./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6497de01 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e --- Real Ultimate output --- This is Ultimate 0.3.0-dev-6497de0 [2024-11-24 00:18:39,544 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-24 00:18:39,625 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-11-24 00:18:39,640 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-24 00:18:39,640 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-24 00:18:39,692 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-24 00:18:39,694 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-24 00:18:39,694 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-24 00:18:39,695 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-24 00:18:39,695 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-24 00:18:39,696 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-24 00:18:39,696 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-24 00:18:39,696 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-24 00:18:39,696 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-24 00:18:39,697 INFO L153 SettingsManager]: * Use SBE=true [2024-11-24 00:18:39,697 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-24 00:18:39,699 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-24 00:18:39,699 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-24 00:18:39,699 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-24 00:18:39,699 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-24 00:18:39,700 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-24 00:18:39,700 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-24 00:18:39,700 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-24 00:18:39,700 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-24 00:18:39,700 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-24 00:18:39,700 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-24 00:18:39,700 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-11-24 00:18:39,701 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-24 00:18:39,701 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-11-24 00:18:39,701 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-24 00:18:39,701 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-24 00:18:39,701 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-24 00:18:39,701 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 00:18:39,701 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-24 00:18:39,701 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-24 00:18:39,701 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-24 00:18:39,702 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-24 00:18:39,703 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 00:18:39,703 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-24 00:18:39,703 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-24 00:18:39,703 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-11-24 00:18:39,703 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-24 00:18:39,704 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-24 00:18:39,704 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-11-24 00:18:39,704 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-24 00:18:39,704 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-11-24 00:18:39,704 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-11-24 00:18:39,704 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-24 00:18:39,704 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e [2024-11-24 00:18:40,071 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-24 00:18:40,087 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-24 00:18:40,093 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-24 00:18:40,094 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-24 00:18:40,095 INFO L274 PluginConnector]: CDTParser initialized [2024-11-24 00:18:40,096 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2024-11-24 00:18:43,537 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/data/7672c934b/4f3783f1dc094b989f4e002ec4631409/FLAG2e11e984c [2024-11-24 00:18:44,041 INFO L384 CDTParser]: Found 1 translation units. [2024-11-24 00:18:44,042 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2024-11-24 00:18:44,061 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/data/7672c934b/4f3783f1dc094b989f4e002ec4631409/FLAG2e11e984c [2024-11-24 00:18:44,140 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/data/7672c934b/4f3783f1dc094b989f4e002ec4631409 [2024-11-24 00:18:44,143 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-24 00:18:44,145 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-24 00:18:44,147 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-24 00:18:44,147 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-24 00:18:44,152 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-24 00:18:44,153 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,154 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@66035ae2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44, skipping insertion in model container [2024-11-24 00:18:44,155 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,196 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-24 00:18:44,639 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2024-11-24 00:18:44,646 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-24 00:18:44,665 INFO L200 MainTranslator]: Completed pre-run [2024-11-24 00:18:44,676 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] [2024-11-24 00:18:44,677 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [124] [2024-11-24 00:18:44,677 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [354] [2024-11-24 00:18:44,678 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [455] [2024-11-24 00:18:44,678 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [495] [2024-11-24 00:18:44,678 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [530] [2024-11-24 00:18:44,678 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [634] [2024-11-24 00:18:44,678 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1000] [2024-11-24 00:18:44,776 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2024-11-24 00:18:44,777 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-24 00:18:44,813 INFO L204 MainTranslator]: Completed translation [2024-11-24 00:18:44,815 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44 WrapperNode [2024-11-24 00:18:44,815 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-24 00:18:44,817 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-24 00:18:44,817 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-24 00:18:44,817 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-24 00:18:44,831 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,852 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,882 INFO L138 Inliner]: procedures = 58, calls = 102, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 211 [2024-11-24 00:18:44,883 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-24 00:18:44,884 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-24 00:18:44,884 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-24 00:18:44,884 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-24 00:18:44,895 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,896 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,898 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,914 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-11-24 00:18:44,914 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,915 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,920 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,926 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,934 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,936 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,937 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,940 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-24 00:18:44,941 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-24 00:18:44,941 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-24 00:18:44,941 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-24 00:18:44,943 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44" (1/1) ... [2024-11-24 00:18:44,950 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-11-24 00:18:44,964 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:18:44,982 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-11-24 00:18:44,986 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-11-24 00:18:45,021 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-24 00:18:45,022 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-11-24 00:18:45,022 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-11-24 00:18:45,022 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2024-11-24 00:18:45,022 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2024-11-24 00:18:45,023 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-11-24 00:18:45,023 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-11-24 00:18:45,023 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-11-24 00:18:45,023 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-11-24 00:18:45,023 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2024-11-24 00:18:45,023 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2024-11-24 00:18:45,023 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-11-24 00:18:45,025 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-11-24 