, (10), 9 states have call successors, (10) Word has length 73 [2024-09-18 16:54:27,985 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:54:27,986 INFO L225 Difference]: With dead ends: 118 [2024-09-18 16:54:27,986 INFO L226 Difference]: Without dead ends: 112 [2024-09-18 16:54:27,987 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 93 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 299 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=178, Invalid=1462, Unknown=0, NotChecked=0, Total=1640 [2024-09-18 16:54:27,987 INFO L434 NwaCegarLoop]: 20 mSDtfsCounter, 33 mSDsluCounter, 136 mSDsCounter, 0 mSdLazyCounter, 655 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 156 SdHoareTripleChecker+Invalid, 678 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 655 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-18 16:54:27,987 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 156 Invalid, 678 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 655 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-18 16:54:27,987 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 112 states. [2024-09-18 16:54:28,037 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 112 to 108. [2024-09-18 16:54:28,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 65 states have (on average 1.0923076923076922) internal successors, (71), 68 states have internal predecessors, (71), 16 states have call successors, (16), 12 states have call predecessors, (16), 26 states have return successors, (43), 27 states have call predecessors, (43), 14 states have call successors, (43) [2024-09-18 16:54:28,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 130 transitions. [2024-09-18 16:54:28,038 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 130 transitions. Word has length 73 [2024-09-18 16:54:28,051 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:54:28,051 INFO L474 AbstractCegarLoop]: Abstraction has 108 states and 130 transitions. [2024-09-18 16:54:28,051 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 19 states have internal predecessors, (35), 10 states have call successors, (12), 4 states have call predecessors, (12), 6 states have return successors, (10), 9 states have call predecessors, (10), 9 states have call successors, (10) [2024-09-18 16:54:28,053 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:54:28,053 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 130 transitions. [2024-09-18 16:54:28,054 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2024-09-18 16:54:28,054 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:54:28,054 INFO L216 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 4, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:54:28,069 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2024-09-18 16:54:28,257 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2024-09-18 16:54:28,258 INFO L399 AbstractCegarLoop]: === Iteration 19 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:54:28,261 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:54:28,261 INFO L85 PathProgramCache]: Analyzing trace with hash 585988981, now seen corresponding path program 7 times [2024-09-18 16:54:28,261 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:54:28,261 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1475317138] [2024-09-18 16:54:28,262 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:54:28,262 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:54:28,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:54:28,285 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [10740319] [2024-09-18 16:54:28,285 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-09-18 16:54:28,285 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:54:28,286 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:54:28,288 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:54:28,293 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2024-09-18 16:54:28,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-18 16:54:28,548 INFO L262 TraceCheckSpWp]: Trace formula consists of 646 conjuncts, 316 conjuncts are in the unsatisfiable core [2024-09-18 16:54:28,554 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:54:28,558 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:54:28,561 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:54:28,568 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:54:28,571 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:54:28,577 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:54:28,599 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:54:29,550 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-18 16:54:29,958 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 24 [2024-09-18 16:54:29,960 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 20 [2024-09-18 16:54:30,937 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:54:30,946 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:54:30,952 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:54:31,131 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 33 proven. 96 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2024-09-18 16:54:31,131 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:54:38,663 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 70 treesize of output 62 [2024-09-18 16:54:38,672 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 62 treesize of output 58 [2024-09-18 16:54:38,680 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 58 treesize of output 54 [2024-09-18 16:55:21,478 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:55:21,478 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1475317138] [2024-09-18 16:55:21,478 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:55:21,479 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [10740319] [2024-09-18 16:55:21,479 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [10740319] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:55:21,479 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-18 16:55:21,479 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2024-09-18 16:55:21,479 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [596315769] [2024-09-18 16:55:21,479 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-18 16:55:21,479 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2024-09-18 16:55:21,479 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:55:21,479 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2024-09-18 16:55:21,480 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=103, Invalid=1079, Unknown=8, NotChecked=0, Total=1190 [2024-09-18 16:55:21,480 INFO L87 Difference]: Start difference. First operand 108 states and 130 transitions. Second operand has 28 states, 21 states have (on average 2.0476190476190474) internal successors, (43), 25 states have internal predecessors, (43), 11 states have call successors, (14), 3 states have call predecessors, (14), 8 states have return successors, (13), 11 states have call predecessors, (13), 10 states have call successors, (13) [2024-09-18 16:55:27,965 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:55:27,965 INFO L93 Difference]: Finished difference Result 124 states and 148 transitions. [2024-09-18 16:55:27,965 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2024-09-18 16:55:27,965 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 21 states have (on average 2.0476190476190474) internal successors, (43), 25 states have internal predecessors, (43), 11 states have call successors, (14), 3 states have call predecessors, (14), 8 states have return successors, (13), 11 states have call predecessors, (13), 10 states have call successors, (13) Word has length 99 [2024-09-18 16:55:27,965 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:55:27,966 INFO L225 Difference]: With dead ends: 124 [2024-09-18 16:55:27,966 INFO L226 Difference]: Without dead ends: 118 [2024-09-18 16:55:27,966 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 75 SyntacticMatches, 2 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 382 ImplicationChecksByTransitivity, 42.0s TimeCoverageRelationStatistics Valid=190, Invalid=1872, Unknown=8, NotChecked=0, Total=2070 [2024-09-18 16:55:27,967 INFO L434 NwaCegarLoop]: 23 mSDtfsCounter, 21 mSDsluCounter, 205 mSDsCounter, 0 mSdLazyCounter, 852 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 23 SdHoareTripleChecker+Valid, 228 SdHoareTripleChecker+Invalid, 862 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 852 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2024-09-18 16:55:27,967 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [23 Valid, 228 Invalid, 862 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 852 Invalid, 0 Unknown, 0 Unchecked, 3.8s Time] [2024-09-18 16:55:27,967 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118 states. [2024-09-18 16:55:28,027 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118 to 112. [2024-09-18 16:55:28,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 112 states, 67 states have (on average 1.0895522388059702) internal successors, (73), 70 states have internal predecessors, (73), 16 states have call successors, (16), 12 states have call predecessors, (16), 28 states have return successors, (45), 29 states have call predecessors, (45), 14 states have call successors, (45) [2024-09-18 16:55:28,028 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 134 transitions. [2024-09-18 16:55:28,029 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 134 transitions. Word has length 99 [2024-09-18 16:55:28,029 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:55:28,029 INFO L474 AbstractCegarLoop]: Abstraction has 112 states and 134 transitions. [2024-09-18 16:55:28,029 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 21 states have (on average 2.0476190476190474) internal successors, (43), 25 states have internal predecessors, (43), 11 states have call successors, (14), 3 states have call predecessors, (14), 8 states have return successors, (13), 11 states have call predecessors, (13), 10 states have call successors, (13) [2024-09-18 16:55:28,029 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:55:28,029 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 134 transitions. [2024-09-18 16:55:28,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2024-09-18 16:55:28,030 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:55:28,030 INFO L216 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:55:28,048 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2024-09-18 16:55:28,230 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,19 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:55:28,231 INFO L399 AbstractCegarLoop]: === Iteration 20 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:55:28,231 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:55:28,231 INFO L85 PathProgramCache]: Analyzing trace with hash -687137836, now seen corresponding path program 4 times [2024-09-18 16:55:28,231 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:55:28,231 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1614179564] [2024-09-18 16:55:28,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:55:28,231 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:55:28,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:55:28,253 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1177799582] [2024-09-18 16:55:28,253 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-18 16:55:28,253 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:55:28,253 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:55:28,254 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:55:28,255 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2024-09-18 16:55:28,525 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-18 16:55:28,525 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-18 16:55:28,529 INFO L262 TraceCheckSpWp]: Trace formula consists of 493 conjuncts, 223 conjuncts are in the unsatisfiable core [2024-09-18 16:55:28,533 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:55:28,542 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:55:28,557 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-18 16:55:28,572 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:55:28,630 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:55:29,602 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-18 16:55:30,297 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-18 16:55:31,185 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:55:32,544 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2024-09-18 16:55:32,553 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:55:33,068 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 12 proven. 67 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2024-09-18 16:55:33,068 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:55:41,227 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 86 treesize of output 82 [2024-09-18 16:55:41,314 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 86 treesize of output 82 [2024-09-18 16:55:41,394 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 86 treesize of output 82 [2024-09-18 16:55:41,812 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-18 16:55:41,812 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1614179564] [2024-09-18 16:55:41,812 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-18 16:55:41,812 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1177799582] [2024-09-18 16:55:41,812 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1177799582] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-18 16:55:41,812 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-18 16:55:41,812 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2024-09-18 16:55:41,812 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1975142555] [2024-09-18 16:55:41,812 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-18 16:55:41,813 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2024-09-18 16:55:41,813 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-18 16:55:41,813 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2024-09-18 16:55:41,813 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=84, Invalid=728, Unknown=0, NotChecked=0, Total=812 [2024-09-18 16:55:41,813 INFO L87 Difference]: Start difference. First operand 112 states and 134 transitions. Second operand has 24 states, 18 states have (on average 2.0) internal successors, (36), 20 states have internal predecessors, (36), 10 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (11), 9 states have call predecessors, (11), 9 states have call successors, (11) [2024-09-18 16:55:45,964 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-18 16:55:45,964 INFO L93 Difference]: Finished difference Result 120 states and 143 transitions. [2024-09-18 16:55:45,964 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2024-09-18 16:55:45,964 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 18 states have (on average 2.0) internal successors, (36), 20 states have internal predecessors, (36), 10 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (11), 9 states have call predecessors, (11), 9 states have call successors, (11) Word has length 86 [2024-09-18 16:55:45,965 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-18 16:55:45,965 INFO L225 Difference]: With dead ends: 120 [2024-09-18 16:55:45,965 INFO L226 Difference]: Without dead ends: 114 [2024-09-18 16:55:45,966 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 65 SyntacticMatches, 2 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 276 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=121, Invalid=1001, Unknown=0, NotChecked=0, Total=1122 [2024-09-18 16:55:45,966 INFO L434 NwaCegarLoop]: 20 mSDtfsCounter, 16 mSDsluCounter, 144 mSDsCounter, 0 mSdLazyCounter, 641 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 164 SdHoareTripleChecker+Invalid, 650 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 641 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2024-09-18 16:55:45,966 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 164 Invalid, 650 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 641 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2024-09-18 16:55:45,966 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2024-09-18 16:55:46,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 114. [2024-09-18 16:55:46,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 114 states, 68 states have (on average 1.088235294117647) internal successors, (74), 71 states have internal predecessors, (74), 16 states have call successors, (16), 12 states have call predecessors, (16), 29 states have return successors, (46), 30 states have call predecessors, (46), 14 states have call successors, (46) [2024-09-18 16:55:46,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 114 states to 114 states and 136 transitions. [2024-09-18 16:55:46,023 INFO L78 Accepts]: Start accepts. Automaton has 114 states and 136 transitions. Word has length 86 [2024-09-18 16:55:46,023 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-18 16:55:46,023 INFO L474 AbstractCegarLoop]: Abstraction has 114 states and 136 transitions. [2024-09-18 16:55:46,023 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 18 states have (on average 2.0) internal successors, (36), 20 states have internal predecessors, (36), 10 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (11), 9 states have call predecessors, (11), 9 states have call successors, (11) [2024-09-18 16:55:46,023 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:55:46,024 INFO L276 IsEmpty]: Start isEmpty. Operand 114 states and 136 transitions. [2024-09-18 16:55:46,024 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2024-09-18 16:55:46,024 INFO L208 NwaCegarLoop]: Found error trace [2024-09-18 16:55:46,024 INFO L216 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-18 16:55:46,038 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2024-09-18 16:55:46,228 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,20 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:55:46,229 INFO L399 AbstractCegarLoop]: === Iteration 21 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-18 16:55:46,229 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-18 16:55:46,229 INFO L85 PathProgramCache]: Analyzing trace with hash -1822711786, now seen corresponding path program 8 times [2024-09-18 16:55:46,229 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-18 16:55:46,229 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [612370324] [2024-09-18 16:55:46,229 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-18 16:55:46,229 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-18 16:55:46,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-18 16:55:46,256 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [644857669] [2024-09-18 16:55:46,256 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-18 16:55:46,256 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-18 16:55:46,256 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-18 16:55:46,260 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-18 16:55:46,261 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2024-09-18 16:55:46,539 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-18 16:55:46,539 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-18 16:55:46,544 WARN L260 TraceCheckSpWp]: Trace formula consists of 563 conjuncts, 305 conjuncts are in the unsatisfiable core [2024-09-18 16:55:46,548 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-18 16:55:46,557 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:55:46,564 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:55:46,574 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-18 16:55:46,589 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:55:46,605 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:55:46,660 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-18 16:55:49,658 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-09-18 16:55:51,668 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:55:51,688 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:55:51,702 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-18 16:55:52,219 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 24 proven. 36 refuted. 0 times theorem prover too weak. 76 trivial. 0 not checked. [2024-09-18 16:55:52,219 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-18 16:56:08,600 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 68 treesize of output 60 [2024-09-18 16:56:08,615 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 60 treesize of output 56 [2024-09-18 16:56:08,630 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 56 treesize of output 52 [2024-09-18 16:56:12,794 WARN L854 $PredicateComparison]: unable to prove that (let ((.cse2 (select |c_old(#memory_int#3)| |c_func_to_recursive_line_31_to_42_0_#in~y1.base|))) (let ((.cse3 (select .cse2 |c_func_to_recursive_line_31_to_42_0_#in~y1.offset|)) (.cse4 (select |c_old(#memory_int#4)| |c_func_to_recursive_line_31_to_42_0_#in~y2.base|)) (.cse6 (select (select |c_#memory_int#1| |c_func_to_recursive_line_31_to_42_0_#in~x2.base|) |c_func_to_recursive_line_31_to_42_0_#in~x2.offset|)) (.cse5 (forall ((|v_func_to_recursive_line_31_to_42_0_#in~x2.offset_BEFORE_CALL_85| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_70| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_72| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_130| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x2.base_BEFORE_CALL_89| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_130| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x1.base_BEFORE_CALL_50| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x1.offset_BEFORE_CALL_48| Int)) (= (+ (* (select (select |c_#memory_int#1| |v_func_to_recursive_line_31_to_42_0_#in~x2.base_BEFORE_CALL_89|) |v_func_to_recursive_line_31_to_42_0_#in~x2.offset_BEFORE_CALL_85|) (select (select |c_#memory_int#3| |v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_70|) |v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_72|)) (select (select |c_#memory_int#4| |v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_130|) |v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_130|)) (select (select |c_#memory_int#5| |v_func_to_recursive_line_31_to_42_0_#in~x1.base_BEFORE_CALL_50|) |v_func_to_recursive_line_31_to_42_0_#in~x1.offset_BEFORE_CALL_48|))))) (and (forall ((|v_func_to_recursive_line_31_to_42_0_#in~x2.offset_BEFORE_CALL_85| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_70| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_72| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_130| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x2.base_BEFORE_CALL_89| Int) (|v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_130| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x1.base_BEFORE_CALL_50| Int) (|v_func_to_recursive_line_31_to_42_0_#in~x1.offset_BEFORE_CALL_48| Int)) (let ((.cse1 (select (select |c_#memory_int#1| |v_func_to_recursive_line_31_to_42_0_#in~x2.base_BEFORE_CALL_89|) |v_func_to_recursive_line_31_to_42_0_#in~x2.offset_BEFORE_CALL_85|)) (.cse0 (select (select |c_#memory_int#5| |v_func_to_recursive_line_31_to_42_0_#in~x1.base_BEFORE_CALL_50|) |v_func_to_recursive_line_31_to_42_0_#in~x1.offset_BEFORE_CALL_48|))) (or (not (= .cse0 (+ (* .cse1 (select (select (store |c_old(#memory_int#3)| |c_func_to_recursive_line_31_to_42_0_#in~y1.base| (store .cse2 |c_func_to_recursive_line_31_to_42_0_#in~y1.offset| (+ .cse3 1))) |v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_70|) |v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_72|)) (select (select (store |c_old(#memory_int#4)| |c_func_to_recursive_line_31_to_42_0_#in~y2.base| (store .cse4 |c_func_to_recursive_line_31_to_42_0_#in~y2.offset| 0)) |v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_130|) |v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_130|)))) (= (+ (* .cse1 (select (select |c_#memory_int#3| |v_func_to_recursive_line_31_to_42_0_#in~y1.base_BEFORE_CALL_70|) |v_func_to_recursive_line_31_to_42_0_#in~y1.offset_BEFORE_CALL_72|)) (select (select |c_#memory_int#4| |v_func_to_recursive_line_31_to_42_0_#in~y2.base_BEFORE_CALL_130|) |v_func_to_recursive_line_31_to_42_0_#in~y2.offset_BEFORE_CALL_130|)) .cse0)))) (or .cse5 (< (select (select |c_#memory_int#5| |c_func_to_recursive_line_31_to_42_0_#in~x1.base|) |c_func_to_recursive_line_31_to_42_0_#in~x1.offset|) (+ .cse6 (* .cse3 .cse6) 1))) (or .cse5 (< 2 (select (select |c_old(#memory_int#2)| |c_func_to_recursive_line_31_to_42_0_#in~y3.base|) |c_func_to_recursive_line_31_to_42_0_#in~y3.offset|))) (or (= (+ (select .cse4 |c_func_to_recursive_line_31_to_42_0_#in~y2.offset|) 3) .cse6) .cse5)))) is different from false