./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/recursified_nla-digbench/recursified_dijkstra-u.c --full-output --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --traceabstraction.encode.modifies.clause.in.ensures.clause.of.contracts true --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version fb1cb0b9 Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/recursified_nla-digbench/recursified_dijkstra-u.c -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0464cc7a685168b5fc1a1b0dd8da6141b4b98c7c538345750bda8185cd005644 --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --traceabstraction.encode.modifies.clause.in.ensures.clause.of.contracts true --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --- Real Ultimate output --- This is Ultimate 0.2.4-tmp.dk.referee-eval-fb1cb0b-m [2024-09-25 11:33:49,645 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-25 11:33:49,721 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-25 11:33:49,729 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-25 11:33:49,729 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-25 11:33:49,763 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-25 11:33:49,765 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-25 11:33:49,766 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-25 11:33:49,767 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-25 11:33:49,768 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-25 11:33:49,771 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-25 11:33:49,771 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-25 11:33:49,772 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-25 11:33:49,772 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-25 11:33:49,773 INFO L153 SettingsManager]: * Use SBE=true [2024-09-25 11:33:49,773 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-25 11:33:49,773 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-25 11:33:49,774 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-25 11:33:49,774 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-25 11:33:49,774 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-25 11:33:49,774 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-25 11:33:49,778 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-25 11:33:49,778 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-25 11:33:49,779 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-25 11:33:49,779 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-25 11:33:49,779 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-25 11:33:49,779 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-25 11:33:49,780 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-25 11:33:49,780 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-25 11:33:49,780 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-25 11:33:49,780 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-25 11:33:49,781 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-25 11:33:49,781 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-25 11:33:49,783 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-25 11:33:49,783 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-25 11:33:49,783 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-25 11:33:49,784 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-25 11:33:49,784 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-25 11:33:49,784 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-25 11:33:49,785 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-25 11:33:49,785 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-25 11:33:49,786 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-25 11:33:49,786 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0464cc7a685168b5fc1a1b0dd8da6141b4b98c7c538345750bda8185cd005644 Applying setting for plugin de.uni_freiburg.informatik.ultimate.boogie.procedureinliner: Inline calls to implemented procedures -> NEVER Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Encode 'modifies' clause in 'ensures' clause of contracts -> true Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Generate GraphML witnesses -> false [2024-09-25 11:33:50,123 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-25 11:33:50,147 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-25 11:33:50,150 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-25 11:33:50,152 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-25 11:33:50,152 INFO L274 PluginConnector]: CDTParser initialized [2024-09-25 11:33:50,153 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/recursified_nla-digbench/recursified_dijkstra-u.c [2024-09-25 11:33:51,705 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-25 11:33:51,882 INFO L384 CDTParser]: Found 1 translation units. [2024-09-25 11:33:51,883 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_dijkstra-u.c [2024-09-25 11:33:51,893 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/303e66667/20d600aff0874cf39d4c98401bb70d20/FLAG1a053b873 [2024-09-25 11:33:51,908 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/303e66667/20d600aff0874cf39d4c98401bb70d20 [2024-09-25 11:33:51,910 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-25 11:33:51,913 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-09-25 11:33:51,916 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-25 11:33:51,916 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-25 11:33:51,921 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-25 11:33:51,922 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.09 11:33:51" (1/1) ... [2024-09-25 11:33:51,923 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@20dd543b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:51, skipping insertion in model container [2024-09-25 11:33:51,923 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.09 11:33:51" (1/1) ... [2024-09-25 11:33:51,948 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-25 11:33:52,127 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_dijkstra-u.c[1076,1089] [2024-09-25 11:33:52,180 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-25 11:33:52,196 INFO L200 MainTranslator]: Completed pre-run [2024-09-25 11:33:52,207 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_dijkstra-u.c[1076,1089] [2024-09-25 11:33:52,243 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-25 11:33:52,263 INFO L204 MainTranslator]: Completed translation [2024-09-25 11:33:52,264 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:52 WrapperNode [2024-09-25 11:33:52,265 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-25 11:33:52,266 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-25 11:33:52,267 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-25 11:33:52,267 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-25 11:33:52,273 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:52" (1/1) ... [2024-09-25 11:33:52,288 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:52" (1/1) ... [2024-09-25 11:33:52,299 INFO L138 Inliner]: procedures = 17, calls = 173, calls flagged for inlining = 0, calls inlined = 0, statements flattened = 0 [2024-09-25 11:33:52,303 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-25 11:33:52,304 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-25 11:33:52,304 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-25 11:33:52,304 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-25 11:33:52,320 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:52" (1/1) ... [2024-09-25 11:33:52,321 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:52" (1/1) ... [2024-09-25 11:33:52,324 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:52" (1/1) ... [2024-09-25 11:33:52,348 INFO L175 MemorySlicer]: Split 139 memory accesses to 6 slices as follows [2, 22, 21, 29, 35, 30]. 25 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2, 0, 0, 0, 0, 0]. The 11 writes are split as follows [0, 2, 1, 3, 3, 2]. [2024-09-25 11:33:52,349 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:52" (1/1) ... [2024-09-25 11:33:52,349 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:52" (1/1) ... [2024-09-25 11:33:52,359 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:52" (1/1) ... [2024-09-25 11:33:52,361 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:52" (1/1) ... [2024-09-25 11:33:52,363 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:52" (1/1) ... [2024-09-25 11:33:52,365 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:52" (1/1) ... [2024-09-25 11:33:52,368 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-25 11:33:52,369 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-25 11:33:52,369 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-25 11:33:52,369 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-25 11:33:52,370 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:52" (1/1) ... [2024-09-25 11:33:52,378 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-25 11:33:52,390 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:33:52,406 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-25 11:33:52,410 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-25 11:33:52,449 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-25 11:33:52,450 INFO L130 BoogieDeclarations]: Found specification of procedure func_to_recursive_line_29_to_33_0 [2024-09-25 11:33:52,450 INFO L138 BoogieDeclarations]: Found implementation of procedure func_to_recursive_line_29_to_33_0 [2024-09-25 11:33:52,450 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2024-09-25 11:33:52,450 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2024-09-25 11:33:52,450 INFO L130 BoogieDeclarations]: Found specification of procedure main [2024-09-25 11:33:52,451 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2024-09-25 11:33:52,452 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-09-25 11:33:52,453 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-09-25 11:33:52,453 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-09-25 11:33:52,453 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-09-25 11:33:52,453 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-09-25 11:33:52,454 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-09-25 11:33:52,454 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-09-25 11:33:52,454 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-09-25 11:33:52,454 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-09-25 11:33:52,454 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2024-09-25 11:33:52,454 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2024-09-25 11:33:52,455 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2024-09-25 11:33:52,455 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#5 [2024-09-25 11:33:52,455 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2024-09-25 11:33:52,455 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2024-09-25 11:33:52,455 INFO L130 BoogieDeclarations]: Found specification of procedure func_to_recursive_line_37_to_53_0 [2024-09-25 11:33:52,456 INFO L138 BoogieDeclarations]: Found implementation of procedure func_to_recursive_line_37_to_53_0 [2024-09-25 11:33:52,456 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-25 11:33:52,456 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-25 11:33:52,456 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-09-25 11:33:52,456 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-09-25 11:33:52,456 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2024-09-25 11:33:52,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2024-09-25 11:33:52,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2024-09-25 11:33:52,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#5 [2024-09-25 11:33:52,457 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-25 11:33:52,457 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-25 11:33:52,457 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-09-25 11:33:52,582 INFO L241 CfgBuilder]: Building ICFG [2024-09-25 11:33:52,584 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-25 11:33:53,023 INFO L? ?]: Removed 8 outVars from TransFormulas that were not future-live. [2024-09-25 11:33:53,023 INFO L290 CfgBuilder]: Performing block encoding [2024-09-25 11:33:53,049 INFO L312 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-25 11:33:53,051 INFO L317 CfgBuilder]: Removed 2 assume(true) statements. [2024-09-25 11:33:53,051 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.09 11:33:53 BoogieIcfgContainer [2024-09-25 11:33:53,051 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-25 11:33:53,053 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-25 11:33:53,054 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-25 11:33:53,057 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-25 11:33:53,057 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.09 11:33:51" (1/3) ... [2024-09-25 11:33:53,057 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7bad28f7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.09 11:33:53, skipping insertion in model container [2024-09-25 11:33:53,058 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.09 11:33:52" (2/3) ... [2024-09-25 11:33:53,058 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7bad28f7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.09 11:33:53, skipping insertion in model container [2024-09-25 11:33:53,059 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.09 11:33:53" (3/3) ... [2024-09-25 11:33:53,060 INFO L112 eAbstractionObserver]: Analyzing ICFG recursified_dijkstra-u.c [2024-09-25 11:33:53,075 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-25 11:33:53,076 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-09-25 11:33:53,138 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-25 11:33:53,145 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@a62a891, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-25 11:33:53,146 INFO L337 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-09-25 11:33:53,150 INFO L276 IsEmpty]: Start isEmpty. Operand has 54 states, 30 states have (on average 1.2666666666666666) internal successors, (38), 33 states have internal predecessors, (38), 16 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (16), 16 states have call predecessors, (16), 16 states have call successors, (16) [2024-09-25 11:33:53,157 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2024-09-25 11:33:53,157 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:33:53,158 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:33:53,158 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:33:53,165 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:33:53,165 INFO L85 PathProgramCache]: Analyzing trace with hash -795461761, now seen corresponding path program 1 times [2024-09-25 11:33:53,174 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:33:53,174 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1912744252] [2024-09-25 11:33:53,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:33:53,175 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:33:53,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:33:53,390 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 11:33:53,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:33:53,403 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-25 11:33:53,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:33:53,418 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 11:33:53,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:33:53,427 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 11:33:53,428 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:33:53,428 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1912744252] [2024-09-25 11:33:53,428 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1912744252] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 11:33:53,428 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-25 11:33:53,429 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-09-25 11:33:53,430 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2024655468] [2024-09-25 11:33:53,432 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 11:33:53,436 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-09-25 11:33:53,436 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:33:53,456 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-09-25 11:33:53,457 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-25 11:33:53,459 INFO L87 Difference]: Start difference. First operand has 54 states, 30 states have (on average 1.2666666666666666) internal successors, (38), 33 states have internal predecessors, (38), 16 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (16), 16 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-09-25 11:33:53,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:33:53,688 INFO L93 Difference]: Finished difference Result 104 states and 150 transitions. [2024-09-25 11:33:53,690 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-09-25 11:33:53,691 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 23 [2024-09-25 11:33:53,692 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:33:53,700 INFO L225 Difference]: With dead ends: 104 [2024-09-25 11:33:53,700 INFO L226 Difference]: Without dead ends: 54 [2024-09-25 11:33:53,704 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-25 11:33:53,709 INFO L434 NwaCegarLoop]: 38 mSDtfsCounter, 24 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 46 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-25 11:33:53,712 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [31 Valid, 46 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-25 11:33:53,736 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2024-09-25 11:33:53,773 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 50. [2024-09-25 11:33:53,775 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50 states, 28 states have (on average 1.1428571428571428) internal successors, (32), 31 states have internal predecessors, (32), 16 states have call successors, (16), 6 states have call predecessors, (16), 5 states have return successors, (14), 14 states have call predecessors, (14), 14 states have call successors, (14) [2024-09-25 11:33:53,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 62 transitions. [2024-09-25 11:33:53,783 INFO L78 Accepts]: Start accepts. Automaton has 50 states and 62 transitions. Word has length 23 [2024-09-25 11:33:53,783 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:33:53,784 INFO L474 AbstractCegarLoop]: Abstraction has 50 states and 62 transitions. [2024-09-25 11:33:53,784 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 2 states have internal predecessors, (14), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-09-25 11:33:53,785 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:33:53,787 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 62 transitions. [2024-09-25 11:33:53,788 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2024-09-25 11:33:53,788 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:33:53,789 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:33:53,789 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-25 11:33:53,789 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:33:53,795 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:33:53,795 INFO L85 PathProgramCache]: Analyzing trace with hash 1335693656, now seen corresponding path program 1 times [2024-09-25 11:33:53,795 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:33:53,795 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1656915408] [2024-09-25 11:33:53,796 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:33:53,796 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:33:53,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:33:55,046 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 11:33:55,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:33:55,053 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-25 11:33:55,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:33:55,069 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 11:33:55,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:33:55,324 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 11:33:55,325 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:33:55,325 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1656915408] [2024-09-25 11:33:55,325 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1656915408] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-25 11:33:55,325 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-25 11:33:55,325 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2024-09-25 11:33:55,326 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1021751431] [2024-09-25 11:33:55,326 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-25 11:33:55,327 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2024-09-25 11:33:55,327 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:33:55,328 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2024-09-25 11:33:55,330 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=153, Unknown=0, NotChecked=0, Total=182 [2024-09-25 11:33:55,330 INFO L87 Difference]: Start difference. First operand 50 states and 62 transitions. Second operand has 14 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 5 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-25 11:33:56,205 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:33:56,205 INFO L93 Difference]: Finished difference Result 83 states and 106 transitions. [2024-09-25 11:33:56,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2024-09-25 11:33:56,206 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 5 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 24 [2024-09-25 11:33:56,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:33:56,208 INFO L225 Difference]: With dead ends: 83 [2024-09-25 11:33:56,209 INFO L226 Difference]: Without dead ends: 81 [2024-09-25 11:33:56,209 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=71, Invalid=391, Unknown=0, NotChecked=0, Total=462 [2024-09-25 11:33:56,210 INFO L434 NwaCegarLoop]: 25 mSDtfsCounter, 60 mSDsluCounter, 140 mSDsCounter, 0 mSdLazyCounter, 575 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 165 SdHoareTripleChecker+Invalid, 621 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 575 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-25 11:33:56,211 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 165 Invalid, 621 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 575 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-25 11:33:56,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2024-09-25 11:33:56,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 76. [2024-09-25 11:33:56,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 43 states have (on average 1.1162790697674418) internal successors, (48), 46 states have internal predecessors, (48), 23 states have call successors, (23), 8 states have call predecessors, (23), 9 states have return successors, (26), 21 states have call predecessors, (26), 21 states have call successors, (26) [2024-09-25 11:33:56,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 97 transitions. [2024-09-25 11:33:56,239 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 97 transitions. Word has length 24 [2024-09-25 11:33:56,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:33:56,240 INFO L474 AbstractCegarLoop]: Abstraction has 76 states and 97 transitions. [2024-09-25 11:33:56,240 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 5 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-25 11:33:56,240 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:33:56,240 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 97 transitions. [2024-09-25 11:33:56,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2024-09-25 11:33:56,241 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:33:56,242 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:33:56,242 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-09-25 11:33:56,242 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:33:56,242 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:33:56,242 INFO L85 PathProgramCache]: Analyzing trace with hash -1872287595, now seen corresponding path program 1 times [2024-09-25 11:33:56,243 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:33:56,243 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1096671933] [2024-09-25 11:33:56,243 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:33:56,243 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:33:56,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:33:56,284 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [598508280] [2024-09-25 11:33:56,284 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:33:56,284 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:33:56,285 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:33:56,286 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:33:56,292 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-25 11:33:56,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:33:56,595 INFO L262 TraceCheckSpWp]: Trace formula consists of 232 conjuncts, 47 conjuncts are in the unsatisfiable core [2024-09-25 11:33:56,602 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:33:56,646 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:33:56,652 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:33:56,657 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-25 11:33:56,880 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:33:56,884 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-25 11:33:56,891 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-25 11:33:56,941 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-25 11:33:56,942 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:33:57,065 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 35 treesize of output 27 [2024-09-25 11:34:01,574 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:34:01,574 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1096671933] [2024-09-25 11:34:01,576 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:34:01,576 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [598508280] [2024-09-25 11:34:01,576 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [598508280] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:34:01,576 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:34:01,577 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9] total 9 [2024-09-25 11:34:01,577 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1861445558] [2024-09-25 11:34:01,577 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:34:01,577 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2024-09-25 11:34:01,577 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:34:01,578 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2024-09-25 11:34:01,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=85, Unknown=1, NotChecked=0, Total=110 [2024-09-25 11:34:01,579 INFO L87 Difference]: Start difference. First operand 76 states and 97 transitions. Second operand has 9 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 7 states have internal predecessors, (19), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-09-25 11:34:02,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:34:02,304 INFO L93 Difference]: Finished difference Result 122 states and 158 transitions. [2024-09-25 11:34:02,304 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-09-25 11:34:02,305 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 7 states have internal predecessors, (19), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 30 [2024-09-25 11:34:02,305 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:34:02,307 INFO L225 Difference]: With dead ends: 122 [2024-09-25 11:34:02,307 INFO L226 Difference]: Without dead ends: 120 [2024-09-25 11:34:02,308 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 21 SyntacticMatches, 5 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=49, Invalid=160, Unknown=1, NotChecked=0, Total=210 [2024-09-25 11:34:02,309 INFO L434 NwaCegarLoop]: 39 mSDtfsCounter, 47 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 234 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 231 SdHoareTripleChecker+Invalid, 262 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 234 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-25 11:34:02,309 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [49 Valid, 231 Invalid, 262 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 234 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-25 11:34:02,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2024-09-25 11:34:02,338 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 111. [2024-09-25 11:34:02,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 111 states, 64 states have (on average 1.125) internal successors, (72), 68 states have internal predecessors, (72), 33 states have call successors, (33), 11 states have call predecessors, (33), 13 states have return successors, (39), 31 states have call predecessors, (39), 30 states have call successors, (39) [2024-09-25 11:34:02,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 111 states to 111 states and 144 transitions. [2024-09-25 11:34:02,341 INFO L78 Accepts]: Start accepts. Automaton has 111 states and 144 transitions. Word has length 30 [2024-09-25 11:34:02,342 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:34:02,342 INFO L474 AbstractCegarLoop]: Abstraction has 111 states and 144 transitions. [2024-09-25 11:34:02,342 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 7 states have internal predecessors, (19), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-09-25 11:34:02,343 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:34:02,343 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 144 transitions. [2024-09-25 11:34:02,343 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2024-09-25 11:34:02,344 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:34:02,344 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:34:02,357 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2024-09-25 11:34:02,548 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:34:02,549 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:34:02,549 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:34:02,549 INFO L85 PathProgramCache]: Analyzing trace with hash 687714431, now seen corresponding path program 1 times [2024-09-25 11:34:02,549 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:34:02,549 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1104478101] [2024-09-25 11:34:02,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:34:02,550 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:34:02,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:34:03,489 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 11:34:03,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:34:03,493 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-25 11:34:03,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:34:03,521 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 11:34:03,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:34:03,939 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-25 11:34:03,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:34:04,162 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-25 11:34:04,163 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:34:04,163 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1104478101] [2024-09-25 11:34:04,163 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1104478101] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:34:04,163 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [53421589] [2024-09-25 11:34:04,163 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:34:04,163 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:34:04,164 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:34:04,166 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:34:04,168 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-25 11:34:04,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:34:04,329 INFO L262 TraceCheckSpWp]: Trace formula consists of 240 conjuncts, 102 conjuncts are in the unsatisfiable core [2024-09-25 11:34:04,334 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:34:04,339 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:34:04,344 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-25 11:34:04,349 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:34:04,355 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:34:04,944 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 11:34:04,945 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 40 [2024-09-25 11:34:04,959 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:34:05,202 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2024-09-25 11:34:05,350 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-25 11:34:05,351 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:34:06,766 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [53421589] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:34:06,766 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-25 11:34:06,767 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 15] total 29 [2024-09-25 11:34:06,767 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [146760224] [2024-09-25 11:34:06,767 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-25 11:34:06,768 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2024-09-25 11:34:06,768 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:34:06,768 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2024-09-25 11:34:06,769 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=98, Invalid=1162, Unknown=0, NotChecked=0, Total=1260 [2024-09-25 11:34:06,769 INFO L87 Difference]: Start difference. First operand 111 states and 144 transitions. Second operand has 29 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 21 states have internal predecessors, (30), 9 states have call successors, (12), 7 states have call predecessors, (12), 5 states have return successors, (7), 5 states have call predecessors, (7), 5 states have call successors, (7) [2024-09-25 11:34:17,970 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:34:18,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:34:18,349 INFO L93 Difference]: Finished difference Result 161 states and 207 transitions. [2024-09-25 11:34:18,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2024-09-25 11:34:18,350 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 21 states have internal predecessors, (30), 9 states have call successors, (12), 7 states have call predecessors, (12), 5 states have return successors, (7), 5 states have call predecessors, (7), 5 states have call successors, (7) Word has length 30 [2024-09-25 11:34:18,350 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:34:18,352 INFO L225 Difference]: With dead ends: 161 [2024-09-25 11:34:18,352 INFO L226 Difference]: Without dead ends: 159 [2024-09-25 11:34:18,356 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 85 GetRequests, 28 SyntacticMatches, 2 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 425 ImplicationChecksByTransitivity, 7.4s TimeCoverageRelationStatistics Valid=295, Invalid=2896, Unknown=1, NotChecked=0, Total=3192 [2024-09-25 11:34:18,358 INFO L434 NwaCegarLoop]: 39 mSDtfsCounter, 109 mSDsluCounter, 267 mSDsCounter, 0 mSdLazyCounter, 1795 mSolverCounterSat, 78 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 121 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 1874 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 78 IncrementalHoareTripleChecker+Valid, 1795 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.0s IncrementalHoareTripleChecker+Time [2024-09-25 11:34:18,359 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [121 Valid, 306 Invalid, 1874 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [78 Valid, 1795 Invalid, 1 Unknown, 0 Unchecked, 6.0s Time] [2024-09-25 11:34:18,360 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159 states. [2024-09-25 11:34:18,416 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159 to 148. [2024-09-25 11:34:18,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 88 states have (on average 1.125) internal successors, (99), 92 states have internal predecessors, (99), 40 states have call successors, (40), 16 states have call predecessors, (40), 19 states have return successors, (50), 39 states have call predecessors, (50), 37 states have call successors, (50) [2024-09-25 11:34:18,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 189 transitions. [2024-09-25 11:34:18,420 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 189 transitions. Word has length 30 [2024-09-25 11:34:18,421 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:34:18,421 INFO L474 AbstractCegarLoop]: Abstraction has 148 states and 189 transitions. [2024-09-25 11:34:18,421 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 21 states have internal predecessors, (30), 9 states have call successors, (12), 7 states have call predecessors, (12), 5 states have return successors, (7), 5 states have call predecessors, (7), 5 states have call successors, (7) [2024-09-25 11:34:18,422 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:34:18,422 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 189 transitions. [2024-09-25 11:34:18,423 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2024-09-25 11:34:18,423 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:34:18,423 INFO L216 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:34:18,439 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2024-09-25 11:34:18,627 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:34:18,628 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:34:18,628 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:34:18,628 INFO L85 PathProgramCache]: Analyzing trace with hash 1967022502, now seen corresponding path program 2 times [2024-09-25 11:34:18,628 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:34:18,628 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1221940677] [2024-09-25 11:34:18,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:34:18,629 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:34:18,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:34:19,613 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 11:34:19,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:34:19,616 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-25 11:34:19,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:34:19,634 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 11:34:19,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:34:20,038 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-25 11:34:20,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:34:20,466 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-25 11:34:20,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:34:20,681 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-09-25 11:34:20,682 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:34:20,682 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1221940677] [2024-09-25 11:34:20,682 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1221940677] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:34:20,682 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1552809501] [2024-09-25 11:34:20,683 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-25 11:34:20,683 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:34:20,683 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:34:20,685 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:34:20,691 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-25 11:34:20,803 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-25 11:34:20,803 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 11:34:20,810 INFO L262 TraceCheckSpWp]: Trace formula consists of 269 conjuncts, 129 conjuncts are in the unsatisfiable core [2024-09-25 11:34:20,814 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:34:20,825 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:34:20,871 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-25 11:34:20,877 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:34:20,886 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:34:21,767 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:34:21,780 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 11:34:21,780 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 32 [2024-09-25 11:34:22,075 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2024-09-25 11:34:22,209 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2024-09-25 11:34:22,209 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:34:23,684 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1552809501] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:34:23,685 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-25 11:34:23,685 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 17] total 35 [2024-09-25 11:34:23,685 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [368518861] [2024-09-25 11:34:23,685 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-25 11:34:23,686 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2024-09-25 11:34:23,686 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:34:23,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2024-09-25 11:34:23,687 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=115, Invalid=1607, Unknown=0, NotChecked=0, Total=1722 [2024-09-25 11:34:23,687 INFO L87 Difference]: Start difference. First operand 148 states and 189 transitions. Second operand has 35 states, 25 states have (on average 1.4) internal successors, (35), 27 states have internal predecessors, (35), 12 states have call successors, (13), 7 states have call predecessors, (13), 7 states have return successors, (9), 8 states have call predecessors, (9), 8 states have call successors, (9) [2024-09-25 11:34:32,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:34:32,670 INFO L93 Difference]: Finished difference Result 194 states and 250 transitions. [2024-09-25 11:34:32,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2024-09-25 11:34:32,670 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 25 states have (on average 1.4) internal successors, (35), 27 states have internal predecessors, (35), 12 states have call successors, (13), 7 states have call predecessors, (13), 7 states have return successors, (9), 8 states have call predecessors, (9), 8 states have call successors, (9) Word has length 36 [2024-09-25 11:34:32,671 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:34:32,674 INFO L225 Difference]: With dead ends: 194 [2024-09-25 11:34:32,674 INFO L226 Difference]: Without dead ends: 192 [2024-09-25 11:34:32,675 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 778 ImplicationChecksByTransitivity, 8.2s TimeCoverageRelationStatistics Valid=387, Invalid=4304, Unknown=1, NotChecked=0, Total=4692 [2024-09-25 11:34:32,676 INFO L434 NwaCegarLoop]: 46 mSDtfsCounter, 106 mSDsluCounter, 442 mSDsCounter, 0 mSdLazyCounter, 2465 mSolverCounterSat, 85 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 488 SdHoareTripleChecker+Invalid, 2550 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 85 IncrementalHoareTripleChecker+Valid, 2465 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2024-09-25 11:34:32,676 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [122 Valid, 488 Invalid, 2550 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [85 Valid, 2465 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2024-09-25 11:34:32,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2024-09-25 11:34:32,726 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 158. [2024-09-25 11:34:32,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 158 states, 94 states have (on average 1.127659574468085) internal successors, (106), 99 states have internal predecessors, (106), 41 states have call successors, (41), 17 states have call predecessors, (41), 22 states have return successors, (53), 41 states have call predecessors, (53), 38 states have call successors, (53) [2024-09-25 11:34:32,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 158 states to 158 states and 200 transitions. [2024-09-25 11:34:32,731 INFO L78 Accepts]: Start accepts. Automaton has 158 states and 200 transitions. Word has length 36 [2024-09-25 11:34:32,731 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:34:32,731 INFO L474 AbstractCegarLoop]: Abstraction has 158 states and 200 transitions. [2024-09-25 11:34:32,732 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 25 states have (on average 1.4) internal successors, (35), 27 states have internal predecessors, (35), 12 states have call successors, (13), 7 states have call predecessors, (13), 7 states have return successors, (9), 8 states have call predecessors, (9), 8 states have call successors, (9) [2024-09-25 11:34:32,732 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:34:32,732 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 200 transitions. [2024-09-25 11:34:32,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2024-09-25 11:34:32,733 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:34:32,733 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:34:32,751 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-09-25 11:34:32,937 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:34:32,938 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:34:32,938 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:34:32,938 INFO L85 PathProgramCache]: Analyzing trace with hash -546904304, now seen corresponding path program 1 times [2024-09-25 11:34:32,938 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:34:32,938 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1815699858] [2024-09-25 11:34:32,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:34:32,939 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:34:32,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:34:32,973 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [392894316] [2024-09-25 11:34:32,973 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:34:32,974 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:34:32,974 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:34:32,975 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:34:32,988 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-25 11:34:33,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:34:33,101 INFO L262 TraceCheckSpWp]: Trace formula consists of 283 conjuncts, 105 conjuncts are in the unsatisfiable core [2024-09-25 11:34:33,108 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:34:33,117 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:34:33,122 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:34:33,130 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:34:33,143 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:34:33,153 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-25 11:34:33,253 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 11:34:33,253 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 27 [2024-09-25 11:34:33,597 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-25 11:34:33,683 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-25 11:34:33,683 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:34:50,786 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:34:50,786 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1815699858] [2024-09-25 11:34:50,786 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:34:50,786 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [392894316] [2024-09-25 11:34:50,786 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [392894316] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:34:50,786 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:34:50,786 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12] total 12 [2024-09-25 11:34:50,787 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1625702155] [2024-09-25 11:34:50,787 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:34:50,787 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2024-09-25 11:34:50,787 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:34:50,788 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2024-09-25 11:34:50,788 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=148, Unknown=1, NotChecked=0, Total=182 [2024-09-25 11:34:50,788 INFO L87 Difference]: Start difference. First operand 158 states and 200 transitions. Second operand has 12 states, 9 states have (on average 2.2222222222222223) internal successors, (20), 9 states have internal predecessors, (20), 5 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-25 11:34:55,807 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2024-09-25 11:34:59,845 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:35:03,869 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:35:07,897 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:35:11,915 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:35:15,935 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:35:19,989 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2024-09-25 11:35:24,076 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2024-09-25 11:35:24,137 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:35:24,137 INFO L93 Difference]: Finished difference Result 178 states and 219 transitions. [2024-09-25 11:35:24,139 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-09-25 11:35:24,139 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 9 states have (on average 2.2222222222222223) internal successors, (20), 9 states have internal predecessors, (20), 5 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 36 [2024-09-25 11:35:24,139 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:35:24,141 INFO L225 Difference]: With dead ends: 178 [2024-09-25 11:35:24,141 INFO L226 Difference]: Without dead ends: 176 [2024-09-25 11:35:24,142 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 24 SyntacticMatches, 5 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 17.5s TimeCoverageRelationStatistics Valid=84, Invalid=335, Unknown=1, NotChecked=0, Total=420 [2024-09-25 11:35:24,144 INFO L434 NwaCegarLoop]: 34 mSDtfsCounter, 50 mSDsluCounter, 260 mSDsCounter, 0 mSdLazyCounter, 426 mSolverCounterSat, 33 mSolverCounterUnsat, 8 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 32.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 294 SdHoareTripleChecker+Invalid, 467 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 426 IncrementalHoareTripleChecker+Invalid, 8 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 32.9s IncrementalHoareTripleChecker+Time [2024-09-25 11:35:24,145 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 294 Invalid, 467 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 426 Invalid, 8 Unknown, 0 Unchecked, 32.9s Time] [2024-09-25 11:35:24,145 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 176 states. [2024-09-25 11:35:24,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 176 to 172. [2024-09-25 11:35:24,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172 states, 103 states have (on average 1.1262135922330097) internal successors, (116), 108 states have internal predecessors, (116), 44 states have call successors, (44), 19 states have call predecessors, (44), 24 states have return successors, (55), 44 states have call predecessors, (55), 40 states have call successors, (55) [2024-09-25 11:35:24,213 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 215 transitions. [2024-09-25 11:35:24,215 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 215 transitions. Word has length 36 [2024-09-25 11:35:24,216 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:35:24,216 INFO L474 AbstractCegarLoop]: Abstraction has 172 states and 215 transitions. [2024-09-25 11:35:24,216 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 9 states have (on average 2.2222222222222223) internal successors, (20), 9 states have internal predecessors, (20), 5 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-25 11:35:24,216 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:35:24,216 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 215 transitions. [2024-09-25 11:35:24,217 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2024-09-25 11:35:24,218 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:35:24,218 INFO L216 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:35:24,239 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2024-09-25 11:35:24,418 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:35:24,418 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:35:24,419 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:35:24,419 INFO L85 PathProgramCache]: Analyzing trace with hash 2107888845, now seen corresponding path program 3 times [2024-09-25 11:35:24,419 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:35:24,419 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [340112567] [2024-09-25 11:35:24,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:35:24,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:35:24,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:35:25,486 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 11:35:25,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:35:25,489 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-25 11:35:25,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:35:25,509 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 11:35:25,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:35:26,213 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-25 11:35:26,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:35:26,718 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-25 11:35:26,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:35:27,186 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-25 11:35:27,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:35:27,464 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 0 proven. 21 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-25 11:35:27,464 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:35:27,464 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [340112567] [2024-09-25 11:35:27,465 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [340112567] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:35:27,465 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [823838434] [2024-09-25 11:35:27,465 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-25 11:35:27,465 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:35:27,465 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:35:27,467 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:35:27,468 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-25 11:35:27,858 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-09-25 11:35:27,859 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 11:35:27,863 WARN L260 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 157 conjuncts are in the unsatisfiable core [2024-09-25 11:35:27,867 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:35:27,878 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:35:27,943 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-25 11:35:27,955 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:35:27,961 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:35:29,115 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 11:35:29,116 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 36 [2024-09-25 11:35:29,133 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:35:29,423 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2024-09-25 11:35:29,561 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-25 11:35:29,561 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:35:31,444 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [823838434] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:35:31,444 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-25 11:35:31,444 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 18] total 39 [2024-09-25 11:35:31,444 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1030801267] [2024-09-25 11:35:31,444 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-25 11:35:31,445 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2024-09-25 11:35:31,445 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:35:31,446 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2024-09-25 11:35:31,446 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=122, Invalid=1948, Unknown=0, NotChecked=0, Total=2070 [2024-09-25 11:35:31,447 INFO L87 Difference]: Start difference. First operand 172 states and 215 transitions. Second operand has 39 states, 28 states have (on average 1.3928571428571428) internal successors, (39), 31 states have internal predecessors, (39), 13 states have call successors, (14), 7 states have call predecessors, (14), 9 states have return successors, (11), 10 states have call predecessors, (11), 9 states have call successors, (11) [2024-09-25 11:35:55,519 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:35:59,526 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:35:59,768 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:35:59,769 INFO L93 Difference]: Finished difference Result 226 states and 286 transitions. [2024-09-25 11:35:59,769 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2024-09-25 11:35:59,769 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 28 states have (on average 1.3928571428571428) internal successors, (39), 31 states have internal predecessors, (39), 13 states have call successors, (14), 7 states have call predecessors, (14), 9 states have return successors, (11), 10 states have call predecessors, (11), 9 states have call successors, (11) Word has length 42 [2024-09-25 11:35:59,769 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:35:59,771 INFO L225 Difference]: With dead ends: 226 [2024-09-25 11:35:59,771 INFO L226 Difference]: Without dead ends: 224 [2024-09-25 11:35:59,773 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 43 SyntacticMatches, 0 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1258 ImplicationChecksByTransitivity, 19.3s TimeCoverageRelationStatistics Valid=588, Invalid=6549, Unknown=3, NotChecked=0, Total=7140 [2024-09-25 11:35:59,774 INFO L434 NwaCegarLoop]: 53 mSDtfsCounter, 153 mSDsluCounter, 702 mSDsCounter, 0 mSdLazyCounter, 3488 mSolverCounterSat, 130 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 755 SdHoareTripleChecker+Invalid, 3620 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 130 IncrementalHoareTripleChecker+Valid, 3488 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.6s IncrementalHoareTripleChecker+Time [2024-09-25 11:35:59,774 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [169 Valid, 755 Invalid, 3620 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [130 Valid, 3488 Invalid, 2 Unknown, 0 Unchecked, 11.6s Time] [2024-09-25 11:35:59,775 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 224 states. [2024-09-25 11:35:59,842 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 224 to 180. [2024-09-25 11:35:59,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 180 states, 108 states have (on average 1.1296296296296295) internal successors, (122), 114 states have internal predecessors, (122), 45 states have call successors, (45), 20 states have call predecessors, (45), 26 states have return successors, (57), 46 states have call predecessors, (57), 41 states have call successors, (57) [2024-09-25 11:35:59,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 180 states to 180 states and 224 transitions. [2024-09-25 11:35:59,844 INFO L78 Accepts]: Start accepts. Automaton has 180 states and 224 transitions. Word has length 42 [2024-09-25 11:35:59,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:35:59,844 INFO L474 AbstractCegarLoop]: Abstraction has 180 states and 224 transitions. [2024-09-25 11:35:59,844 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 28 states have (on average 1.3928571428571428) internal successors, (39), 31 states have internal predecessors, (39), 13 states have call successors, (14), 7 states have call predecessors, (14), 9 states have return successors, (11), 10 states have call predecessors, (11), 9 states have call successors, (11) [2024-09-25 11:35:59,844 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:35:59,845 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 224 transitions. [2024-09-25 11:35:59,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2024-09-25 11:35:59,847 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:35:59,847 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:35:59,863 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2024-09-25 11:36:00,048 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2024-09-25 11:36:00,048 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:36:00,048 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:36:00,048 INFO L85 PathProgramCache]: Analyzing trace with hash 21325385, now seen corresponding path program 1 times [2024-09-25 11:36:00,049 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:36:00,049 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1836981856] [2024-09-25 11:36:00,049 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:36:00,049 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:36:00,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:36:00,073 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1672729492] [2024-09-25 11:36:00,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:36:00,073 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:36:00,073 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:36:00,075 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:36:00,083 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-25 11:36:00,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:36:00,316 INFO L262 TraceCheckSpWp]: Trace formula consists of 346 conjuncts, 87 conjuncts are in the unsatisfiable core [2024-09-25 11:36:00,323 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:36:00,329 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:36:00,333 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-25 11:36:00,339 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:36:00,596 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 47 treesize of output 23 [2024-09-25 11:36:00,601 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 71 treesize of output 31 [2024-09-25 11:36:00,624 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-25 11:36:00,635 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 50 treesize of output 22 [2024-09-25 11:36:00,742 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-25 11:36:00,742 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:36:01,634 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 140 treesize of output 112 [2024-09-25 11:36:01,639 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 112 treesize of output 104 [2024-09-25 11:36:02,027 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:36:02,028 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1836981856] [2024-09-25 11:36:02,028 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:36:02,028 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1672729492] [2024-09-25 11:36:02,028 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1672729492] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:36:02,028 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:36:02,028 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9] total 9 [2024-09-25 11:36:02,028 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [596119578] [2024-09-25 11:36:02,028 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:36:02,029 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2024-09-25 11:36:02,029 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:36:02,029 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2024-09-25 11:36:02,029 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2024-09-25 11:36:02,029 INFO L87 Difference]: Start difference. First operand 180 states and 224 transitions. Second operand has 9 states, 7 states have (on average 3.0) internal successors, (21), 7 states have internal predecessors, (21), 4 states have call successors, (9), 4 states have call predecessors, (9), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2024-09-25 11:36:06,642 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:36:06,642 INFO L93 Difference]: Finished difference Result 223 states and 272 transitions. [2024-09-25 11:36:06,643 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-09-25 11:36:06,643 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 3.0) internal successors, (21), 7 states have internal predecessors, (21), 4 states have call successors, (9), 4 states have call predecessors, (9), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 42 [2024-09-25 11:36:06,643 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:36:06,645 INFO L225 Difference]: With dead ends: 223 [2024-09-25 11:36:06,645 INFO L226 Difference]: Without dead ends: 221 [2024-09-25 11:36:06,645 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 29 SyntacticMatches, 9 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 38 ImplicationChecksByTransitivity, 5.5s TimeCoverageRelationStatistics Valid=49, Invalid=160, Unknown=1, NotChecked=0, Total=210 [2024-09-25 11:36:06,646 INFO L434 NwaCegarLoop]: 40 mSDtfsCounter, 36 mSDsluCounter, 190 mSDsCounter, 0 mSdLazyCounter, 207 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 230 SdHoareTripleChecker+Invalid, 224 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 207 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-09-25 11:36:06,646 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 230 Invalid, 224 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 207 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-09-25 11:36:06,647 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 221 states. [2024-09-25 11:36:06,714 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 221 to 219. [2024-09-25 11:36:06,715 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 219 states, 133 states have (on average 1.1203007518796992) internal successors, (149), 139 states have internal predecessors, (149), 54 states have call successors, (54), 25 states have call predecessors, (54), 31 states have return successors, (65), 55 states have call predecessors, (65), 49 states have call successors, (65) [2024-09-25 11:36:06,716 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 219 states to 219 states and 268 transitions. [2024-09-25 11:36:06,717 INFO L78 Accepts]: Start accepts. Automaton has 219 states and 268 transitions. Word has length 42 [2024-09-25 11:36:06,717 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:36:06,717 INFO L474 AbstractCegarLoop]: Abstraction has 219 states and 268 transitions. [2024-09-25 11:36:06,717 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 3.0) internal successors, (21), 7 states have internal predecessors, (21), 4 states have call successors, (9), 4 states have call predecessors, (9), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2024-09-25 11:36:06,718 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:36:06,718 INFO L276 IsEmpty]: Start isEmpty. Operand 219 states and 268 transitions. [2024-09-25 11:36:06,719 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2024-09-25 11:36:06,719 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:36:06,719 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:36:06,734 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2024-09-25 11:36:06,923 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:36:06,924 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:36:06,924 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:36:06,924 INFO L85 PathProgramCache]: Analyzing trace with hash 1606878135, now seen corresponding path program 1 times [2024-09-25 11:36:06,924 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:36:06,924 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [487592946] [2024-09-25 11:36:06,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:36:06,924 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:36:06,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-25 11:36:06,957 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [155584120] [2024-09-25 11:36:06,957 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:36:06,957 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:36:06,957 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:36:06,959 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:36:06,960 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-25 11:36:07,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:36:07,158 INFO L262 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 129 conjuncts are in the unsatisfiable core [2024-09-25 11:36:07,165 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:36:07,172 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:36:07,175 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:36:07,178 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:36:07,181 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:36:07,186 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-25 11:36:07,383 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 21 [2024-09-25 11:36:07,509 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 3 [2024-09-25 11:36:07,967 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 11:36:07,967 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 27 [2024-09-25 11:36:20,214 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 12 [2024-09-25 11:36:20,231 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 10 [2024-09-25 11:36:20,406 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-25 11:36:20,406 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:37:02,519 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:37:02,519 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [487592946] [2024-09-25 11:37:02,519 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-25 11:37:02,519 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [155584120] [2024-09-25 11:37:02,519 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [155584120] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:37:02,519 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-25 11:37:02,519 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17] total 17 [2024-09-25 11:37:02,519 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1508914765] [2024-09-25 11:37:02,520 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-25 11:37:02,520 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2024-09-25 11:37:02,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:37:02,520 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2024-09-25 11:37:02,520 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=283, Unknown=9, NotChecked=0, Total=342 [2024-09-25 11:37:02,521 INFO L87 Difference]: Start difference. First operand 219 states and 268 transitions. Second operand has 17 states, 13 states have (on average 2.076923076923077) internal successors, (27), 14 states have internal predecessors, (27), 7 states have call successors, (9), 6 states have call predecessors, (9), 5 states have return successors, (6), 5 states have call predecessors, (6), 5 states have call successors, (6) [2024-09-25 11:37:06,593 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:37:10,690 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:37:14,712 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:37:18,799 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:37:22,832 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:37:27,148 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:37:31,314 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:37:32,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-25 11:37:32,561 INFO L93 Difference]: Finished difference Result 275 states and 329 transitions. [2024-09-25 11:37:32,562 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2024-09-25 11:37:32,562 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 13 states have (on average 2.076923076923077) internal successors, (27), 14 states have internal predecessors, (27), 7 states have call successors, (9), 6 states have call predecessors, (9), 5 states have return successors, (6), 5 states have call predecessors, (6), 5 states have call successors, (6) Word has length 42 [2024-09-25 11:37:32,563 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-25 11:37:32,565 INFO L225 Difference]: With dead ends: 275 [2024-09-25 11:37:32,565 INFO L226 Difference]: Without dead ends: 273 [2024-09-25 11:37:32,566 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 26 SyntacticMatches, 4 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 93 ImplicationChecksByTransitivity, 55.1s TimeCoverageRelationStatistics Valid=108, Invalid=533, Unknown=9, NotChecked=0, Total=650 [2024-09-25 11:37:32,568 INFO L434 NwaCegarLoop]: 51 mSDtfsCounter, 54 mSDsluCounter, 284 mSDsCounter, 0 mSdLazyCounter, 890 mSolverCounterSat, 38 mSolverCounterUnsat, 8 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 29.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 335 SdHoareTripleChecker+Invalid, 936 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 890 IncrementalHoareTripleChecker+Invalid, 8 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 29.5s IncrementalHoareTripleChecker+Time [2024-09-25 11:37:32,568 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 335 Invalid, 936 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 890 Invalid, 8 Unknown, 0 Unchecked, 29.5s Time] [2024-09-25 11:37:32,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 273 states. [2024-09-25 11:37:32,691 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 273 to 267. [2024-09-25 11:37:32,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 267 states, 163 states have (on average 1.1104294478527608) internal successors, (181), 169 states have internal predecessors, (181), 64 states have call successors, (64), 31 states have call predecessors, (64), 39 states have return successors, (78), 66 states have call predecessors, (78), 58 states have call successors, (78) [2024-09-25 11:37:32,694 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 267 states to 267 states and 323 transitions. [2024-09-25 11:37:32,694 INFO L78 Accepts]: Start accepts. Automaton has 267 states and 323 transitions. Word has length 42 [2024-09-25 11:37:32,694 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-25 11:37:32,694 INFO L474 AbstractCegarLoop]: Abstraction has 267 states and 323 transitions. [2024-09-25 11:37:32,695 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 13 states have (on average 2.076923076923077) internal successors, (27), 14 states have internal predecessors, (27), 7 states have call successors, (9), 6 states have call predecessors, (9), 5 states have return successors, (6), 5 states have call predecessors, (6), 5 states have call successors, (6) [2024-09-25 11:37:32,695 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:37:32,695 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 323 transitions. [2024-09-25 11:37:32,696 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2024-09-25 11:37:32,696 INFO L208 NwaCegarLoop]: Found error trace [2024-09-25 11:37:32,696 INFO L216 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-25 11:37:32,714 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2024-09-25 11:37:32,900 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:37:32,901 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-25 11:37:32,901 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-25 11:37:32,901 INFO L85 PathProgramCache]: Analyzing trace with hash -211633676, now seen corresponding path program 4 times [2024-09-25 11:37:32,901 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-25 11:37:32,901 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [357595301] [2024-09-25 11:37:32,901 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-25 11:37:32,902 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-25 11:37:32,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:37:33,920 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-25 11:37:33,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:37:33,922 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-25 11:37:33,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:37:33,945 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-25 11:37:33,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:37:37,738 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-25 11:37:37,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:37:38,299 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-25 11:37:38,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:37:38,731 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-25 11:37:38,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:37:39,100 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-25 11:37:39,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-25 11:37:39,316 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 0 proven. 36 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-09-25 11:37:39,316 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-25 11:37:39,316 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [357595301] [2024-09-25 11:37:39,316 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [357595301] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:37:39,316 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1432551598] [2024-09-25 11:37:39,316 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-25 11:37:39,316 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-25 11:37:39,316 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-25 11:37:39,317 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-25 11:37:39,319 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-25 11:37:39,426 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-25 11:37:39,426 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-25 11:37:39,429 WARN L260 TraceCheckSpWp]: Trace formula consists of 327 conjuncts, 174 conjuncts are in the unsatisfiable core [2024-09-25 11:37:39,432 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-25 11:37:39,440 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-25 11:37:39,491 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:37:39,500 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-25 11:37:39,504 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-25 11:37:40,590 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-25 11:37:40,591 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 36 [2024-09-25 11:37:40,611 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-25 11:37:40,895 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2024-09-25 11:37:41,068 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 0 proven. 24 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2024-09-25 11:37:41,069 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-25 11:37:43,279 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1432551598] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-25 11:37:43,279 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-25 11:37:43,279 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 19] total 43 [2024-09-25 11:37:43,279 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [21699594] [2024-09-25 11:37:43,279 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-25 11:37:43,280 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2024-09-25 11:37:43,280 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-25 11:37:43,280 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2024-09-25 11:37:43,281 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=134, Invalid=2316, Unknown=0, NotChecked=0, Total=2450 [2024-09-25 11:37:43,281 INFO L87 Difference]: Start difference. First operand 267 states and 323 transitions. Second operand has 43 states, 31 states have (on average 1.3870967741935485) internal successors, (43), 35 states have internal predecessors, (43), 14 states have call successors, (15), 7 states have call predecessors, (15), 11 states have return successors, (13), 12 states have call predecessors, (13), 10 states have call successors, (13) [2024-09-25 11:37:50,573 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-25 11:37:55,513 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0]