00:18:45,025 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2024-11-24 00:18:45,025 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2024-11-24 00:18:45,025 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-24 00:18:45,025 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-11-24 00:18:45,025 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-11-24 00:18:45,025 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-24 00:18:45,025 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-24 00:18:45,142 INFO L234 CfgBuilder]: Building ICFG [2024-11-24 00:18:45,145 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-24 00:18:45,487 INFO L? ?]: Removed 45 outVars from TransFormulas that were not future-live. [2024-11-24 00:18:45,487 INFO L283 CfgBuilder]: Performing block encoding [2024-11-24 00:18:45,510 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-24 00:18:45,511 INFO L312 CfgBuilder]: Removed 4 assume(true) statements. [2024-11-24 00:18:45,511 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.11 12:18:45 BoogieIcfgContainer [2024-11-24 00:18:45,511 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-24 00:18:45,514 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-24 00:18:45,514 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-24 00:18:45,520 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-24 00:18:45,520 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 24.11 12:18:44" (1/3) ... [2024-11-24 00:18:45,521 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@b565ece and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 24.11 12:18:45, skipping insertion in model container [2024-11-24 00:18:45,521 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.11 12:18:44" (2/3) ... [2024-11-24 00:18:45,522 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@b565ece and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 24.11 12:18:45, skipping insertion in model container [2024-11-24 00:18:45,522 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.11 12:18:45" (3/3) ... [2024-11-24 00:18:45,523 INFO L128 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product52.cil.c [2024-11-24 00:18:45,544 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-24 00:18:45,546 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec2_product52.cil.c that has 9 procedures, 94 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-11-24 00:18:45,615 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-24 00:18:45,635 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@35d8eb9, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-24 00:18:45,636 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-24 00:18:45,641 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 71 states have (on average 1.3943661971830985) internal successors, (99), 80 states have internal predecessors, (99), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2024-11-24 00:18:45,652 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2024-11-24 00:18:45,652 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:18:45,653 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:18:45,654 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:18:45,659 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:18:45,661 INFO L85 PathProgramCache]: Analyzing trace with hash -1131083187, now seen corresponding path program 1 times [2024-11-24 00:18:45,670 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:18:45,670 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [791327864] [2024-11-24 00:18:45,670 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:45,671 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:18:45,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:45,894 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:18:45,894 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:18:45,894 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [791327864] [2024-11-24 00:18:45,895 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [791327864] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:18:45,895 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:18:45,895 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-24 00:18:45,901 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [890434153] [2024-11-24 00:18:45,902 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:18:45,911 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-11-24 00:18:45,911 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:18:45,943 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-11-24 00:18:45,943 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-24 00:18:45,946 INFO L87 Difference]: Start difference. First operand has 94 states, 71 states have (on average 1.3943661971830985) internal successors, (99), 80 states have internal predecessors, (99), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-24 00:18:45,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:18:45,985 INFO L93 Difference]: Finished difference Result 179 states and 244 transitions. [2024-11-24 00:18:45,985 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-11-24 00:18:45,987 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2024-11-24 00:18:45,987 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:18:45,997 INFO L225 Difference]: With dead ends: 179 [2024-11-24 00:18:45,998 INFO L226 Difference]: Without dead ends: 85 [2024-11-24 00:18:46,006 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-24 00:18:46,012 INFO L435 NwaCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:18:46,013 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:18:46,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2024-11-24 00:18:46,062 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2024-11-24 00:18:46,064 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 64 states have (on average 1.328125) internal successors, (85), 72 states have internal predecessors, (85), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2024-11-24 00:18:46,069 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2024-11-24 00:18:46,071 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 25 [2024-11-24 00:18:46,072 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:18:46,072 INFO L471 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2024-11-24 00:18:46,072 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-24 00:18:46,073 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2024-11-24 00:18:46,075 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2024-11-24 00:18:46,075 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:18:46,075 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:18:46,075 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-11-24 00:18:46,076 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:18:46,076 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:18:46,076 INFO L85 PathProgramCache]: Analyzing trace with hash -1601159597, now seen corresponding path program 1 times [2024-11-24 00:18:46,077 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:18:46,077 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2113130224] [2024-11-24 00:18:46,077 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:46,077 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:18:46,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:46,235 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:18:46,236 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:18:46,236 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2113130224] [2024-11-24 00:18:46,236 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2113130224] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:18:46,236 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:18:46,236 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:18:46,237 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1358670591] [2024-11-24 00:18:46,237 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:18:46,238 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:18:46,238 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:18:46,239 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:18:46,239 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:18:46,240 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-24 00:18:46,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:18:46,261 INFO L93 Difference]: Finished difference Result 132 states and 170 transitions. [2024-11-24 00:18:46,262 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:18:46,263 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2024-11-24 00:18:46,263 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:18:46,264 INFO L225 Difference]: With dead ends: 132 [2024-11-24 00:18:46,264 INFO L226 Difference]: Without dead ends: 77 [2024-11-24 00:18:46,265 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:18:46,266 INFO L435 NwaCegarLoop]: 98 mSDtfsCounter, 17 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 175 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:18:46,267 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 175 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:18:46,270 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2024-11-24 00:18:46,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2024-11-24 00:18:46,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 59 states have (on average 1.3389830508474576) internal successors, (79), 67 states have internal predecessors, (79), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2024-11-24 00:18:46,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 99 transitions. [2024-11-24 00:18:46,286 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 99 transitions. Word has length 25 [2024-11-24 00:18:46,286 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:18:46,286 INFO L471 AbstractCegarLoop]: Abstraction has 77 states and 99 transitions. [2024-11-24 00:18:46,286 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-24 00:18:46,287 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 99 transitions. [2024-11-24 00:18:46,288 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2024-11-24 00:18:46,288 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:18:46,288 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:18:46,288 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-11-24 00:18:46,289 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:18:46,289 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:18:46,289 INFO L85 PathProgramCache]: Analyzing trace with hash 1394677418, now seen corresponding path program 1 times [2024-11-24 00:18:46,290 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:18:46,290 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [851680426] [2024-11-24 00:18:46,290 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:46,290 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:18:46,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:46,526 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:18:46,526 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:18:46,526 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [851680426] [2024-11-24 00:18:46,527 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [851680426] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:18:46,527 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:18:46,527 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-24 00:18:46,527 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1473206182] [2024-11-24 00:18:46,527 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:18:46,528 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-24 00:18:46,528 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:18:46,529 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-24 00:18:46,529 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-24 00:18:46,530 INFO L87 Difference]: Start difference. First operand 77 states and 99 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 5 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-24 00:18:46,670 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:18:46,671 INFO L93 Difference]: Finished difference Result 188 states and 246 transitions. [2024-11-24 00:18:46,675 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-24 00:18:46,675 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 5 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2024-11-24 00:18:46,676 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:18:46,677 INFO L225 Difference]: With dead ends: 188 [2024-11-24 00:18:46,677 INFO L226 Difference]: Without dead ends: 119 [2024-11-24 00:18:46,678 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:18:46,683 INFO L435 NwaCegarLoop]: 113 mSDtfsCounter, 92 mSDsluCounter, 275 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 388 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:18:46,684 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [92 Valid, 388 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:18:46,685 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 119 states. [2024-11-24 00:18:46,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 119 to 116. [2024-11-24 00:18:46,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 116 states, 88 states have (on average 1.3636363636363635) internal successors, (120), 99 states have internal predecessors, (120), 15 states have call successors, (15), 12 states have call predecessors, (15), 12 states have return successors, (16), 11 states have call predecessors, (16), 15 states have call successors, (16) [2024-11-24 00:18:46,723 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116 states to 116 states and 151 transitions. [2024-11-24 00:18:46,724 INFO L78 Accepts]: Start accepts. Automaton has 116 states and 151 transitions. Word has length 30 [2024-11-24 00:18:46,724 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:18:46,724 INFO L471 AbstractCegarLoop]: Abstraction has 116 states and 151 transitions. [2024-11-24 00:18:46,724 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 5 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-24 00:18:46,725 INFO L276 IsEmpty]: Start isEmpty. Operand 116 states and 151 transitions. [2024-11-24 00:18:46,726 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2024-11-24 00:18:46,726 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:18:46,726 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:18:46,726 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-11-24 00:18:46,726 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:18:46,727 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:18:46,727 INFO L85 PathProgramCache]: Analyzing trace with hash -1894012492, now seen corresponding path program 1 times [2024-11-24 00:18:46,727 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:18:46,727 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [991316590] [2024-11-24 00:18:46,727 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:46,728 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:18:46,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:46,913 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:18:46,913 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:18:46,913 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [991316590] [2024-11-24 00:18:46,913 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [991316590] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:18:46,914 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:18:46,914 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-24 00:18:46,914 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [469000364] [2024-11-24 00:18:46,914 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:18:46,914 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-24 00:18:46,914 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:18:46,915 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-24 00:18:46,916 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-24 00:18:46,916 INFO L87 Difference]: Start difference. First operand 116 states and 151 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-24 00:18:47,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:18:47,058 INFO L93 Difference]: Finished difference Result 258 states and 346 transitions. [2024-11-24 00:18:47,059 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-24 00:18:47,059 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 33 [2024-11-24 00:18:47,060 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:18:47,062 INFO L225 Difference]: With dead ends: 258 [2024-11-24 00:18:47,062 INFO L226 Difference]: Without dead ends: 150 [2024-11-24 00:18:47,063 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:18:47,064 INFO L435 NwaCegarLoop]: 96 mSDtfsCounter, 49 mSDsluCounter, 252 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 348 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:18:47,065 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [49 Valid, 348 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:18:47,066 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2024-11-24 00:18:47,094 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 149. [2024-11-24 00:18:47,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 149 states, 113 states have (on average 1.3008849557522124) internal successors, (147), 123 states have internal predecessors, (147), 18 states have call successors, (18), 17 states have call predecessors, (18), 17 states have return successors, (24), 17 states have call predecessors, (24), 18 states have call successors, (24) [2024-11-24 00:18:47,098 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 189 transitions. [2024-11-24 00:18:47,101 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 189 transitions. Word has length 33 [2024-11-24 00:18:47,102 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:18:47,102 INFO L471 AbstractCegarLoop]: Abstraction has 149 states and 189 transitions. [2024-11-24 00:18:47,102 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-11-24 00:18:47,102 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 189 transitions. [2024-11-24 00:18:47,104 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2024-11-24 00:18:47,108 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:18:47,108 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:18:47,108 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-11-24 00:18:47,108 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:18:47,109 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:18:47,109 INFO L85 PathProgramCache]: Analyzing trace with hash -24349190, now seen corresponding path program 1 times [2024-11-24 00:18:47,109 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:18:47,109 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1863386831] [2024-11-24 00:18:47,109 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:47,109 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:18:47,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:47,203 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:18:47,204 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:18:47,204 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1863386831] [2024-11-24 00:18:47,204 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1863386831] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:18:47,204 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:18:47,204 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:18:47,205 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2040471821] [2024-11-24 00:18:47,205 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:18:47,209 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:18:47,209 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:18:47,210 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:18:47,210 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:18:47,210 INFO L87 Difference]: Start difference. First operand 149 states and 189 transitions. Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-24 00:18:47,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:18:47,264 INFO L93 Difference]: Finished difference Result 292 states and 372 transitions. [2024-11-24 00:18:47,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:18:47,265 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 47 [2024-11-24 00:18:47,266 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:18:47,268 INFO L225 Difference]: With dead ends: 292 [2024-11-24 00:18:47,268 INFO L226 Difference]: Without dead ends: 151 [2024-11-24 00:18:47,269 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:18:47,274 INFO L435 NwaCegarLoop]: 124 mSDtfsCounter, 36 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 217 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:18:47,274 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 217 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:18:47,280 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151 states. [2024-11-24 00:18:47,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151 to 149. [2024-11-24 00:18:47,314 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 149 states, 113 states have (on average 1.2920353982300885) internal successors, (146), 123 states have internal predecessors, (146), 18 states have call successors, (18), 17 states have call predecessors, (18), 17 states have return successors, (22), 17 states have call predecessors, (22), 18 states have call successors, (22) [2024-11-24 00:18:47,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 186 transitions. [2024-11-24 00:18:47,316 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 186 transitions. Word has length 47 [2024-11-24 00:18:47,316 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:18:47,316 INFO L471 AbstractCegarLoop]: Abstraction has 149 states and 186 transitions. [2024-11-24 00:18:47,316 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-11-24 00:18:47,317 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 186 transitions. [2024-11-24 00:18:47,318 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2024-11-24 00:18:47,321 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:18:47,321 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:18:47,321 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-11-24 00:18:47,321 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:18:47,322 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:18:47,322 INFO L85 PathProgramCache]: Analyzing trace with hash -1082327952, now seen corresponding path program 1 times [2024-11-24 00:18:47,322 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:18:47,322 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [394008036] [2024-11-24 00:18:47,322 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:47,322 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:18:47,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:47,581 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:18:47,581 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:18:47,581 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [394008036] [2024-11-24 00:18:47,581 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [394008036] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:18:47,582 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:18:47,582 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-24 00:18:47,582 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1505146753] [2024-11-24 00:18:47,582 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:18:47,582 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-24 00:18:47,582 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:18:47,583 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-24 00:18:47,583 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-24 00:18:47,583 INFO L87 Difference]: Start difference. First operand 149 states and 186 transitions. Second operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 00:18:47,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:18:47,815 INFO L93 Difference]: Finished difference Result 551 states and 722 transitions. [2024-11-24 00:18:47,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-24 00:18:47,816 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2024-11-24 00:18:47,817 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:18:47,824 INFO L225 Difference]: With dead ends: 551 [2024-11-24 00:18:47,824 INFO L226 Difference]: Without dead ends: 410 [2024-11-24 00:18:47,825 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-24 00:18:47,829 INFO L435 NwaCegarLoop]: 162 mSDtfsCounter, 143 mSDsluCounter, 144 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 143 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-11-24 00:18:47,830 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [143 Valid, 306 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-11-24 00:18:47,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 410 states. [2024-11-24 00:18:47,898 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 410 to 399. [2024-11-24 00:18:47,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 399 states, 303 states have (on average 1.283828382838284) internal successors, (389), 326 states have internal predecessors, (389), 48 states have call successors, (48), 46 states have call predecessors, (48), 47 states have return successors, (74), 47 states have call predecessors, (74), 48 states have call successors, (74) [2024-11-24 00:18:47,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 399 states to 399 states and 511 transitions. [2024-11-24 00:18:47,904 INFO L78 Accepts]: Start accepts. Automaton has 399 states and 511 transitions. Word has length 44 [2024-11-24 00:18:47,905 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:18:47,905 INFO L471 AbstractCegarLoop]: Abstraction has 399 states and 511 transitions. [2024-11-24 00:18:47,905 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 00:18:47,905 INFO L276 IsEmpty]: Start isEmpty. Operand 399 states and 511 transitions. [2024-11-24 00:18:47,909 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2024-11-24 00:18:47,909 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:18:47,909 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:18:47,910 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-11-24 00:18:47,910 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:18:47,910 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:18:47,913 INFO L85 PathProgramCache]: Analyzing trace with hash -1505029778, now seen corresponding path program 1 times [2024-11-24 00:18:47,913 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:18:47,913 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [825269640] [2024-11-24 00:18:47,913 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:47,913 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:18:47,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:48,085 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:18:48,085 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:18:48,086 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [825269640] [2024-11-24 00:18:48,087 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [825269640] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:18:48,087 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:18:48,087 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-24 00:18:48,087 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1343732479] [2024-11-24 00:18:48,087 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:18:48,088 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-24 00:18:48,088 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:18:48,088 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-24 00:18:48,090 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-24 00:18:48,091 INFO L87 Difference]: Start difference. First operand 399 states and 511 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 00:18:48,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:18:48,182 INFO L93 Difference]: Finished difference Result 799 states and 1043 transitions. [2024-11-24 00:18:48,183 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-24 00:18:48,183 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2024-11-24 00:18:48,183 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:18:48,191 INFO L225 Difference]: With dead ends: 799 [2024-11-24 00:18:48,192 INFO L226 Difference]: Without dead ends: 408 [2024-11-24 00:18:48,194 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-24 00:18:48,195 INFO L435 NwaCegarLoop]: 96 mSDtfsCounter, 0 mSDsluCounter, 282 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 378 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:18:48,196 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 378 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:18:48,201 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 408 states. [2024-11-24 00:18:48,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 408 to 408. [2024-11-24 00:18:48,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 408 states, 312 states have (on average 1.2756410256410255) internal successors, (398), 335 states have internal predecessors, (398), 48 states have call successors, (48), 46 states have call predecessors, (48), 47 states have return successors, (74), 47 states have call predecessors, (74), 48 states have call successors, (74) [2024-11-24 00:18:48,297 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 408 states to 408 states and 520 transitions. [2024-11-24 00:18:48,298 INFO L78 Accepts]: Start accepts. Automaton has 408 states and 520 transitions. Word has length 44 [2024-11-24 00:18:48,298 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:18:48,298 INFO L471 AbstractCegarLoop]: Abstraction has 408 states and 520 transitions. [2024-11-24 00:18:48,299 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 00:18:48,299 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 520 transitions. [2024-11-24 00:18:48,300 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2024-11-24 00:18:48,301 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:18:48,302 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:18:48,302 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-11-24 00:18:48,302 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:18:48,303 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:18:48,304 INFO L85 PathProgramCache]: Analyzing trace with hash 1100993776, now seen corresponding path program 1 times [2024-11-24 00:18:48,305 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:18:48,305 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1427811152] [2024-11-24 00:18:48,305 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:48,306 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:18:48,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:48,440 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:18:48,441 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:18:48,441 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1427811152] [2024-11-24 00:18:48,441 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1427811152] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:18:48,441 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:18:48,441 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-24 00:18:48,441 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [235074582] [2024-11-24 00:18:48,442 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:18:48,442 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-24 00:18:48,442 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:18:48,443 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-24 00:18:48,443 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-24 00:18:48,443 INFO L87 Difference]: Start difference. First operand 408 states and 520 transitions. Second operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 00:18:48,504 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:18:48,504 INFO L93 Difference]: Finished difference Result 763 states and 993 transitions. [2024-11-24 00:18:48,504 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-24 00:18:48,505 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2024-11-24 00:18:48,505 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:18:48,508 INFO L225 Difference]: With dead ends: 763 [2024-11-24 00:18:48,508 INFO L226 Difference]: Without dead ends: 363 [2024-11-24 00:18:48,510 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-24 00:18:48,511 INFO L435 NwaCegarLoop]: 97 mSDtfsCounter, 0 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 285 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:18:48,512 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 285 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:18:48,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 363 states. [2024-11-24 00:18:48,561 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 363 to 363. [2024-11-24 00:18:48,562 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 363 states, 277 states have (on average 1.259927797833935) internal successors, (349), 297 states have internal predecessors, (349), 43 states have call successors, (43), 41 states have call predecessors, (43), 42 states have return successors, (62), 42 states have call predecessors, (62), 43 states have call successors, (62) [2024-11-24 00:18:48,566 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 363 states to 363 states and 454 transitions. [2024-11-24 00:18:48,568 INFO L78 Accepts]: Start accepts. Automaton has 363 states and 454 transitions. Word has length 44 [2024-11-24 00:18:48,569 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:18:48,569 INFO L471 AbstractCegarLoop]: Abstraction has 363 states and 454 transitions. [2024-11-24 00:18:48,569 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2024-11-24 00:18:48,569 INFO L276 IsEmpty]: Start isEmpty. Operand 363 states and 454 transitions. [2024-11-24 00:18:48,574 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2024-11-24 00:18:48,574 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:18:48,574 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:18:48,574 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-11-24 00:18:48,574 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:18:48,575 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:18:48,575 INFO L85 PathProgramCache]: Analyzing trace with hash 919916568, now seen corresponding path program 1 times [2024-11-24 00:18:48,575 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:18:48,575 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1282360502] [2024-11-24 00:18:48,575 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:48,575 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:18:48,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:48,687 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:18:48,687 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:18:48,687 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1282360502] [2024-11-24 00:18:48,688 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1282360502] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:18:48,688 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:18:48,688 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-24 00:18:48,688 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1339328548] [2024-11-24 00:18:48,688 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:18:48,688 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:18:48,688 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:18:48,689 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:18:48,689 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:18:48,689 INFO L87 Difference]: Start difference. First operand 363 states and 454 transitions. Second operand has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2024-11-24 00:18:48,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:18:48,770 INFO L93 Difference]: Finished difference Result 560 states and 715 transitions. [2024-11-24 00:18:48,771 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:18:48,771 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 48 [2024-11-24 00:18:48,771 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:18:48,776 INFO L225 Difference]: With dead ends: 560 [2024-11-24 00:18:48,777 INFO L226 Difference]: Without dead ends: 558 [2024-11-24 00:18:48,777 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-24 00:18:48,778 INFO L435 NwaCegarLoop]: 98 mSDtfsCounter, 71 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 8 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:18:48,778 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [71 Valid, 185 Invalid, 8 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:18:48,781 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 558 states. [2024-11-24 00:18:48,859 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 558 to 498. [2024-11-24 00:18:48,860 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 498 states, 381 states have (on average 1.2677165354330708) internal successors, (483), 408 states have internal predecessors, (483), 58 states have call successors, (58), 56 states have call predecessors, (58), 58 states have return successors, (101), 56 states have call predecessors, (101), 58 states have call successors, (101) [2024-11-24 00:18:48,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 498 states to 498 states and 642 transitions. [2024-11-24 00:18:48,867 INFO L78 Accepts]: Start accepts. Automaton has 498 states and 642 transitions. Word has length 48 [2024-11-24 00:18:48,868 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:18:48,868 INFO L471 AbstractCegarLoop]: Abstraction has 498 states and 642 transitions. [2024-11-24 00:18:48,868 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 3 states have internal predecessors, (41), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2024-11-24 00:18:48,869 INFO L276 IsEmpty]: Start isEmpty. Operand 498 states and 642 transitions. [2024-11-24 00:18:48,872 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2024-11-24 00:18:48,873 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:18:48,874 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:18:48,874 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2024-11-24 00:18:48,874 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:18:48,875 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:18:48,875 INFO L85 PathProgramCache]: Analyzing trace with hash -326804582, now seen corresponding path program 1 times [2024-11-24 00:18:48,875 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:18:48,875 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1967929631] [2024-11-24 00:18:48,875 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:48,875 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:18:48,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:49,121 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 21 proven. 3 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2024-11-24 00:18:49,121 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:18:49,122 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1967929631] [2024-11-24 00:18:49,122 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1967929631] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:18:49,122 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1485622066] [2024-11-24 00:18:49,122 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:49,122 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:18:49,123 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:18:49,127 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:18:49,130 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-11-24 00:18:49,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:49,286 INFO L256 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 4 conjuncts are in the unsatisfiable core [2024-11-24 00:18:49,296 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:18:49,433 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:18:49,433 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-24 00:18:49,434 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1485622066] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:18:49,434 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-24 00:18:49,434 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 7 [2024-11-24 00:18:49,434 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1233934077] [2024-11-24 00:18:49,434 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:18:49,435 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-24 00:18:49,435 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:18:49,436 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-24 00:18:49,436 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:18:49,436 INFO L87 Difference]: Start difference. First operand 498 states and 642 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2024-11-24 00:18:49,551 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:18:49,551 INFO L93 Difference]: Finished difference Result 872 states and 1157 transitions. [2024-11-24 00:18:49,551 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-24 00:18:49,552 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 86 [2024-11-24 00:18:49,553 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:18:49,558 INFO L225 Difference]: With dead ends: 872 [2024-11-24 00:18:49,558 INFO L226 Difference]: Without dead ends: 460 [2024-11-24 00:18:49,561 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 93 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:18:49,562 INFO L435 NwaCegarLoop]: 138 mSDtfsCounter, 42 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-11-24 00:18:49,563 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 205 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-11-24 00:18:49,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 460 states. [2024-11-24 00:18:49,629 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 460 to 346. [2024-11-24 00:18:49,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 264 states have (on average 1.231060606060606) internal successors, (325), 282 states have internal predecessors, (325), 40 states have call successors, (40), 39 states have call predecessors, (40), 41 states have return successors, (53), 37 states have call predecessors, (53), 40 states have call successors, (53) [2024-11-24 00:18:49,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 418 transitions. [2024-11-24 00:18:49,638 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 418 transitions. Word has length 86 [2024-11-24 00:18:49,639 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:18:49,639 INFO L471 AbstractCegarLoop]: Abstraction has 346 states and 418 transitions. [2024-11-24 00:18:49,639 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2024-11-24 00:18:49,639 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 418 transitions. [2024-11-24 00:18:49,645 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2024-11-24 00:18:49,645 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:18:49,645 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:18:49,658 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-11-24 00:18:49,849 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:18:49,849 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:18:49,850 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:18:49,850 INFO L85 PathProgramCache]: Analyzing trace with hash 413804949, now seen corresponding path program 1 times [2024-11-24 00:18:49,850 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:18:49,850 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [769903594] [2024-11-24 00:18:49,850 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:49,851 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:18:49,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:50,160 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 20 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-11-24 00:18:50,160 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:18:50,160 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [769903594] [2024-11-24 00:18:50,160 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [769903594] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:18:50,160 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [999544389] [2024-11-24 00:18:50,161 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:50,161 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:18:50,161 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:18:50,163 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:18:50,168 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-11-24 00:18:50,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:50,311 INFO L256 TraceCheckSpWp]: Trace formula consists of 308 conjuncts, 11 conjuncts are in the unsatisfiable core [2024-11-24 00:18:50,316 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:18:50,587 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 5 proven. 2 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-11-24 00:18:50,587 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-11-24 00:18:50,813 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-11-24 00:18:50,813 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [999544389] provided 1 perfect and 1 imperfect interpolant sequences [2024-11-24 00:18:50,814 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-11-24 00:18:50,814 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [7, 5] total 10 [2024-11-24 00:18:50,814 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [705309471] [2024-11-24 00:18:50,814 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:18:50,815 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-24 00:18:50,815 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:18:50,816 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-24 00:18:50,816 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2024-11-24 00:18:50,816 INFO L87 Difference]: Start difference. First operand 346 states and 418 transitions. Second operand has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 5 states have internal predecessors, (65), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2024-11-24 00:18:51,051 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:18:51,051 INFO L93 Difference]: Finished difference Result 983 states and 1213 transitions. [2024-11-24 00:18:51,052 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-24 00:18:51,052 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 5 states have internal predecessors, (65), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 89 [2024-11-24 00:18:51,053 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:18:51,058 INFO L225 Difference]: With dead ends: 983 [2024-11-24 00:18:51,058 INFO L226 Difference]: Without dead ends: 645 [2024-11-24 00:18:51,060 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 186 GetRequests, 175 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=98, Unknown=0, NotChecked=0, Total=132 [2024-11-24 00:18:51,061 INFO L435 NwaCegarLoop]: 97 mSDtfsCounter, 57 mSDsluCounter, 346 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 443 SdHoareTripleChecker+Invalid, 51 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:18:51,061 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 443 Invalid, 51 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:18:51,063 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 645 states. [2024-11-24 00:18:51,165 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 645 to 613. [2024-11-24 00:18:51,166 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 613 states, 463 states have (on average 1.2095032397408207) internal successors, (560), 496 states have internal predecessors, (560), 74 states have call successors, (74), 72 states have call predecessors, (74), 75 states have return successors, (101), 67 states have call predecessors, (101), 74 states have call successors, (101) [2024-11-24 00:18:51,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 613 states to 613 states and 735 transitions. [2024-11-24 00:18:51,174 INFO L78 Accepts]: Start accepts. Automaton has 613 states and 735 transitions. Word has length 89 [2024-11-24 00:18:51,174 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:18:51,175 INFO L471 AbstractCegarLoop]: Abstraction has 613 states and 735 transitions. [2024-11-24 00:18:51,175 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 5 states have internal predecessors, (65), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2024-11-24 00:18:51,175 INFO L276 IsEmpty]: Start isEmpty. Operand 613 states and 735 transitions. [2024-11-24 00:18:51,182 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2024-11-24 00:18:51,184 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:18:51,185 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:18:51,197 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2024-11-24 00:18:51,389 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:18:51,389 INFO L396 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:18:51,390 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:18:51,390 INFO L85 PathProgramCache]: Analyzing trace with hash 2120488433, now seen corresponding path program 1 times [2024-11-24 00:18:51,390 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:18:51,390 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [126753749] [2024-11-24 00:18:51,390 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:51,390 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:18:51,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:51,734 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 20 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-11-24 00:18:51,734 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:18:51,734 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [126753749] [2024-11-24 00:18:51,734 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [126753749] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-24 00:18:51,734 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [412899942] [2024-11-24 00:18:51,734 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:51,735 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-24 00:18:51,735 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 [2024-11-24 00:18:51,739 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-24 00:18:51,742 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-11-24 00:18:51,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:51,884 INFO L256 TraceCheckSpWp]: Trace formula consists of 318 conjuncts, 11 conjuncts are in the unsatisfiable core [2024-11-24 00:18:51,888 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-11-24 00:18:51,992 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-24 00:18:51,992 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-24 00:18:51,992 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [412899942] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:18:51,992 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-24 00:18:51,992 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 7 [2024-11-24 00:18:51,992 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [618983169] [2024-11-24 00:18:51,993 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:18:51,993 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-24 00:18:51,993 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:18:51,994 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-24 00:18:51,994 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:18:51,994 INFO L87 Difference]: Start difference. First operand 613 states and 735 transitions. Second operand has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-24 00:18:52,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:18:52,258 INFO L93 Difference]: Finished difference Result 1649 states and 2066 transitions. [2024-11-24 00:18:52,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-24 00:18:52,259 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 93 [2024-11-24 00:18:52,259 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:18:52,268 INFO L225 Difference]: With dead ends: 1649 [2024-11-24 00:18:52,268 INFO L226 Difference]: Without dead ends: 1196 [2024-11-24 00:18:52,271 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 94 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2024-11-24 00:18:52,272 INFO L435 NwaCegarLoop]: 146 mSDtfsCounter, 122 mSDsluCounter, 438 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 584 SdHoareTripleChecker+Invalid, 67 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:18:52,272 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [122 Valid, 584 Invalid, 67 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:18:52,274 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1196 states. [2024-11-24 00:18:52,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1196 to 1157. [2024-11-24 00:18:52,411 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1157 states, 867 states have (on average 1.2064590542099192) internal successors, (1046), 927 states have internal predecessors, (1046), 146 states have call successors, (146), 142 states have call predecessors, (146), 143 states have return successors, (214), 133 states have call predecessors, (214), 146 states have call successors, (214) [2024-11-24 00:18:52,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1157 states to 1157 states and 1406 transitions. [2024-11-24 00:18:52,422 INFO L78 Accepts]: Start accepts. Automaton has 1157 states and 1406 transitions. Word has length 93 [2024-11-24 00:18:52,423 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:18:52,423 INFO L471 AbstractCegarLoop]: Abstraction has 1157 states and 1406 transitions. [2024-11-24 00:18:52,423 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-24 00:18:52,423 INFO L276 IsEmpty]: Start isEmpty. Operand 1157 states and 1406 transitions. [2024-11-24 00:18:52,427 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2024-11-24 00:18:52,428 INFO L210 NwaCegarLoop]: Found error trace [2024-11-24 00:18:52,428 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:18:52,439 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2024-11-24 00:18:52,628 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2024-11-24 00:18:52,629 INFO L396 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-24 00:18:52,629 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-24 00:18:52,629 INFO L85 PathProgramCache]: Analyzing trace with hash 1986474927, now seen corresponding path program 1 times [2024-11-24 00:18:52,629 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-24 00:18:52,629 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1786171693] [2024-11-24 00:18:52,629 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-24 00:18:52,629 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-24 00:18:52,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-24 00:18:52,823 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2024-11-24 00:18:52,823 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-24 00:18:52,823 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1786171693] [2024-11-24 00:18:52,823 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1786171693] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-24 00:18:52,824 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-24 00:18:52,824 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-24 00:18:52,824 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1862514336] [2024-11-24 00:18:52,824 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-24 00:18:52,824 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-11-24 00:18:52,824 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-24 00:18:52,825 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-24 00:18:52,825 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:18:52,825 INFO L87 Difference]: Start difference. First operand 1157 states and 1406 transitions. Second operand has 7 states, 7 states have (on average 9.285714285714286) internal successors, (65), 7 states have internal predecessors, (65), 2 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2024-11-24 00:18:52,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-24 00:18:52,959 INFO L93 Difference]: Finished difference Result 1621 states and 1965 transitions. [2024-11-24 00:18:52,960 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-24 00:18:52,960 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 9.285714285714286) internal successors, (65), 7 states have internal predecessors, (65), 2 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 93 [2024-11-24 00:18:52,961 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-24 00:18:52,962 INFO L225 Difference]: With dead ends: 1621 [2024-11-24 00:18:52,962 INFO L226 Difference]: Without dead ends: 0 [2024-11-24 00:18:52,966 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-24 00:18:52,967 INFO L435 NwaCegarLoop]: 84 mSDtfsCounter, 0 mSDsluCounter, 413 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 497 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-24 00:18:52,967 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 497 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-24 00:18:52,968 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-11-24 00:18:52,968 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-11-24 00:18:52,968 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-24 00:18:52,968 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-11-24 00:18:52,970 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 93 [2024-11-24 00:18:52,970 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-24 00:18:52,970 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-11-24 00:18:52,970 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 9.285714285714286) internal successors, (65), 7 states have internal predecessors, (65), 2 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2024-11-24 00:18:52,970 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-11-24 00:18:52,971 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-11-24 00:18:52,974 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-11-24 00:18:52,974 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2024-11-24 00:18:52,977 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-24 00:18:52,980 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-11-24 00:18:59,619 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-11-24 00:18:59,636 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 24.11 12:18:59 BoogieIcfgContainer [2024-11-24 00:18:59,637 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-11-24 00:18:59,637 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-11-24 00:18:59,637 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-11-24 00:18:59,638 INFO L274 PluginConnector]: Witness Printer initialized [2024-11-24 00:18:59,638 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.11 12:18:45" (3/4) ... [2024-11-24 00:18:59,645 INFO L146 WitnessPrinter]: Generating witness for correct program [2024-11-24 00:18:59,651 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2024-11-24 00:18:59,651 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-11-24 00:18:59,651 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-11-24 00:18:59,651 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2024-11-24 00:18:59,651 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-11-24 00:18:59,651 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-11-24 00:18:59,651 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2024-11-24 00:18:59,652 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-11-24 00:18:59,663 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2024-11-24 00:18:59,664 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-11-24 00:18:59,665 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-11-24 00:18:59,665 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-24 00:18:59,665 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-11-24 00:18:59,777 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/witness.graphml [2024-11-24 00:18:59,777 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/witness.yml [2024-11-24 00:18:59,777 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-11-24 00:18:59,778 INFO L158 Benchmark]: Toolchain (without parser) took 15633.26ms. Allocated memory was 142.6MB in the beginning and 343.9MB in the end (delta: 201.3MB). Free memory was 106.0MB in the beginning and 238.6MB in the end (delta: -132.6MB). Peak memory consumption was 65.6MB. Max. memory is 16.1GB. [2024-11-24 00:18:59,778 INFO L158 Benchmark]: CDTParser took 0.45ms. Allocated memory is still 167.8MB. Free memory is still 105.5MB. There was no memory consumed. Max. memory is 16.1GB. [2024-11-24 00:18:59,779 INFO L158 Benchmark]: CACSL2BoogieTranslator took 669.67ms. Allocated memory is still 142.6MB. Free memory was 106.0MB in the beginning and 87.1MB in the end (delta: 18.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-11-24 00:18:59,779 INFO L158 Benchmark]: Boogie Procedure Inliner took 66.14ms. Allocated memory is still 142.6MB. Free memory was 87.1MB in the beginning and 85.1MB in the end (delta: 2.0MB). There was no memory consumed. Max. memory is 16.1GB. [2024-11-24 00:18:59,779 INFO L158 Benchmark]: Boogie Preprocessor took 56.73ms. Allocated memory is still 142.6MB. Free memory was 85.1MB in the beginning and 83.3MB in the end (delta: 1.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-24 00:18:59,779 INFO L158 Benchmark]: RCFGBuilder took 570.21ms. Allocated memory is still 142.6MB. Free memory was 83.3MB in the beginning and 66.2MB in the end (delta: 17.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-11-24 00:18:59,780 INFO L158 Benchmark]: TraceAbstraction took 14123.02ms. Allocated memory was 142.6MB in the beginning and 343.9MB in the end (delta: 201.3MB). Free memory was 65.5MB in the beginning and 246.7MB in the end (delta: -181.2MB). Peak memory consumption was 151.4MB. Max. memory is 16.1GB. [2024-11-24 00:18:59,780 INFO L158 Benchmark]: Witness Printer took 139.78ms. Allocated memory is still 343.9MB. Free memory was 246.7MB in the beginning and 238.6MB in the end (delta: 8.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-11-24 00:18:59,782 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.45ms. Allocated memory is still 167.8MB. Free memory is still 105.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 669.67ms. Allocated memory is still 142.6MB. Free memory was 106.0MB in the beginning and 87.1MB in the end (delta: 18.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 66.14ms. Allocated memory is still 142.6MB. Free memory was 87.1MB in the beginning and 85.1MB in the end (delta: 2.0MB). There was no memory consumed. Max. memory is 16.1GB. * Boogie Preprocessor took 56.73ms. Allocated memory is still 142.6MB. Free memory was 85.1MB in the beginning and 83.3MB in the end (delta: 1.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * RCFGBuilder took 570.21ms. Allocated memory is still 142.6MB. Free memory was 83.3MB in the beginning and 66.2MB in the end (delta: 17.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 14123.02ms. Allocated memory was 142.6MB in the beginning and 343.9MB in the end (delta: 201.3MB). Free memory was 65.5MB in the beginning and 246.7MB in the end (delta: -181.2MB). Peak memory consumption was 151.4MB. Max. memory is 16.1GB. * Witness Printer took 139.78ms. Allocated memory is still 343.9MB. Free memory was 246.7MB in the beginning and 238.6MB in the end (delta: 8.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] - GenericResultAtLocation [Line: 124]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [124] - GenericResultAtLocation [Line: 354]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [354] - GenericResultAtLocation [Line: 455]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [455] - GenericResultAtLocation [Line: 495]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [495] - GenericResultAtLocation [Line: 530]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [530] - GenericResultAtLocation [Line: 634]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [634] - GenericResultAtLocation [Line: 1000]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1000] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1005]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.4s, OverallIterations: 13, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 1.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 634 SdHoareTripleChecker+Valid, 0.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 629 mSDsluCounter, 4130 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2662 mSDsCounter, 38 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 287 IncrementalHoareTripleChecker+Invalid, 325 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 38 mSolverCounterUnsat, 1468 mSDtfsCounter, 287 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 430 GetRequests, 382 SyntacticMatches, 1 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1157occurred in iteration=12, InterpolantAutomatonStates: 57, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 13 MinimizatonAttempts, 262 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 2.8s InterpolantComputationTime, 969 NumberOfCodeBlocks, 969 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1041 ConstructedInterpolants, 0 QuantifiedInterpolants, 1873 SizeOfPredicates, 4 NumberOfNonLiveVariables, 932 ConjunctsInSsa, 26 ConjunctsInUnsatCore, 17 InterpolantComputations, 13 PerfectInterpolantSequences, 223/232 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (splverifierCounter == 0)) && (waterLevel == 1)) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (splverifierCounter == 0))) || ((((1 <= pumpRunning) && (2 <= waterLevel)) && (splverifierCounter == 0)) && (0 != systemActive))) - InvariantResult [Line: 65]: Location Invariant Derived location invariant: 0 RESULT: Ultimate proved your program to be correct! [2024-11-24 00:18:59,803 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ea6899d-4edf-40c8-9b57-3299cf9875b2/bin/uautomizer-verify-LYvppIcaGC/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE