./Ultimate.py --spec ../../../trunk/examples/svcomp/properties/unreach-call.prp --file ../../../trunk/examples/svcomp/pthread-wmm/safe019_rmo.oepc.i --full-output --witness-type correctness_witness --witnessparser.only.consider.loop.invariants false --cacsl2boogietranslator.check.unreachability.of.reach_error.function false --validate ./goblint.2024-06-19_11-23-25.files/mutex-meet-rel/safe019_rmo.oepc.yml/witness.yml --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 7724a2de Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReachWitnessValidation.xml -i ../../../trunk/examples/svcomp/pthread-wmm/safe019_rmo.oepc.i ./goblint.2024-06-19_11-23-25.files/mutex-meet-rel/safe019_rmo.oepc.yml/witness.yml -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --traceabstraction.compute.hoare.annotation.of.negated.interpolant.automaton,.abstraction.and.cfg false --witnessparser.only.consider.loop.invariants false --cacsl2boogietranslator.check.unreachability.of.reach_error.function false --- Real Ultimate output --- This is Ultimate 0.2.4-tmp.fs.goblint-validation-7724a2d-m [2024-06-28 00:28:26,060 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-06-28 00:28:26,144 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-06-28 00:28:26,152 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-06-28 00:28:26,153 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-06-28 00:28:26,171 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-06-28 00:28:26,171 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-06-28 00:28:26,172 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-06-28 00:28:26,173 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-06-28 00:28:26,174 INFO L153 SettingsManager]: * Use memory slicer=true [2024-06-28 00:28:26,174 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-06-28 00:28:26,174 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-06-28 00:28:26,175 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-06-28 00:28:26,177 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-06-28 00:28:26,177 INFO L153 SettingsManager]: * Use SBE=true [2024-06-28 00:28:26,177 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-06-28 00:28:26,178 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-06-28 00:28:26,181 INFO L153 SettingsManager]: * sizeof long=4 [2024-06-28 00:28:26,181 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-06-28 00:28:26,181 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-06-28 00:28:26,181 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-06-28 00:28:26,182 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-06-28 00:28:26,182 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-06-28 00:28:26,182 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-06-28 00:28:26,182 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-06-28 00:28:26,183 INFO L153 SettingsManager]: * sizeof long double=12 [2024-06-28 00:28:26,183 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-06-28 00:28:26,183 INFO L153 SettingsManager]: * Use constant arrays=true [2024-06-28 00:28:26,183 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-06-28 00:28:26,184 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-06-28 00:28:26,184 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-06-28 00:28:26,185 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-06-28 00:28:26,185 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-06-28 00:28:26,185 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-06-28 00:28:26,185 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-06-28 00:28:26,186 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-06-28 00:28:26,186 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-06-28 00:28:26,186 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-06-28 00:28:26,186 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-06-28 00:28:26,186 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-06-28 00:28:26,186 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2024-06-28 00:28:26,187 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-06-28 00:28:26,187 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-06-28 00:28:26,188 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessparser: Only consider loop invariants -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Check unreachability of reach_error function -> false [2024-06-28 00:28:26,378 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-06-28 00:28:26,393 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-06-28 00:28:26,395 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-06-28 00:28:26,396 INFO L270 PluginConnector]: Initializing CDTParser... [2024-06-28 00:28:26,396 INFO L274 PluginConnector]: CDTParser initialized [2024-06-28 00:28:26,397 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/pthread-wmm/safe019_rmo.oepc.i [2024-06-28 00:28:27,765 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-06-28 00:28:27,990 INFO L384 CDTParser]: Found 1 translation units. [2024-06-28 00:28:27,991 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/pthread-wmm/safe019_rmo.oepc.i [2024-06-28 00:28:28,010 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/82f639755/a7fdfe81485647018916503efd4a8abc/FLAGce0c79ae4 [2024-06-28 00:28:28,025 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/82f639755/a7fdfe81485647018916503efd4a8abc [2024-06-28 00:28:28,027 INFO L270 PluginConnector]: Initializing Witness Parser... [2024-06-28 00:28:28,028 INFO L274 PluginConnector]: Witness Parser initialized [2024-06-28 00:28:28,032 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/./goblint.2024-06-19_11-23-25.files/mutex-meet-rel/safe019_rmo.oepc.yml/witness.yml [2024-06-28 00:28:28,134 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-06-28 00:28:28,135 INFO L133 ToolchainWalker]: Walking toolchain with 5 elements. [2024-06-28 00:28:28,138 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-06-28 00:28:28,139 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-06-28 00:28:28,143 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-06-28 00:28:28,144 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.06 12:28:28" (1/2) ... [2024-06-28 00:28:28,145 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@44b87ca0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.06 12:28:28, skipping insertion in model container [2024-06-28 00:28:28,145 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.06 12:28:28" (1/2) ... [2024-06-28 00:28:28,147 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@eac10d6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.06 12:28:28, skipping insertion in model container [2024-06-28 00:28:28,147 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "witness.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 28.06 12:28:28" (2/2) ... [2024-06-28 00:28:28,148 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@44b87ca0 and model type witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28, skipping insertion in model container [2024-06-28 00:28:28,148 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "witness.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 28.06 12:28:28" (2/2) ... [2024-06-28 00:28:28,148 INFO L83 nessWitnessExtractor]: Extracting all invariants from correctness witness [2024-06-28 00:28:28,179 INFO L95 edCorrectnessWitness]: Found the following entries in the witness: [2024-06-28 00:28:28,180 INFO L97 edCorrectnessWitness]: Location invariant before [L858-L858] ! multithreaded || ((0LL - (long long )__unbuffered_p0_EBX) + (long long )x >= 0LL && (0LL - (long long )__unbuffered_p2_EAX) + (long long )x >= 0LL) [2024-06-28 00:28:28,180 INFO L97 edCorrectnessWitness]: Location invariant before [L860-L860] ! multithreaded || ((0LL - (long long )__unbuffered_p0_EBX) + (long long )x >= 0LL && (0LL - (long long )__unbuffered_p2_EAX) + (long long )x >= 0LL) [2024-06-28 00:28:28,180 INFO L97 edCorrectnessWitness]: Location invariant before [L856-L856] ! multithreaded || ((0LL - (long long )__unbuffered_p0_EBX) + (long long )x >= 0LL && (0LL - (long long )__unbuffered_p2_EAX) + (long long )x >= 0LL) [2024-06-28 00:28:28,180 INFO L97 edCorrectnessWitness]: Location invariant before [L861-L861] ! multithreaded || ((0LL - (long long )__unbuffered_p0_EBX) + (long long )x >= 0LL && (0LL - (long long )__unbuffered_p2_EAX) + (long long )x >= 0LL) [2024-06-28 00:28:28,180 INFO L103 edCorrectnessWitness]: ghost_variable multithreaded = 0 [2024-06-28 00:28:28,181 INFO L106 edCorrectnessWitness]: ghost_update [L854-L854] multithreaded = 1; [2024-06-28 00:28:28,220 INFO L177 MainTranslator]: Built tables and reachable declarations [2024-06-28 00:28:28,559 INFO L207 PostProcessor]: Analyzing one entry point: main [2024-06-28 00:28:28,568 INFO L202 MainTranslator]: Completed pre-run Start Parsing Local Start Parsing Local Start Parsing Local Start Parsing Local Start Parsing Local Start Parsing Local [2024-06-28 00:28:28,650 INFO L207 PostProcessor]: Analyzing one entry point: main [2024-06-28 00:28:28,679 INFO L206 MainTranslator]: Completed translation [2024-06-28 00:28:28,681 INFO L201 PluginConnector]: Adding new model witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28 WrapperNode [2024-06-28 00:28:28,682 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-06-28 00:28:28,683 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-06-28 00:28:28,683 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-06-28 00:28:28,683 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-06-28 00:28:28,688 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28" (1/1) ... [2024-06-28 00:28:28,702 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28" (1/1) ... [2024-06-28 00:28:28,726 INFO L138 Inliner]: procedures = 176, calls = 70, calls flagged for inlining = 5, calls inlined = 5, statements flattened = 180 [2024-06-28 00:28:28,733 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-06-28 00:28:28,733 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-06-28 00:28:28,733 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-06-28 00:28:28,734 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-06-28 00:28:28,742 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28" (1/1) ... [2024-06-28 00:28:28,742 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28" (1/1) ... [2024-06-28 00:28:28,749 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28" (1/1) ... [2024-06-28 00:28:28,765 INFO L175 MemorySlicer]: Split 24 memory accesses to 2 slices as follows [2, 22]. 92 percent of accesses are in the largest equivalence class. The 3 initializations are split as follows [2, 1]. The 9 writes are split as follows [0, 9]. [2024-06-28 00:28:28,772 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28" (1/1) ... [2024-06-28 00:28:28,772 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28" (1/1) ... [2024-06-28 00:28:28,801 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28" (1/1) ... [2024-06-28 00:28:28,803 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28" (1/1) ... [2024-06-28 00:28:28,805 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28" (1/1) ... [2024-06-28 00:28:28,807 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28" (1/1) ... [2024-06-28 00:28:28,810 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-06-28 00:28:28,811 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-06-28 00:28:28,811 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-06-28 00:28:28,811 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-06-28 00:28:28,812 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28" (1/1) ... [2024-06-28 00:28:28,834 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-06-28 00:28:28,842 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-06-28 00:28:28,870 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-06-28 00:28:28,878 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-06-28 00:28:28,953 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-06-28 00:28:28,954 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-06-28 00:28:28,954 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-06-28 00:28:28,954 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-06-28 00:28:28,954 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_atomic_begin [2024-06-28 00:28:28,954 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-06-28 00:28:28,955 INFO L130 BoogieDeclarations]: Found specification of procedure P0 [2024-06-28 00:28:28,955 INFO L138 BoogieDeclarations]: Found implementation of procedure P0 [2024-06-28 00:28:28,955 INFO L130 BoogieDeclarations]: Found specification of procedure P1 [2024-06-28 00:28:28,955 INFO L138 BoogieDeclarations]: Found implementation of procedure P1 [2024-06-28 00:28:28,955 INFO L130 BoogieDeclarations]: Found specification of procedure P2 [2024-06-28 00:28:28,955 INFO L138 BoogieDeclarations]: Found implementation of procedure P2 [2024-06-28 00:28:28,955 INFO L130 BoogieDeclarations]: Found specification of procedure P3 [2024-06-28 00:28:28,956 INFO L138 BoogieDeclarations]: Found implementation of procedure P3 [2024-06-28 00:28:28,956 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-06-28 00:28:28,958 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-06-28 00:28:28,959 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_atomic_end [2024-06-28 00:28:28,959 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-06-28 00:28:28,959 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-06-28 00:28:28,960 WARN L214 CfgBuilder]: User set CodeBlockSize to SequenceOfStatements but program contains fork statements. Overwriting the user preferences and setting CodeBlockSize to OneNontrivialStatement [2024-06-28 00:28:29,113 INFO L244 CfgBuilder]: Building ICFG [2024-06-28 00:28:29,114 INFO L270 CfgBuilder]: Building CFG for each procedure with an implementation [2024-06-28 00:28:29,507 INFO L289 CfgBuilder]: Ommited future-live optimization because the input is a concurrent program. [2024-06-28 00:28:29,507 INFO L293 CfgBuilder]: Performing block encoding [2024-06-28 00:28:29,772 INFO L315 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-06-28 00:28:29,772 INFO L320 CfgBuilder]: Removed 0 assume(true) statements. [2024-06-28 00:28:29,773 INFO L201 PluginConnector]: Adding new model witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.06 12:28:29 BoogieIcfgContainer [2024-06-28 00:28:29,773 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-06-28 00:28:29,776 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-06-28 00:28:29,776 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-06-28 00:28:29,779 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-06-28 00:28:29,779 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.06 12:28:28" (1/4) ... [2024-06-28 00:28:29,780 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@834f1f8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.06 12:28:29, skipping insertion in model container [2024-06-28 00:28:29,780 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "witness.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 28.06 12:28:28" (2/4) ... [2024-06-28 00:28:29,781 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@834f1f8 and model type witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CORRECTNESS_WITNESS 28.06 12:28:29, skipping insertion in model container [2024-06-28 00:28:29,782 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 28.06 12:28:28" (3/4) ... [2024-06-28 00:28:29,783 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@834f1f8 and model type witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CORRECTNESS_WITNESS 28.06 12:28:29, skipping insertion in model container [2024-06-28 00:28:29,783 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.06 12:28:29" (4/4) ... [2024-06-28 00:28:29,784 INFO L112 eAbstractionObserver]: Analyzing ICFG safe019_rmo.oepc.i [2024-06-28 00:28:29,799 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-06-28 00:28:29,799 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 4 error locations. [2024-06-28 00:28:29,799 INFO L522 ceAbstractionStarter]: Constructing petrified ICFG for 1 thread instances. [2024-06-28 00:28:29,855 INFO L144 ThreadInstanceAdder]: Constructed 0 joinOtherThreadTransitions. [2024-06-28 00:28:29,904 INFO L73 FinitePrefix]: Start finitePrefix. Operand has 62 places, 49 transitions, 114 flow [2024-06-28 00:28:29,951 INFO L124 PetriNetUnfolderBase]: 0/45 cut-off events. [2024-06-28 00:28:29,951 INFO L125 PetriNetUnfolderBase]: For 0/0 co-relation queries the response was YES. [2024-06-28 00:28:29,953 INFO L83 FinitePrefix]: Finished finitePrefix Result has 58 conditions, 45 events. 0/45 cut-off events. For 0/0 co-relation queries the response was YES. Maximal size of possible extension queue 4. Compared 78 event pairs, 0 based on Foata normal form. 0/41 useless extension candidates. Maximal degree in co-relation 0. Up to 1 conditions per place. [2024-06-28 00:28:29,953 INFO L82 GeneralOperation]: Start removeDead. Operand has 62 places, 49 transitions, 114 flow [2024-06-28 00:28:29,956 INFO L88 GeneralOperation]: Finished RemoveDead, result has has 52 places, 39 transitions, 90 flow [2024-06-28 00:28:29,964 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-06-28 00:28:29,969 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5e098503, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-06-28 00:28:29,970 INFO L358 AbstractCegarLoop]: Starting to check reachability of 8 error locations. [2024-06-28 00:28:29,973 INFO L185 PetriNetUnfolderBase]: Found word, exiting Unfolder. [2024-06-28 00:28:29,973 INFO L124 PetriNetUnfolderBase]: 0/5 cut-off events. [2024-06-28 00:28:29,974 INFO L125 PetriNetUnfolderBase]: For 0/0 co-relation queries the response was YES. [2024-06-28 00:28:29,974 INFO L200 CegarLoopForPetriNet]: Found error trace [2024-06-28 00:28:29,974 INFO L208 CegarLoopForPetriNet]: trace histogram [1, 1, 1, 1, 1] [2024-06-28 00:28:29,975 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT (and 5 more)] === [2024-06-28 00:28:29,979 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-06-28 00:28:29,980 INFO L85 PathProgramCache]: Analyzing trace with hash 630789305, now seen corresponding path program 1 times [2024-06-28 00:28:29,988 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-06-28 00:28:29,988 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [498052702] [2024-06-28 00:28:29,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-06-28 00:28:29,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-06-28 00:28:30,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-06-28 00:28:30,237 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-06-28 00:28:30,238 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-06-28 00:28:30,238 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [498052702] [2024-06-28 00:28:30,239 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [498052702] provided 1 perfect and 0 imperfect interpolant sequences [2024-06-28 00:28:30,239 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-06-28 00:28:30,239 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2024-06-28 00:28:30,241 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [638794592] [2024-06-28 00:28:30,241 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-06-28 00:28:30,248 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-06-28 00:28:30,253 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-06-28 00:28:30,277 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-06-28 00:28:30,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-06-28 00:28:30,296 INFO L471 CegarLoopForPetriNet]: Number of universal loopers: 19 out of 49 [2024-06-28 00:28:30,299 INFO L103 encePairwiseOnDemand]: Start differencePairwiseOnDemand. First operand has 52 places, 39 transitions, 90 flow. Second operand has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:30,299 INFO L112 encePairwiseOnDemand]: Universal subtrahend loopers provided by user. [2024-06-28 00:28:30,299 INFO L113 encePairwiseOnDemand]: Number of universal subtrahend loopers: 19 of 49 [2024-06-28 00:28:30,300 INFO L73 FinitePrefix]: Start finitePrefix. Operand will be constructed on-demand [2024-06-28 00:28:30,700 INFO L124 PetriNetUnfolderBase]: 1249/2023 cut-off events. [2024-06-28 00:28:30,700 INFO L125 PetriNetUnfolderBase]: For 37/37 co-relation queries the response was YES. [2024-06-28 00:28:30,707 INFO L83 FinitePrefix]: Finished finitePrefix Result has 3935 conditions, 2023 events. 1249/2023 cut-off events. For 37/37 co-relation queries the response was YES. Maximal size of possible extension queue 141. Compared 11957 event pairs, 476 based on Foata normal form. 48/2007 useless extension candidates. Maximal degree in co-relation 3922. Up to 1434 conditions per place. [2024-06-28 00:28:30,720 INFO L140 encePairwiseOnDemand]: 43/49 looper letters, 38 selfloop transitions, 2 changer transitions 0/53 dead transitions. [2024-06-28 00:28:30,721 INFO L145 encePairwiseOnDemand]: Finished differencePairwiseOnDemand. Result has 53 places, 53 transitions, 204 flow [2024-06-28 00:28:30,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-06-28 00:28:30,724 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2024-06-28 00:28:30,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 101 transitions. [2024-06-28 00:28:30,731 INFO L516 CegarLoopForPetriNet]: DFA transition density 0.6870748299319728 [2024-06-28 00:28:30,733 INFO L175 Difference]: Start difference. First operand has 52 places, 39 transitions, 90 flow. Second operand 3 states and 101 transitions. [2024-06-28 00:28:30,734 INFO L82 GeneralOperation]: Start removeRedundantFlow. Operand has 53 places, 53 transitions, 204 flow [2024-06-28 00:28:30,736 INFO L88 GeneralOperation]: Finished removeRedundantFlow, result has has 49 places, 53 transitions, 198 flow, removed 0 selfloop flow, removed 4 redundant places. [2024-06-28 00:28:30,738 INFO L231 Difference]: Finished difference. Result has 50 places, 38 transitions, 96 flow [2024-06-28 00:28:30,740 INFO L264 CegarLoopForPetriNet]: {PETRI_ALPHABET=49, PETRI_DIFFERENCE_MINUEND_FLOW=84, PETRI_DIFFERENCE_MINUEND_PLACES=47, PETRI_DIFFERENCE_MINUEND_TRANSITIONS=38, PETRI_DIFFERENCE_SUBTRAHEND_LETTERS_WITH_MORE_CHANGERS_THAN_LOOPERS=2, PETRI_DIFFERENCE_SUBTRAHEND_LOOPER_ONLY_LETTERS=36, PETRI_DIFFERENCE_SUBTRAHEND_STATES=3, PETRI_FLOW=96, PETRI_PLACES=50, PETRI_TRANSITIONS=38} [2024-06-28 00:28:30,743 INFO L281 CegarLoopForPetriNet]: 52 programPoint places, -2 predicate places. [2024-06-28 00:28:30,743 INFO L495 AbstractCegarLoop]: Abstraction has has 50 places, 38 transitions, 96 flow [2024-06-28 00:28:30,744 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:30,744 INFO L200 CegarLoopForPetriNet]: Found error trace [2024-06-28 00:28:30,744 INFO L208 CegarLoopForPetriNet]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-06-28 00:28:30,744 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-06-28 00:28:30,744 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT (and 5 more)] === [2024-06-28 00:28:30,745 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-06-28 00:28:30,745 INFO L85 PathProgramCache]: Analyzing trace with hash -148297009, now seen corresponding path program 1 times [2024-06-28 00:28:30,745 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-06-28 00:28:30,745 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [903555922] [2024-06-28 00:28:30,746 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-06-28 00:28:30,746 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-06-28 00:28:30,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-06-28 00:28:30,826 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-06-28 00:28:30,826 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-06-28 00:28:30,827 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [903555922] [2024-06-28 00:28:30,827 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [903555922] provided 1 perfect and 0 imperfect interpolant sequences [2024-06-28 00:28:30,827 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-06-28 00:28:30,827 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-06-28 00:28:30,827 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1673139782] [2024-06-28 00:28:30,828 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-06-28 00:28:30,829 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-06-28 00:28:30,829 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-06-28 00:28:30,829 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-06-28 00:28:30,830 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2024-06-28 00:28:30,851 INFO L471 CegarLoopForPetriNet]: Number of universal loopers: 17 out of 49 [2024-06-28 00:28:30,852 INFO L103 encePairwiseOnDemand]: Start differencePairwiseOnDemand. First operand has 50 places, 38 transitions, 96 flow. Second operand has 4 states, 4 states have (on average 19.0) internal successors, (76), 4 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:30,853 INFO L112 encePairwiseOnDemand]: Universal subtrahend loopers provided by user. [2024-06-28 00:28:30,853 INFO L113 encePairwiseOnDemand]: Number of universal subtrahend loopers: 17 of 49 [2024-06-28 00:28:30,853 INFO L73 FinitePrefix]: Start finitePrefix. Operand will be constructed on-demand [2024-06-28 00:28:31,308 INFO L124 PetriNetUnfolderBase]: 2116/3299 cut-off events. [2024-06-28 00:28:31,309 INFO L125 PetriNetUnfolderBase]: For 416/416 co-relation queries the response was YES. [2024-06-28 00:28:31,315 INFO L83 FinitePrefix]: Finished finitePrefix Result has 7115 conditions, 3299 events. 2116/3299 cut-off events. For 416/416 co-relation queries the response was YES. Maximal size of possible extension queue 200. Compared 19505 event pairs, 602 based on Foata normal form. 24/3296 useless extension candidates. Maximal degree in co-relation 7103. Up to 2805 conditions per place. [2024-06-28 00:28:31,332 INFO L140 encePairwiseOnDemand]: 42/49 looper letters, 52 selfloop transitions, 6 changer transitions 0/69 dead transitions. [2024-06-28 00:28:31,332 INFO L145 encePairwiseOnDemand]: Finished differencePairwiseOnDemand. Result has 53 places, 69 transitions, 287 flow [2024-06-28 00:28:31,332 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-06-28 00:28:31,333 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2024-06-28 00:28:31,334 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 129 transitions. [2024-06-28 00:28:31,334 INFO L516 CegarLoopForPetriNet]: DFA transition density 0.6581632653061225 [2024-06-28 00:28:31,334 INFO L175 Difference]: Start difference. First operand has 50 places, 38 transitions, 96 flow. Second operand 4 states and 129 transitions. [2024-06-28 00:28:31,334 INFO L82 GeneralOperation]: Start removeRedundantFlow. Operand has 53 places, 69 transitions, 287 flow [2024-06-28 00:28:31,337 INFO L88 GeneralOperation]: Finished removeRedundantFlow, result has has 51 places, 69 transitions, 281 flow, removed 0 selfloop flow, removed 2 redundant places. [2024-06-28 00:28:31,338 INFO L231 Difference]: Finished difference. Result has 53 places, 43 transitions, 134 flow [2024-06-28 00:28:31,338 INFO L264 CegarLoopForPetriNet]: {PETRI_ALPHABET=49, PETRI_DIFFERENCE_MINUEND_FLOW=92, PETRI_DIFFERENCE_MINUEND_PLACES=48, PETRI_DIFFERENCE_MINUEND_TRANSITIONS=38, PETRI_DIFFERENCE_SUBTRAHEND_LETTERS_WITH_MORE_CHANGERS_THAN_LOOPERS=3, PETRI_DIFFERENCE_SUBTRAHEND_LOOPER_ONLY_LETTERS=34, PETRI_DIFFERENCE_SUBTRAHEND_STATES=4, PETRI_FLOW=134, PETRI_PLACES=53, PETRI_TRANSITIONS=43} [2024-06-28 00:28:31,339 INFO L281 CegarLoopForPetriNet]: 52 programPoint places, 1 predicate places. [2024-06-28 00:28:31,339 INFO L495 AbstractCegarLoop]: Abstraction has has 53 places, 43 transitions, 134 flow [2024-06-28 00:28:31,339 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 19.0) internal successors, (76), 4 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:31,340 INFO L200 CegarLoopForPetriNet]: Found error trace [2024-06-28 00:28:31,340 INFO L208 CegarLoopForPetriNet]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-06-28 00:28:31,340 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-06-28 00:28:31,340 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT (and 5 more)] === [2024-06-28 00:28:31,341 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-06-28 00:28:31,341 INFO L85 PathProgramCache]: Analyzing trace with hash -1701997406, now seen corresponding path program 1 times [2024-06-28 00:28:31,341 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-06-28 00:28:31,341 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [876906393] [2024-06-28 00:28:31,341 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-06-28 00:28:31,342 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-06-28 00:28:31,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-06-28 00:28:31,493 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-06-28 00:28:31,493 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-06-28 00:28:31,493 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [876906393] [2024-06-28 00:28:31,494 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [876906393] provided 1 perfect and 0 imperfect interpolant sequences [2024-06-28 00:28:31,494 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-06-28 00:28:31,494 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-06-28 00:28:31,494 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [56316770] [2024-06-28 00:28:31,494 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-06-28 00:28:31,495 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-06-28 00:28:31,495 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-06-28 00:28:31,495 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-06-28 00:28:31,496 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2024-06-28 00:28:31,519 INFO L471 CegarLoopForPetriNet]: Number of universal loopers: 17 out of 49 [2024-06-28 00:28:31,520 INFO L103 encePairwiseOnDemand]: Start differencePairwiseOnDemand. First operand has 53 places, 43 transitions, 134 flow. Second operand has 5 states, 5 states have (on average 19.0) internal successors, (95), 5 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:31,520 INFO L112 encePairwiseOnDemand]: Universal subtrahend loopers provided by user. [2024-06-28 00:28:31,520 INFO L113 encePairwiseOnDemand]: Number of universal subtrahend loopers: 17 of 49 [2024-06-28 00:28:31,520 INFO L73 FinitePrefix]: Start finitePrefix. Operand will be constructed on-demand [2024-06-28 00:28:32,298 INFO L124 PetriNetUnfolderBase]: 2992/4997 cut-off events. [2024-06-28 00:28:32,316 INFO L125 PetriNetUnfolderBase]: For 1561/1563 co-relation queries the response was YES. [2024-06-28 00:28:32,328 INFO L83 FinitePrefix]: Finished finitePrefix Result has 11003 conditions, 4997 events. 2992/4997 cut-off events. For 1561/1563 co-relation queries the response was YES. Maximal size of possible extension queue 317. Compared 34414 event pairs, 488 based on Foata normal form. 184/5154 useless extension candidates. Maximal degree in co-relation 10989. Up to 2145 conditions per place. [2024-06-28 00:28:32,381 INFO L140 encePairwiseOnDemand]: 42/49 looper letters, 58 selfloop transitions, 7 changer transitions 2/78 dead transitions. [2024-06-28 00:28:32,382 INFO L145 encePairwiseOnDemand]: Finished differencePairwiseOnDemand. Result has 56 places, 78 transitions, 354 flow [2024-06-28 00:28:32,383 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-06-28 00:28:32,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2024-06-28 00:28:32,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 133 transitions. [2024-06-28 00:28:32,393 INFO L516 CegarLoopForPetriNet]: DFA transition density 0.6785714285714286 [2024-06-28 00:28:32,393 INFO L175 Difference]: Start difference. First operand has 53 places, 43 transitions, 134 flow. Second operand 4 states and 133 transitions. [2024-06-28 00:28:32,394 INFO L82 GeneralOperation]: Start removeRedundantFlow. Operand has 56 places, 78 transitions, 354 flow [2024-06-28 00:28:32,396 INFO L88 GeneralOperation]: Finished removeRedundantFlow, result has has 56 places, 78 transitions, 354 flow, removed 0 selfloop flow, removed 0 redundant places. [2024-06-28 00:28:32,397 INFO L231 Difference]: Finished difference. Result has 57 places, 45 transitions, 172 flow [2024-06-28 00:28:32,397 INFO L264 CegarLoopForPetriNet]: {PETRI_ALPHABET=49, PETRI_DIFFERENCE_MINUEND_FLOW=134, PETRI_DIFFERENCE_MINUEND_PLACES=53, PETRI_DIFFERENCE_MINUEND_TRANSITIONS=43, PETRI_DIFFERENCE_SUBTRAHEND_LETTERS_WITH_MORE_CHANGERS_THAN_LOOPERS=5, PETRI_DIFFERENCE_SUBTRAHEND_LOOPER_ONLY_LETTERS=36, PETRI_DIFFERENCE_SUBTRAHEND_STATES=4, PETRI_FLOW=172, PETRI_PLACES=57, PETRI_TRANSITIONS=45} [2024-06-28 00:28:32,398 INFO L281 CegarLoopForPetriNet]: 52 programPoint places, 5 predicate places. [2024-06-28 00:28:32,398 INFO L495 AbstractCegarLoop]: Abstraction has has 57 places, 45 transitions, 172 flow [2024-06-28 00:28:32,398 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 19.0) internal successors, (95), 5 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:32,398 INFO L200 CegarLoopForPetriNet]: Found error trace [2024-06-28 00:28:32,398 INFO L208 CegarLoopForPetriNet]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-06-28 00:28:32,398 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-06-28 00:28:32,398 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT (and 5 more)] === [2024-06-28 00:28:32,399 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-06-28 00:28:32,399 INFO L85 PathProgramCache]: Analyzing trace with hash -1701992756, now seen corresponding path program 2 times [2024-06-28 00:28:32,399 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-06-28 00:28:32,399 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [908065761] [2024-06-28 00:28:32,399 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-06-28 00:28:32,399 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-06-28 00:28:32,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-06-28 00:28:32,515 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-06-28 00:28:32,515 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-06-28 00:28:32,516 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [908065761] [2024-06-28 00:28:32,516 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [908065761] provided 1 perfect and 0 imperfect interpolant sequences [2024-06-28 00:28:32,516 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-06-28 00:28:32,516 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-06-28 00:28:32,517 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [290804088] [2024-06-28 00:28:32,517 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-06-28 00:28:32,517 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-06-28 00:28:32,518 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-06-28 00:28:32,518 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-06-28 00:28:32,518 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2024-06-28 00:28:32,536 INFO L471 CegarLoopForPetriNet]: Number of universal loopers: 17 out of 49 [2024-06-28 00:28:32,536 INFO L103 encePairwiseOnDemand]: Start differencePairwiseOnDemand. First operand has 57 places, 45 transitions, 172 flow. Second operand has 5 states, 5 states have (on average 19.0) internal successors, (95), 5 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:32,537 INFO L112 encePairwiseOnDemand]: Universal subtrahend loopers provided by user. [2024-06-28 00:28:32,537 INFO L113 encePairwiseOnDemand]: Number of universal subtrahend loopers: 17 of 49 [2024-06-28 00:28:32,537 INFO L73 FinitePrefix]: Start finitePrefix. Operand will be constructed on-demand [2024-06-28 00:28:33,073 INFO L124 PetriNetUnfolderBase]: 2936/4717 cut-off events. [2024-06-28 00:28:33,074 INFO L125 PetriNetUnfolderBase]: For 3214/3216 co-relation queries the response was YES. [2024-06-28 00:28:33,087 INFO L83 FinitePrefix]: Finished finitePrefix Result has 11616 conditions, 4717 events. 2936/4717 cut-off events. For 3214/3216 co-relation queries the response was YES. Maximal size of possible extension queue 304. Compared 31388 event pairs, 444 based on Foata normal form. 24/4694 useless extension candidates. Maximal degree in co-relation 11599. Up to 3641 conditions per place. [2024-06-28 00:28:33,108 INFO L140 encePairwiseOnDemand]: 42/49 looper letters, 60 selfloop transitions, 8 changer transitions 1/80 dead transitions. [2024-06-28 00:28:33,109 INFO L145 encePairwiseOnDemand]: Finished differencePairwiseOnDemand. Result has 60 places, 80 transitions, 394 flow [2024-06-28 00:28:33,109 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-06-28 00:28:33,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2024-06-28 00:28:33,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 153 transitions. [2024-06-28 00:28:33,110 INFO L516 CegarLoopForPetriNet]: DFA transition density 0.6244897959183674 [2024-06-28 00:28:33,110 INFO L175 Difference]: Start difference. First operand has 57 places, 45 transitions, 172 flow. Second operand 5 states and 153 transitions. [2024-06-28 00:28:33,111 INFO L82 GeneralOperation]: Start removeRedundantFlow. Operand has 60 places, 80 transitions, 394 flow [2024-06-28 00:28:33,116 INFO L88 GeneralOperation]: Finished removeRedundantFlow, result has has 57 places, 80 transitions, 378 flow, removed 2 selfloop flow, removed 3 redundant places. [2024-06-28 00:28:33,117 INFO L231 Difference]: Finished difference. Result has 59 places, 45 transitions, 184 flow [2024-06-28 00:28:33,118 INFO L264 CegarLoopForPetriNet]: {PETRI_ALPHABET=49, PETRI_DIFFERENCE_MINUEND_FLOW=149, PETRI_DIFFERENCE_MINUEND_PLACES=53, PETRI_DIFFERENCE_MINUEND_TRANSITIONS=44, PETRI_DIFFERENCE_SUBTRAHEND_LETTERS_WITH_MORE_CHANGERS_THAN_LOOPERS=7, PETRI_DIFFERENCE_SUBTRAHEND_LOOPER_ONLY_LETTERS=36, PETRI_DIFFERENCE_SUBTRAHEND_STATES=5, PETRI_FLOW=184, PETRI_PLACES=59, PETRI_TRANSITIONS=45} [2024-06-28 00:28:33,118 INFO L281 CegarLoopForPetriNet]: 52 programPoint places, 7 predicate places. [2024-06-28 00:28:33,119 INFO L495 AbstractCegarLoop]: Abstraction has has 59 places, 45 transitions, 184 flow [2024-06-28 00:28:33,119 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 19.0) internal successors, (95), 5 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:33,119 INFO L200 CegarLoopForPetriNet]: Found error trace [2024-06-28 00:28:33,119 INFO L208 CegarLoopForPetriNet]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-06-28 00:28:33,119 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-06-28 00:28:33,120 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT (and 5 more)] === [2024-06-28 00:28:33,120 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-06-28 00:28:33,120 INFO L85 PathProgramCache]: Analyzing trace with hash -1136179815, now seen corresponding path program 1 times [2024-06-28 00:28:33,120 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-06-28 00:28:33,120 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [397900007] [2024-06-28 00:28:33,121 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-06-28 00:28:33,121 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-06-28 00:28:33,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-06-28 00:28:33,209 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-06-28 00:28:33,209 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-06-28 00:28:33,209 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [397900007] [2024-06-28 00:28:33,210 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [397900007] provided 1 perfect and 0 imperfect interpolant sequences [2024-06-28 00:28:33,210 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-06-28 00:28:33,210 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-06-28 00:28:33,210 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1787388613] [2024-06-28 00:28:33,210 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-06-28 00:28:33,211 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-06-28 00:28:33,211 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-06-28 00:28:33,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-06-28 00:28:33,212 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2024-06-28 00:28:33,233 INFO L471 CegarLoopForPetriNet]: Number of universal loopers: 17 out of 49 [2024-06-28 00:28:33,233 INFO L103 encePairwiseOnDemand]: Start differencePairwiseOnDemand. First operand has 59 places, 45 transitions, 184 flow. Second operand has 5 states, 5 states have (on average 19.4) internal successors, (97), 5 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:33,233 INFO L112 encePairwiseOnDemand]: Universal subtrahend loopers provided by user. [2024-06-28 00:28:33,233 INFO L113 encePairwiseOnDemand]: Number of universal subtrahend loopers: 17 of 49 [2024-06-28 00:28:33,234 INFO L73 FinitePrefix]: Start finitePrefix. Operand will be constructed on-demand [2024-06-28 00:28:33,755 INFO L124 PetriNetUnfolderBase]: 2686/4655 cut-off events. [2024-06-28 00:28:33,756 INFO L125 PetriNetUnfolderBase]: For 3209/3212 co-relation queries the response was YES. [2024-06-28 00:28:33,770 INFO L83 FinitePrefix]: Finished finitePrefix Result has 11121 conditions, 4655 events. 2686/4655 cut-off events. For 3209/3212 co-relation queries the response was YES. Maximal size of possible extension queue 285. Compared 32350 event pairs, 602 based on Foata normal form. 83/4673 useless extension candidates. Maximal degree in co-relation 11103. Up to 2279 conditions per place. [2024-06-28 00:28:33,788 INFO L140 encePairwiseOnDemand]: 43/49 looper letters, 69 selfloop transitions, 8 changer transitions 2/90 dead transitions. [2024-06-28 00:28:33,788 INFO L145 encePairwiseOnDemand]: Finished differencePairwiseOnDemand. Result has 63 places, 90 transitions, 455 flow [2024-06-28 00:28:33,789 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-06-28 00:28:33,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2024-06-28 00:28:33,790 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 161 transitions. [2024-06-28 00:28:33,790 INFO L516 CegarLoopForPetriNet]: DFA transition density 0.6571428571428571 [2024-06-28 00:28:33,790 INFO L175 Difference]: Start difference. First operand has 59 places, 45 transitions, 184 flow. Second operand 5 states and 161 transitions. [2024-06-28 00:28:33,790 INFO L82 GeneralOperation]: Start removeRedundantFlow. Operand has 63 places, 90 transitions, 455 flow [2024-06-28 00:28:33,794 INFO L88 GeneralOperation]: Finished removeRedundantFlow, result has has 62 places, 90 transitions, 442 flow, removed 4 selfloop flow, removed 1 redundant places. [2024-06-28 00:28:33,796 INFO L231 Difference]: Finished difference. Result has 63 places, 45 transitions, 195 flow [2024-06-28 00:28:33,796 INFO L264 CegarLoopForPetriNet]: {PETRI_ALPHABET=49, PETRI_DIFFERENCE_MINUEND_FLOW=173, PETRI_DIFFERENCE_MINUEND_PLACES=58, PETRI_DIFFERENCE_MINUEND_TRANSITIONS=45, PETRI_DIFFERENCE_SUBTRAHEND_LETTERS_WITH_MORE_CHANGERS_THAN_LOOPERS=8, PETRI_DIFFERENCE_SUBTRAHEND_LOOPER_ONLY_LETTERS=37, PETRI_DIFFERENCE_SUBTRAHEND_STATES=5, PETRI_FLOW=195, PETRI_PLACES=63, PETRI_TRANSITIONS=45} [2024-06-28 00:28:33,797 INFO L281 CegarLoopForPetriNet]: 52 programPoint places, 11 predicate places. [2024-06-28 00:28:33,797 INFO L495 AbstractCegarLoop]: Abstraction has has 63 places, 45 transitions, 195 flow [2024-06-28 00:28:33,797 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 19.4) internal successors, (97), 5 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:33,797 INFO L200 CegarLoopForPetriNet]: Found error trace [2024-06-28 00:28:33,797 INFO L208 CegarLoopForPetriNet]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-06-28 00:28:33,797 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-06-28 00:28:33,798 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT (and 5 more)] === [2024-06-28 00:28:33,798 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-06-28 00:28:33,798 INFO L85 PathProgramCache]: Analyzing trace with hash -1061507694, now seen corresponding path program 1 times [2024-06-28 00:28:33,798 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-06-28 00:28:33,799 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [417790856] [2024-06-28 00:28:33,799 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-06-28 00:28:33,799 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-06-28 00:28:33,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-06-28 00:28:33,906 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-06-28 00:28:33,907 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-06-28 00:28:33,907 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [417790856] [2024-06-28 00:28:33,908 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [417790856] provided 1 perfect and 0 imperfect interpolant sequences [2024-06-28 00:28:33,908 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-06-28 00:28:33,908 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-06-28 00:28:33,908 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2054164968] [2024-06-28 00:28:33,908 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-06-28 00:28:33,909 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-06-28 00:28:33,909 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-06-28 00:28:33,909 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-06-28 00:28:33,910 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2024-06-28 00:28:33,925 INFO L471 CegarLoopForPetriNet]: Number of universal loopers: 17 out of 49 [2024-06-28 00:28:33,926 INFO L103 encePairwiseOnDemand]: Start differencePairwiseOnDemand. First operand has 63 places, 45 transitions, 195 flow. Second operand has 6 states, 6 states have (on average 19.333333333333332) internal successors, (116), 6 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:33,926 INFO L112 encePairwiseOnDemand]: Universal subtrahend loopers provided by user. [2024-06-28 00:28:33,926 INFO L113 encePairwiseOnDemand]: Number of universal subtrahend loopers: 17 of 49 [2024-06-28 00:28:33,926 INFO L73 FinitePrefix]: Start finitePrefix. Operand will be constructed on-demand [2024-06-28 00:28:34,481 INFO L124 PetriNetUnfolderBase]: 2428/4075 cut-off events. [2024-06-28 00:28:34,482 INFO L125 PetriNetUnfolderBase]: For 3981/3983 co-relation queries the response was YES. [2024-06-28 00:28:34,492 INFO L83 FinitePrefix]: Finished finitePrefix Result has 9960 conditions, 4075 events. 2428/4075 cut-off events. For 3981/3983 co-relation queries the response was YES. Maximal size of possible extension queue 257. Compared 27239 event pairs, 396 based on Foata normal form. 80/4146 useless extension candidates. Maximal degree in co-relation 9940. Up to 1153 conditions per place. [2024-06-28 00:28:34,505 INFO L140 encePairwiseOnDemand]: 43/49 looper letters, 64 selfloop transitions, 7 changer transitions 6/88 dead transitions. [2024-06-28 00:28:34,505 INFO L145 encePairwiseOnDemand]: Finished differencePairwiseOnDemand. Result has 67 places, 88 transitions, 445 flow [2024-06-28 00:28:34,506 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-06-28 00:28:34,506 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2024-06-28 00:28:34,507 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 160 transitions. [2024-06-28 00:28:34,507 INFO L516 CegarLoopForPetriNet]: DFA transition density 0.6530612244897959 [2024-06-28 00:28:34,507 INFO L175 Difference]: Start difference. First operand has 63 places, 45 transitions, 195 flow. Second operand 5 states and 160 transitions. [2024-06-28 00:28:34,507 INFO L82 GeneralOperation]: Start removeRedundantFlow. Operand has 67 places, 88 transitions, 445 flow [2024-06-28 00:28:34,514 INFO L88 GeneralOperation]: Finished removeRedundantFlow, result has has 65 places, 88 transitions, 429 flow, removed 2 selfloop flow, removed 2 redundant places. [2024-06-28 00:28:34,516 INFO L231 Difference]: Finished difference. Result has 66 places, 42 transitions, 178 flow [2024-06-28 00:28:34,516 INFO L264 CegarLoopForPetriNet]: {PETRI_ALPHABET=49, PETRI_DIFFERENCE_MINUEND_FLOW=179, PETRI_DIFFERENCE_MINUEND_PLACES=61, PETRI_DIFFERENCE_MINUEND_TRANSITIONS=45, PETRI_DIFFERENCE_SUBTRAHEND_LETTERS_WITH_MORE_CHANGERS_THAN_LOOPERS=7, PETRI_DIFFERENCE_SUBTRAHEND_LOOPER_ONLY_LETTERS=38, PETRI_DIFFERENCE_SUBTRAHEND_STATES=5, PETRI_FLOW=178, PETRI_PLACES=66, PETRI_TRANSITIONS=42} [2024-06-28 00:28:34,519 INFO L281 CegarLoopForPetriNet]: 52 programPoint places, 14 predicate places. [2024-06-28 00:28:34,519 INFO L495 AbstractCegarLoop]: Abstraction has has 66 places, 42 transitions, 178 flow [2024-06-28 00:28:34,519 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 19.333333333333332) internal successors, (116), 6 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:34,520 INFO L200 CegarLoopForPetriNet]: Found error trace [2024-06-28 00:28:34,520 INFO L208 CegarLoopForPetriNet]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-06-28 00:28:34,520 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-06-28 00:28:34,520 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT (and 5 more)] === [2024-06-28 00:28:34,521 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-06-28 00:28:34,521 INFO L85 PathProgramCache]: Analyzing trace with hash 51452670, now seen corresponding path program 2 times [2024-06-28 00:28:34,521 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-06-28 00:28:34,523 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1513234451] [2024-06-28 00:28:34,523 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-06-28 00:28:34,523 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-06-28 00:28:34,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-06-28 00:28:34,629 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-06-28 00:28:34,629 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-06-28 00:28:34,632 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1513234451] [2024-06-28 00:28:34,633 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1513234451] provided 1 perfect and 0 imperfect interpolant sequences [2024-06-28 00:28:34,633 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-06-28 00:28:34,633 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-06-28 00:28:34,633 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2127160468] [2024-06-28 00:28:34,634 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-06-28 00:28:34,634 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-06-28 00:28:34,635 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-06-28 00:28:34,635 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-06-28 00:28:34,635 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2024-06-28 00:28:34,654 INFO L471 CegarLoopForPetriNet]: Number of universal loopers: 17 out of 49 [2024-06-28 00:28:34,654 INFO L103 encePairwiseOnDemand]: Start differencePairwiseOnDemand. First operand has 66 places, 42 transitions, 178 flow. Second operand has 5 states, 5 states have (on average 19.8) internal successors, (99), 5 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:34,654 INFO L112 encePairwiseOnDemand]: Universal subtrahend loopers provided by user. [2024-06-28 00:28:34,654 INFO L113 encePairwiseOnDemand]: Number of universal subtrahend loopers: 17 of 49 [2024-06-28 00:28:34,655 INFO L73 FinitePrefix]: Start finitePrefix. Operand will be constructed on-demand [2024-06-28 00:28:35,127 INFO L124 PetriNetUnfolderBase]: 2254/3867 cut-off events. [2024-06-28 00:28:35,128 INFO L125 PetriNetUnfolderBase]: For 4578/4578 co-relation queries the response was YES. [2024-06-28 00:28:35,140 INFO L83 FinitePrefix]: Finished finitePrefix Result has 9219 conditions, 3867 events. 2254/3867 cut-off events. For 4578/4578 co-relation queries the response was YES. Maximal size of possible extension queue 245. Compared 26082 event pairs, 298 based on Foata normal form. 80/3900 useless extension candidates. Maximal degree in co-relation 9197. Up to 1312 conditions per place. [2024-06-28 00:28:35,157 INFO L140 encePairwiseOnDemand]: 44/49 looper letters, 50 selfloop transitions, 4 changer transitions 17/82 dead transitions. [2024-06-28 00:28:35,157 INFO L145 encePairwiseOnDemand]: Finished differencePairwiseOnDemand. Result has 70 places, 82 transitions, 410 flow [2024-06-28 00:28:35,157 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-06-28 00:28:35,158 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2024-06-28 00:28:35,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 155 transitions. [2024-06-28 00:28:35,158 INFO L516 CegarLoopForPetriNet]: DFA transition density 0.6326530612244898 [2024-06-28 00:28:35,158 INFO L175 Difference]: Start difference. First operand has 66 places, 42 transitions, 178 flow. Second operand 5 states and 155 transitions. [2024-06-28 00:28:35,159 INFO L82 GeneralOperation]: Start removeRedundantFlow. Operand has 70 places, 82 transitions, 410 flow [2024-06-28 00:28:35,165 INFO L88 GeneralOperation]: Finished removeRedundantFlow, result has has 61 places, 82 transitions, 378 flow, removed 2 selfloop flow, removed 9 redundant places. [2024-06-28 00:28:35,167 INFO L231 Difference]: Finished difference. Result has 62 places, 40 transitions, 146 flow [2024-06-28 00:28:35,168 INFO L264 CegarLoopForPetriNet]: {PETRI_ALPHABET=49, PETRI_DIFFERENCE_MINUEND_FLOW=146, PETRI_DIFFERENCE_MINUEND_PLACES=57, PETRI_DIFFERENCE_MINUEND_TRANSITIONS=42, PETRI_DIFFERENCE_SUBTRAHEND_LETTERS_WITH_MORE_CHANGERS_THAN_LOOPERS=4, PETRI_DIFFERENCE_SUBTRAHEND_LOOPER_ONLY_LETTERS=38, PETRI_DIFFERENCE_SUBTRAHEND_STATES=5, PETRI_FLOW=146, PETRI_PLACES=62, PETRI_TRANSITIONS=40} [2024-06-28 00:28:35,168 INFO L281 CegarLoopForPetriNet]: 52 programPoint places, 10 predicate places. [2024-06-28 00:28:35,168 INFO L495 AbstractCegarLoop]: Abstraction has has 62 places, 40 transitions, 146 flow [2024-06-28 00:28:35,169 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 19.8) internal successors, (99), 5 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:35,169 INFO L200 CegarLoopForPetriNet]: Found error trace [2024-06-28 00:28:35,169 INFO L208 CegarLoopForPetriNet]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-06-28 00:28:35,169 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-06-28 00:28:35,169 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT (and 5 more)] === [2024-06-28 00:28:35,170 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-06-28 00:28:35,170 INFO L85 PathProgramCache]: Analyzing trace with hash 512113864, now seen corresponding path program 3 times [2024-06-28 00:28:35,170 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-06-28 00:28:35,170 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [615662209] [2024-06-28 00:28:35,170 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-06-28 00:28:35,171 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-06-28 00:28:35,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-06-28 00:28:35,265 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-06-28 00:28:35,265 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-06-28 00:28:35,266 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [615662209] [2024-06-28 00:28:35,266 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [615662209] provided 1 perfect and 0 imperfect interpolant sequences [2024-06-28 00:28:35,266 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-06-28 00:28:35,266 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-06-28 00:28:35,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1599081621] [2024-06-28 00:28:35,266 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-06-28 00:28:35,267 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-06-28 00:28:35,267 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-06-28 00:28:35,267 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-06-28 00:28:35,268 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2024-06-28 00:28:35,284 INFO L471 CegarLoopForPetriNet]: Number of universal loopers: 17 out of 49 [2024-06-28 00:28:35,285 INFO L103 encePairwiseOnDemand]: Start differencePairwiseOnDemand. First operand has 62 places, 40 transitions, 146 flow. Second operand has 5 states, 5 states have (on average 19.8) internal successors, (99), 5 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:35,286 INFO L112 encePairwiseOnDemand]: Universal subtrahend loopers provided by user. [2024-06-28 00:28:35,286 INFO L113 encePairwiseOnDemand]: Number of universal subtrahend loopers: 17 of 49 [2024-06-28 00:28:35,286 INFO L73 FinitePrefix]: Start finitePrefix. Operand will be constructed on-demand [2024-06-28 00:28:35,703 INFO L124 PetriNetUnfolderBase]: 2118/3751 cut-off events. [2024-06-28 00:28:35,703 INFO L125 PetriNetUnfolderBase]: For 3394/3394 co-relation queries the response was YES. [2024-06-28 00:28:35,721 INFO L83 FinitePrefix]: Finished finitePrefix Result has 8525 conditions, 3751 events. 2118/3751 cut-off events. For 3394/3394 co-relation queries the response was YES. Maximal size of possible extension queue 231. Compared 25787 event pairs, 338 based on Foata normal form. 80/3740 useless extension candidates. Maximal degree in co-relation 8507. Up to 1624 conditions per place. [2024-06-28 00:28:35,733 INFO L140 encePairwiseOnDemand]: 44/49 looper letters, 36 selfloop transitions, 1 changer transitions 30/78 dead transitions. [2024-06-28 00:28:35,733 INFO L145 encePairwiseOnDemand]: Finished differencePairwiseOnDemand. Result has 64 places, 78 transitions, 364 flow [2024-06-28 00:28:35,734 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-06-28 00:28:35,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2024-06-28 00:28:35,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 153 transitions. [2024-06-28 00:28:35,735 INFO L516 CegarLoopForPetriNet]: DFA transition density 0.6244897959183674 [2024-06-28 00:28:35,735 INFO L175 Difference]: Start difference. First operand has 62 places, 40 transitions, 146 flow. Second operand 5 states and 153 transitions. [2024-06-28 00:28:35,735 INFO L82 GeneralOperation]: Start removeRedundantFlow. Operand has 64 places, 78 transitions, 364 flow [2024-06-28 00:28:35,744 INFO L88 GeneralOperation]: Finished removeRedundantFlow, result has has 60 places, 78 transitions, 350 flow, removed 4 selfloop flow, removed 4 redundant places. [2024-06-28 00:28:35,745 INFO L231 Difference]: Finished difference. Result has 61 places, 37 transitions, 117 flow [2024-06-28 00:28:35,746 INFO L264 CegarLoopForPetriNet]: {PETRI_ALPHABET=49, PETRI_DIFFERENCE_MINUEND_FLOW=132, PETRI_DIFFERENCE_MINUEND_PLACES=56, PETRI_DIFFERENCE_MINUEND_TRANSITIONS=40, PETRI_DIFFERENCE_SUBTRAHEND_LETTERS_WITH_MORE_CHANGERS_THAN_LOOPERS=1, PETRI_DIFFERENCE_SUBTRAHEND_LOOPER_ONLY_LETTERS=39, PETRI_DIFFERENCE_SUBTRAHEND_STATES=5, PETRI_FLOW=117, PETRI_PLACES=61, PETRI_TRANSITIONS=37} [2024-06-28 00:28:35,748 INFO L281 CegarLoopForPetriNet]: 52 programPoint places, 9 predicate places. [2024-06-28 00:28:35,748 INFO L495 AbstractCegarLoop]: Abstraction has has 61 places, 37 transitions, 117 flow [2024-06-28 00:28:35,749 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 19.8) internal successors, (99), 5 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:35,749 INFO L200 CegarLoopForPetriNet]: Found error trace [2024-06-28 00:28:35,749 INFO L208 CegarLoopForPetriNet]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-06-28 00:28:35,749 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-06-28 00:28:35,749 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT (and 5 more)] === [2024-06-28 00:28:35,750 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-06-28 00:28:35,750 INFO L85 PathProgramCache]: Analyzing trace with hash 1403306824, now seen corresponding path program 4 times [2024-06-28 00:28:35,750 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-06-28 00:28:35,750 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [708768821] [2024-06-28 00:28:35,750 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-06-28 00:28:35,751 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-06-28 00:28:35,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-06-28 00:28:35,873 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-06-28 00:28:35,873 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-06-28 00:28:35,873 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [708768821] [2024-06-28 00:28:35,873 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [708768821] provided 1 perfect and 0 imperfect interpolant sequences [2024-06-28 00:28:35,874 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-06-28 00:28:35,874 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-06-28 00:28:35,874 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1369335437] [2024-06-28 00:28:35,874 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-06-28 00:28:35,874 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-06-28 00:28:35,875 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-06-28 00:28:35,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-06-28 00:28:35,876 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2024-06-28 00:28:35,891 INFO L471 CegarLoopForPetriNet]: Number of universal loopers: 17 out of 49 [2024-06-28 00:28:35,891 INFO L103 encePairwiseOnDemand]: Start differencePairwiseOnDemand. First operand has 61 places, 37 transitions, 117 flow. Second operand has 6 states, 6 states have (on average 19.333333333333332) internal successors, (116), 6 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:35,891 INFO L112 encePairwiseOnDemand]: Universal subtrahend loopers provided by user. [2024-06-28 00:28:35,891 INFO L113 encePairwiseOnDemand]: Number of universal subtrahend loopers: 17 of 49 [2024-06-28 00:28:35,892 INFO L73 FinitePrefix]: Start finitePrefix. Operand will be constructed on-demand [2024-06-28 00:28:36,129 INFO L124 PetriNetUnfolderBase]: 1026/1895 cut-off events. [2024-06-28 00:28:36,130 INFO L125 PetriNetUnfolderBase]: For 1360/1360 co-relation queries the response was YES. [2024-06-28 00:28:36,133 INFO L83 FinitePrefix]: Finished finitePrefix Result has 4160 conditions, 1895 events. 1026/1895 cut-off events. For 1360/1360 co-relation queries the response was YES. Maximal size of possible extension queue 118. Compared 11512 event pairs, 170 based on Foata normal form. 80/1968 useless extension candidates. Maximal degree in co-relation 4151. Up to 604 conditions per place. [2024-06-28 00:28:36,134 INFO L140 encePairwiseOnDemand]: 44/49 looper letters, 0 selfloop transitions, 0 changer transitions 57/57 dead transitions. [2024-06-28 00:28:36,134 INFO L145 encePairwiseOnDemand]: Finished differencePairwiseOnDemand. Result has 59 places, 57 transitions, 237 flow [2024-06-28 00:28:36,134 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-06-28 00:28:36,134 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2024-06-28 00:28:36,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 133 transitions. [2024-06-28 00:28:36,135 INFO L516 CegarLoopForPetriNet]: DFA transition density 0.5428571428571428 [2024-06-28 00:28:36,135 INFO L175 Difference]: Start difference. First operand has 61 places, 37 transitions, 117 flow. Second operand 5 states and 133 transitions. [2024-06-28 00:28:36,135 INFO L82 GeneralOperation]: Start removeRedundantFlow. Operand has 59 places, 57 transitions, 237 flow [2024-06-28 00:28:36,136 INFO L88 GeneralOperation]: Finished removeRedundantFlow, result has has 54 places, 57 transitions, 226 flow, removed 1 selfloop flow, removed 5 redundant places. [2024-06-28 00:28:36,136 INFO L231 Difference]: Finished difference. Result has 54 places, 0 transitions, 0 flow [2024-06-28 00:28:36,137 INFO L264 CegarLoopForPetriNet]: {PETRI_ALPHABET=49, PETRI_DIFFERENCE_MINUEND_FLOW=86, PETRI_DIFFERENCE_MINUEND_PLACES=50, PETRI_DIFFERENCE_MINUEND_TRANSITIONS=35, PETRI_DIFFERENCE_SUBTRAHEND_LETTERS_WITH_MORE_CHANGERS_THAN_LOOPERS=0, PETRI_DIFFERENCE_SUBTRAHEND_LOOPER_ONLY_LETTERS=35, PETRI_DIFFERENCE_SUBTRAHEND_STATES=5, PETRI_FLOW=0, PETRI_PLACES=54, PETRI_TRANSITIONS=0} [2024-06-28 00:28:36,138 INFO L281 CegarLoopForPetriNet]: 52 programPoint places, 2 predicate places. [2024-06-28 00:28:36,138 INFO L495 AbstractCegarLoop]: Abstraction has has 54 places, 0 transitions, 0 flow [2024-06-28 00:28:36,138 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 19.333333333333332) internal successors, (116), 6 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-06-28 00:28:36,140 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONWITNESS_INVARIANT (7 of 8 remaining) [2024-06-28 00:28:36,142 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT (6 of 8 remaining) [2024-06-28 00:28:36,142 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONWITNESS_INVARIANT (5 of 8 remaining) [2024-06-28 00:28:36,142 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr3ASSERT_VIOLATIONWITNESS_INVARIANT (4 of 8 remaining) [2024-06-28 00:28:36,142 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0INUSE_VIOLATIONSUFFICIENT_THREAD_INSTANCES (3 of 8 remaining) [2024-06-28 00:28:36,143 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1INUSE_VIOLATIONSUFFICIENT_THREAD_INSTANCES (2 of 8 remaining) [2024-06-28 00:28:36,143 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2INUSE_VIOLATIONSUFFICIENT_THREAD_INSTANCES (1 of 8 remaining) [2024-06-28 00:28:36,143 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr3INUSE_VIOLATIONSUFFICIENT_THREAD_INSTANCES (0 of 8 remaining) [2024-06-28 00:28:36,143 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2024-06-28 00:28:36,143 INFO L445 BasicCegarLoop]: Path program histogram: [4, 2, 1, 1, 1] [2024-06-28 00:28:36,146 INFO L229 ceAbstractionStarter]: Analysis of concurrent program completed with 1 thread instances [2024-06-28 00:28:36,146 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2024-06-28 00:28:36,150 INFO L507 ceAbstractionStarter]: Automizer considered 4 witness invariants [2024-06-28 00:28:36,150 INFO L508 ceAbstractionStarter]: WitnessConsidered=4 [2024-06-28 00:28:36,150 INFO L201 PluginConnector]: Adding new model witness.yml de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.06 12:28:36 BasicIcfg [2024-06-28 00:28:36,150 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-06-28 00:28:36,151 INFO L158 Benchmark]: Toolchain (without parser) took 8015.98ms. Allocated memory was 163.6MB in the beginning and 618.7MB in the end (delta: 455.1MB). Free memory was 105.0MB in the beginning and 532.8MB in the end (delta: -427.7MB). Peak memory consumption was 355.9MB. Max. memory is 16.1GB. [2024-06-28 00:28:36,151 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 163.6MB. Free memory is still 124.9MB. There was no memory consumed. Max. memory is 16.1GB. [2024-06-28 00:28:36,151 INFO L158 Benchmark]: Witness Parser took 0.25ms. Allocated memory is still 163.6MB. Free memory is still 107.6MB. There was no memory consumed. Max. memory is 16.1GB. [2024-06-28 00:28:36,151 INFO L158 Benchmark]: CACSL2BoogieTranslator took 543.53ms. Allocated memory is still 163.6MB. Free memory was 104.6MB in the beginning and 74.0MB in the end (delta: 30.6MB). Peak memory consumption was 31.5MB. Max. memory is 16.1GB. [2024-06-28 00:28:36,151 INFO L158 Benchmark]: Boogie Procedure Inliner took 50.36ms. Allocated memory is still 163.6MB. Free memory was 74.0MB in the beginning and 71.0MB in the end (delta: 3.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2024-06-28 00:28:36,151 INFO L158 Benchmark]: Boogie Preprocessor took 76.84ms. Allocated memory is still 163.6MB. Free memory was 71.0MB in the beginning and 67.3MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2024-06-28 00:28:36,152 INFO L158 Benchmark]: RCFGBuilder took 962.65ms. Allocated memory was 163.6MB in the beginning and 297.8MB in the end (delta: 134.2MB). Free memory was 67.3MB in the beginning and 255.2MB in the end (delta: -187.9MB). Peak memory consumption was 25.9MB. Max. memory is 16.1GB. [2024-06-28 00:28:36,153 INFO L158 Benchmark]: TraceAbstraction took 6374.12ms. Allocated memory was 297.8MB in the beginning and 618.7MB in the end (delta: 320.9MB). Free memory was 254.1MB in the beginning and 532.8MB in the end (delta: -278.7MB). Peak memory consumption was 369.8MB. Max. memory is 16.1GB. [2024-06-28 00:28:36,155 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 163.6MB. Free memory is still 124.9MB. There was no memory consumed. Max. memory is 16.1GB. * Witness Parser took 0.25ms. Allocated memory is still 163.6MB. Free memory is still 107.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 543.53ms. Allocated memory is still 163.6MB. Free memory was 104.6MB in the beginning and 74.0MB in the end (delta: 30.6MB). Peak memory consumption was 31.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 50.36ms. Allocated memory is still 163.6MB. Free memory was 74.0MB in the beginning and 71.0MB in the end (delta: 3.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 76.84ms. Allocated memory is still 163.6MB. Free memory was 71.0MB in the beginning and 67.3MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 962.65ms. Allocated memory was 163.6MB in the beginning and 297.8MB in the end (delta: 134.2MB). Free memory was 67.3MB in the beginning and 255.2MB in the end (delta: -187.9MB). Peak memory consumption was 25.9MB. Max. memory is 16.1GB. * TraceAbstraction took 6374.12ms. Allocated memory was 297.8MB in the beginning and 618.7MB in the end (delta: 320.9MB). Free memory was 254.1MB in the beginning and 532.8MB in the end (delta: -278.7MB). Peak memory consumption was 369.8MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 856]: invariant of correctness witness holds For all program executions holds that invariant of correctness witness holds at this location - PositiveResult [Line: 858]: invariant of correctness witness holds For all program executions holds that invariant of correctness witness holds at this location - PositiveResult [Line: 860]: invariant of correctness witness holds For all program executions holds that invariant of correctness witness holds at this location - PositiveResult [Line: 861]: invariant of correctness witness holds For all program executions holds that invariant of correctness witness holds at this location - StatisticsResult: Ultimate Automizer benchmark data with 1 thread instances CFG has 9 procedures, 80 locations, 8 error locations. Started 1 CEGAR loops. EmptinessCheckTime: 0.0s, RemoveRedundantFlowTime: 0.0s, RemoveRedundantFlowUnfoldingTime: 0.0s, BackfoldingTime: 0.0s, BackfoldingUnfoldingTime: 0.0s, FlowIncreaseByBackfolding: 0, BasicCegarLoop: OverallTime: 6.3s, OverallIterations: 9, TraceHistogramMax: 1, PathProgramHistogramMax: 4, EmptinessCheckTime: 0.0s, AutomataDifference: 5.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.1s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 587 SdHoareTripleChecker+Valid, 0.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 506 mSDsluCounter, 28 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 8 mSDsCounter, 40 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1143 IncrementalHoareTripleChecker+Invalid, 1183 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 40 mSolverCounterUnsat, 20 mSDtfsCounter, 1143 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 31 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=195occurred in iteration=5, InterpolantAutomatonStates: 41, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: No data available, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 128 NumberOfCodeBlocks, 128 NumberOfCodeBlocksAsserted, 9 NumberOfCheckSat, 119 ConstructedInterpolants, 0 QuantifiedInterpolants, 491 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 9 InterpolantComputations, 9 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 4 specifications checked. All of them hold RESULT: Ultimate proved your program to be correct! [2024-06-28 00:28:36,216 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE