./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version d790fecc Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1 --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5a0a9a5f1521df25ea0ff390c35c7186e45318cd30c225704d83030e156744fb --- Real Ultimate output --- This is Ultimate 0.3.0-dev-d790fec [2024-12-02 10:36:01,787 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-12-02 10:36:01,839 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-12-02 10:36:01,844 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-12-02 10:36:01,844 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-12-02 10:36:01,864 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-12-02 10:36:01,865 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-12-02 10:36:01,865 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-12-02 10:36:01,866 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-12-02 10:36:01,866 INFO L153 SettingsManager]: * Use memory slicer=true [2024-12-02 10:36:01,866 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-12-02 10:36:01,866 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-12-02 10:36:01,866 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-12-02 10:36:01,866 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-12-02 10:36:01,866 INFO L153 SettingsManager]: * Use SBE=true [2024-12-02 10:36:01,867 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-12-02 10:36:01,867 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-12-02 10:36:01,867 INFO L153 SettingsManager]: * sizeof long=4 [2024-12-02 10:36:01,867 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-12-02 10:36:01,867 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-12-02 10:36:01,867 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-12-02 10:36:01,867 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-12-02 10:36:01,867 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-12-02 10:36:01,867 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-12-02 10:36:01,868 INFO L153 SettingsManager]: * sizeof long double=12 [2024-12-02 10:36:01,868 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-12-02 10:36:01,868 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-12-02 10:36:01,868 INFO L153 SettingsManager]: * Use constant arrays=true [2024-12-02 10:36:01,868 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-12-02 10:36:01,868 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 10:36:01,868 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 10:36:01,868 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 10:36:01,868 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 10:36:01,869 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-12-02 10:36:01,869 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 10:36:01,869 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 10:36:01,869 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 10:36:01,869 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 10:36:01,869 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-12-02 10:36:01,869 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-12-02 10:36:01,869 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-12-02 10:36:01,869 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-12-02 10:36:01,869 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-12-02 10:36:01,870 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-12-02 10:36:01,870 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-12-02 10:36:01,870 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-12-02 10:36:01,870 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-12-02 10:36:01,870 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-12-02 10:36:01,870 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5a0a9a5f1521df25ea0ff390c35c7186e45318cd30c225704d83030e156744fb [2024-12-02 10:36:02,074 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-12-02 10:36:02,081 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-12-02 10:36:02,083 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-12-02 10:36:02,084 INFO L270 PluginConnector]: Initializing CDTParser... [2024-12-02 10:36:02,085 INFO L274 PluginConnector]: CDTParser initialized [2024-12-02 10:36:02,086 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/../../sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c [2024-12-02 10:36:04,668 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/data/b1569583f/d1e6c89f43a64e8f9be3d221b5f8f931/FLAG87666134b [2024-12-02 10:36:04,905 INFO L384 CDTParser]: Found 1 translation units. [2024-12-02 10:36:04,906 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c [2024-12-02 10:36:04,918 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/data/b1569583f/d1e6c89f43a64e8f9be3d221b5f8f931/FLAG87666134b [2024-12-02 10:36:05,249 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/data/b1569583f/d1e6c89f43a64e8f9be3d221b5f8f931 [2024-12-02 10:36:05,250 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-12-02 10:36:05,251 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-12-02 10:36:05,252 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-12-02 10:36:05,252 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-12-02 10:36:05,255 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-12-02 10:36:05,256 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,256 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@77f6ec01 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05, skipping insertion in model container [2024-12-02 10:36:05,256 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,281 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-12-02 10:36:05,457 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c[3645,3658] [2024-12-02 10:36:05,539 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 10:36:05,546 INFO L200 MainTranslator]: Completed pre-run [2024-12-02 10:36:05,552 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2024-12-02 10:36:05,553 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [160] [2024-12-02 10:36:05,554 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [188] [2024-12-02 10:36:05,554 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [197] [2024-12-02 10:36:05,554 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [267] [2024-12-02 10:36:05,554 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [500] [2024-12-02 10:36:05,554 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [866] [2024-12-02 10:36:05,554 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [904] [2024-12-02 10:36:05,563 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c[3645,3658] [2024-12-02 10:36:05,602 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 10:36:05,618 INFO L204 MainTranslator]: Completed translation [2024-12-02 10:36:05,619 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05 WrapperNode [2024-12-02 10:36:05,619 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-12-02 10:36:05,620 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-12-02 10:36:05,620 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-12-02 10:36:05,620 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-12-02 10:36:05,625 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,634 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,655 INFO L138 Inliner]: procedures = 57, calls = 102, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 217 [2024-12-02 10:36:05,655 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-12-02 10:36:05,656 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-12-02 10:36:05,656 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-12-02 10:36:05,656 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-12-02 10:36:05,662 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,662 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,664 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,677 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-12-02 10:36:05,677 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,678 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,682 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,683 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,687 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,688 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,689 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,691 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-12-02 10:36:05,692 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-12-02 10:36:05,692 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-12-02 10:36:05,693 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-12-02 10:36:05,693 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05" (1/1) ... [2024-12-02 10:36:05,699 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 10:36:05,707 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 10:36:05,717 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-12-02 10:36:05,719 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-12-02 10:36:05,739 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-12-02 10:36:05,739 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-12-02 10:36:05,739 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-12-02 10:36:05,739 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-12-02 10:36:05,739 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-12-02 10:36:05,739 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-12-02 10:36:05,739 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-12-02 10:36:05,740 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2024-12-02 10:36:05,740 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2024-12-02 10:36:05,740 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 10:36:05,740 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 10:36:05,740 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-12-02 10:36:05,740 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-12-02 10:36:05,740 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2024-12-02 10:36:05,740 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2024-12-02 10:36:05,740 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-12-02 10:36:05,740 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-12-02 10:36:05,740 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-12-02 10:36:05,740 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-12-02 10:36:05,740 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-12-02 10:36:05,801 INFO L234 CfgBuilder]: Building ICFG [2024-12-02 10:36:05,802 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-12-02 10:36:06,010 INFO L? ?]: Removed 49 outVars from TransFormulas that were not future-live. [2024-12-02 10:36:06,010 INFO L283 CfgBuilder]: Performing block encoding [2024-12-02 10:36:06,020 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-12-02 10:36:06,021 INFO L312 CfgBuilder]: Removed 4 assume(true) statements. [2024-12-02 10:36:06,021 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 10:36:06 BoogieIcfgContainer [2024-12-02 10:36:06,021 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-12-02 10:36:06,023 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-12-02 10:36:06,023 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-12-02 10:36:06,027 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-12-02 10:36:06,028 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 10:36:05" (1/3) ... [2024-12-02 10:36:06,028 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1a746d61 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 10:36:06, skipping insertion in model container [2024-12-02 10:36:06,028 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:36:05" (2/3) ... [2024-12-02 10:36:06,028 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1a746d61 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 10:36:06, skipping insertion in model container [2024-12-02 10:36:06,029 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 10:36:06" (3/3) ... [2024-12-02 10:36:06,030 INFO L128 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product59.cil.c [2024-12-02 10:36:06,044 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-12-02 10:36:06,045 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec1_product59.cil.c that has 9 procedures, 96 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-12-02 10:36:06,097 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-12-02 10:36:06,107 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5ac451e, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-12-02 10:36:06,107 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-12-02 10:36:06,111 INFO L276 IsEmpty]: Start isEmpty. Operand has 96 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 81 states have internal predecessors, (100), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2024-12-02 10:36:06,118 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2024-12-02 10:36:06,118 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:36:06,118 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:36:06,119 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:36:06,123 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:36:06,123 INFO L85 PathProgramCache]: Analyzing trace with hash 1305831019, now seen corresponding path program 1 times [2024-12-02 10:36:06,130 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:36:06,131 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2133572252] [2024-12-02 10:36:06,131 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:06,131 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:36:06,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:06,259 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 10:36:06,259 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:36:06,259 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2133572252] [2024-12-02 10:36:06,260 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2133572252] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:36:06,260 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:36:06,260 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-12-02 10:36:06,261 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1983137666] [2024-12-02 10:36:06,262 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:36:06,265 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-12-02 10:36:06,265 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:36:06,280 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-12-02 10:36:06,280 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-12-02 10:36:06,282 INFO L87 Difference]: Start difference. First operand has 96 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 81 states have internal predecessors, (100), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 10:36:06,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:36:06,303 INFO L93 Difference]: Finished difference Result 184 states and 251 transitions. [2024-12-02 10:36:06,303 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-12-02 10:36:06,304 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2024-12-02 10:36:06,304 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:36:06,310 INFO L225 Difference]: With dead ends: 184 [2024-12-02 10:36:06,310 INFO L226 Difference]: Without dead ends: 87 [2024-12-02 10:36:06,313 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-12-02 10:36:06,316 INFO L435 NwaCegarLoop]: 122 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 122 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 10:36:06,316 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 10:36:06,329 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2024-12-02 10:36:06,348 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 87. [2024-12-02 10:36:06,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 65 states have (on average 1.323076923076923) internal successors, (86), 73 states have internal predecessors, (86), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2024-12-02 10:36:06,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 113 transitions. [2024-12-02 10:36:06,355 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 113 transitions. Word has length 23 [2024-12-02 10:36:06,355 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:36:06,355 INFO L471 AbstractCegarLoop]: Abstraction has 87 states and 113 transitions. [2024-12-02 10:36:06,356 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 10:36:06,356 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 113 transitions. [2024-12-02 10:36:06,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2024-12-02 10:36:06,358 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:36:06,358 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:36:06,358 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-12-02 10:36:06,358 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:36:06,359 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:36:06,359 INFO L85 PathProgramCache]: Analyzing trace with hash -1757374043, now seen corresponding path program 1 times [2024-12-02 10:36:06,359 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:36:06,359 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1057574181] [2024-12-02 10:36:06,359 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:06,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:36:06,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:06,455 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 10:36:06,455 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:36:06,455 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1057574181] [2024-12-02 10:36:06,455 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1057574181] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:36:06,455 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:36:06,455 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-12-02 10:36:06,455 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [347898160] [2024-12-02 10:36:06,455 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:36:06,456 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-12-02 10:36:06,456 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:36:06,457 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-12-02 10:36:06,457 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 10:36:06,457 INFO L87 Difference]: Start difference. First operand 87 states and 113 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 10:36:06,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:36:06,472 INFO L93 Difference]: Finished difference Result 138 states and 178 transitions. [2024-12-02 10:36:06,473 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-12-02 10:36:06,473 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2024-12-02 10:36:06,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:36:06,474 INFO L225 Difference]: With dead ends: 138 [2024-12-02 10:36:06,474 INFO L226 Difference]: Without dead ends: 79 [2024-12-02 10:36:06,474 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 10:36:06,475 INFO L435 NwaCegarLoop]: 101 mSDtfsCounter, 16 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 182 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 10:36:06,475 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 182 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 10:36:06,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2024-12-02 10:36:06,482 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 79. [2024-12-02 10:36:06,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 68 states have internal predecessors, (80), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2024-12-02 10:36:06,484 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 102 transitions. [2024-12-02 10:36:06,484 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 102 transitions. Word has length 23 [2024-12-02 10:36:06,484 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:36:06,484 INFO L471 AbstractCegarLoop]: Abstraction has 79 states and 102 transitions. [2024-12-02 10:36:06,484 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 10:36:06,484 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 102 transitions. [2024-12-02 10:36:06,485 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2024-12-02 10:36:06,485 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:36:06,485 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:36:06,485 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-12-02 10:36:06,485 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:36:06,486 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:36:06,486 INFO L85 PathProgramCache]: Analyzing trace with hash -936207444, now seen corresponding path program 1 times [2024-12-02 10:36:06,486 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:36:06,486 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [587944551] [2024-12-02 10:36:06,486 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:06,486 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:36:06,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:06,606 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 10:36:06,607 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:36:06,607 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [587944551] [2024-12-02 10:36:06,607 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [587944551] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:36:06,607 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:36:06,607 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-12-02 10:36:06,607 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [549814395] [2024-12-02 10:36:06,607 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:36:06,607 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 10:36:06,608 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:36:06,608 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 10:36:06,608 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2024-12-02 10:36:06,608 INFO L87 Difference]: Start difference. First operand 79 states and 102 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 6 states have internal predecessors, (24), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 10:36:06,818 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:36:06,818 INFO L93 Difference]: Finished difference Result 263 states and 346 transitions. [2024-12-02 10:36:06,818 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-12-02 10:36:06,818 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 6 states have internal predecessors, (24), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 27 [2024-12-02 10:36:06,818 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:36:06,820 INFO L225 Difference]: With dead ends: 263 [2024-12-02 10:36:06,820 INFO L226 Difference]: Without dead ends: 191 [2024-12-02 10:36:06,821 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2024-12-02 10:36:06,822 INFO L435 NwaCegarLoop]: 115 mSDtfsCounter, 178 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 178 SdHoareTripleChecker+Valid, 458 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 10:36:06,822 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [178 Valid, 458 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 10:36:06,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 191 states. [2024-12-02 10:36:06,844 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 191 to 185. [2024-12-02 10:36:06,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 138 states have (on average 1.3623188405797102) internal successors, (188), 156 states have internal predecessors, (188), 27 states have call successors, (27), 19 states have call predecessors, (27), 19 states have return successors, (28), 19 states have call predecessors, (28), 27 states have call successors, (28) [2024-12-02 10:36:06,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 243 transitions. [2024-12-02 10:36:06,847 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 243 transitions. Word has length 27 [2024-12-02 10:36:06,847 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:36:06,847 INFO L471 AbstractCegarLoop]: Abstraction has 185 states and 243 transitions. [2024-12-02 10:36:06,847 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 6 states have internal predecessors, (24), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 10:36:06,847 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 243 transitions. [2024-12-02 10:36:06,848 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2024-12-02 10:36:06,849 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:36:06,849 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:36:06,849 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-12-02 10:36:06,849 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:36:06,849 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:36:06,850 INFO L85 PathProgramCache]: Analyzing trace with hash -564572638, now seen corresponding path program 1 times [2024-12-02 10:36:06,850 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:36:06,850 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [706168026] [2024-12-02 10:36:06,850 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:06,850 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:36:06,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:06,948 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 10:36:06,948 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:36:06,948 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [706168026] [2024-12-02 10:36:06,948 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [706168026] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:36:06,948 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:36:06,948 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 10:36:06,948 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [51381897] [2024-12-02 10:36:06,949 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:36:06,949 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 10:36:06,949 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:36:06,949 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 10:36:06,950 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 10:36:06,950 INFO L87 Difference]: Start difference. First operand 185 states and 243 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 10:36:07,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:36:07,022 INFO L93 Difference]: Finished difference Result 439 states and 591 transitions. [2024-12-02 10:36:07,022 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 10:36:07,022 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2024-12-02 10:36:07,022 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:36:07,024 INFO L225 Difference]: With dead ends: 439 [2024-12-02 10:36:07,025 INFO L226 Difference]: Without dead ends: 261 [2024-12-02 10:36:07,026 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-12-02 10:36:07,027 INFO L435 NwaCegarLoop]: 96 mSDtfsCounter, 55 mSDsluCounter, 250 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 346 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 10:36:07,027 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 346 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 10:36:07,028 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 261 states. [2024-12-02 10:36:07,059 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 261 to 259. [2024-12-02 10:36:07,060 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 259 states, 194 states have (on average 1.309278350515464) internal successors, (254), 213 states have internal predecessors, (254), 34 states have call successors, (34), 30 states have call predecessors, (34), 30 states have return successors, (44), 31 states have call predecessors, (44), 34 states have call successors, (44) [2024-12-02 10:36:07,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 332 transitions. [2024-12-02 10:36:07,062 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 332 transitions. Word has length 31 [2024-12-02 10:36:07,062 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:36:07,062 INFO L471 AbstractCegarLoop]: Abstraction has 259 states and 332 transitions. [2024-12-02 10:36:07,062 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 10:36:07,062 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 332 transitions. [2024-12-02 10:36:07,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2024-12-02 10:36:07,064 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:36:07,064 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:36:07,064 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-12-02 10:36:07,064 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:36:07,065 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:36:07,065 INFO L85 PathProgramCache]: Analyzing trace with hash 18168908, now seen corresponding path program 1 times [2024-12-02 10:36:07,065 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:36:07,065 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [141040522] [2024-12-02 10:36:07,065 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:07,065 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:36:07,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:07,144 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 10:36:07,144 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:36:07,144 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [141040522] [2024-12-02 10:36:07,145 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [141040522] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:36:07,145 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:36:07,145 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 10:36:07,145 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1121720961] [2024-12-02 10:36:07,145 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:36:07,145 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 10:36:07,145 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:36:07,146 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 10:36:07,146 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 10:36:07,146 INFO L87 Difference]: Start difference. First operand 259 states and 332 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 10:36:07,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:36:07,179 INFO L93 Difference]: Finished difference Result 517 states and 683 transitions. [2024-12-02 10:36:07,179 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 10:36:07,179 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2024-12-02 10:36:07,180 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:36:07,182 INFO L225 Difference]: With dead ends: 517 [2024-12-02 10:36:07,182 INFO L226 Difference]: Without dead ends: 265 [2024-12-02 10:36:07,183 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 10:36:07,184 INFO L435 NwaCegarLoop]: 99 mSDtfsCounter, 0 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 390 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 10:36:07,185 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 390 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 10:36:07,186 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 265 states. [2024-12-02 10:36:07,206 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 265 to 265. [2024-12-02 10:36:07,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 200 states have (on average 1.3) internal successors, (260), 219 states have internal predecessors, (260), 34 states have call successors, (34), 30 states have call predecessors, (34), 30 states have return successors, (44), 31 states have call predecessors, (44), 34 states have call successors, (44) [2024-12-02 10:36:07,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 338 transitions. [2024-12-02 10:36:07,210 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 338 transitions. Word has length 49 [2024-12-02 10:36:07,210 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:36:07,210 INFO L471 AbstractCegarLoop]: Abstraction has 265 states and 338 transitions. [2024-12-02 10:36:07,210 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 10:36:07,210 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 338 transitions. [2024-12-02 10:36:07,212 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2024-12-02 10:36:07,212 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:36:07,212 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:36:07,212 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-12-02 10:36:07,212 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:36:07,213 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:36:07,213 INFO L85 PathProgramCache]: Analyzing trace with hash 80208522, now seen corresponding path program 1 times [2024-12-02 10:36:07,213 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:36:07,213 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1956123516] [2024-12-02 10:36:07,213 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:07,213 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:36:07,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:07,282 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 10:36:07,282 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:36:07,282 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1956123516] [2024-12-02 10:36:07,282 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1956123516] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:36:07,282 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:36:07,282 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 10:36:07,282 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1332177187] [2024-12-02 10:36:07,282 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:36:07,283 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 10:36:07,283 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:36:07,283 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 10:36:07,283 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 10:36:07,283 INFO L87 Difference]: Start difference. First operand 265 states and 338 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 10:36:07,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:36:07,311 INFO L93 Difference]: Finished difference Result 527 states and 693 transitions. [2024-12-02 10:36:07,312 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 10:36:07,312 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2024-12-02 10:36:07,312 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:36:07,314 INFO L225 Difference]: With dead ends: 527 [2024-12-02 10:36:07,314 INFO L226 Difference]: Without dead ends: 269 [2024-12-02 10:36:07,315 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 10:36:07,316 INFO L435 NwaCegarLoop]: 100 mSDtfsCounter, 0 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 294 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 10:36:07,316 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 294 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 10:36:07,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 269 states. [2024-12-02 10:36:07,335 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 269 to 269. [2024-12-02 10:36:07,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 269 states, 204 states have (on average 1.2941176470588236) internal successors, (264), 223 states have internal predecessors, (264), 34 states have call successors, (34), 30 states have call predecessors, (34), 30 states have return successors, (44), 31 states have call predecessors, (44), 34 states have call successors, (44) [2024-12-02 10:36:07,338 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 269 states to 269 states and 342 transitions. [2024-12-02 10:36:07,338 INFO L78 Accepts]: Start accepts. Automaton has 269 states and 342 transitions. Word has length 49 [2024-12-02 10:36:07,338 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:36:07,339 INFO L471 AbstractCegarLoop]: Abstraction has 269 states and 342 transitions. [2024-12-02 10:36:07,339 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2024-12-02 10:36:07,339 INFO L276 IsEmpty]: Start isEmpty. Operand 269 states and 342 transitions. [2024-12-02 10:36:07,340 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2024-12-02 10:36:07,340 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:36:07,340 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:36:07,340 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-12-02 10:36:07,340 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:36:07,340 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:36:07,340 INFO L85 PathProgramCache]: Analyzing trace with hash -429264568, now seen corresponding path program 1 times [2024-12-02 10:36:07,341 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:36:07,341 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2139641249] [2024-12-02 10:36:07,341 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:07,341 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:36:07,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:07,412 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 10:36:07,412 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:36:07,412 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2139641249] [2024-12-02 10:36:07,413 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2139641249] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:36:07,413 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:36:07,413 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 10:36:07,413 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1654839035] [2024-12-02 10:36:07,413 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:36:07,413 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 10:36:07,413 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:36:07,414 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 10:36:07,414 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 10:36:07,414 INFO L87 Difference]: Start difference. First operand 269 states and 342 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-12-02 10:36:07,531 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:36:07,532 INFO L93 Difference]: Finished difference Result 891 states and 1170 transitions. [2024-12-02 10:36:07,532 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 10:36:07,532 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 49 [2024-12-02 10:36:07,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:36:07,536 INFO L225 Difference]: With dead ends: 891 [2024-12-02 10:36:07,536 INFO L226 Difference]: Without dead ends: 629 [2024-12-02 10:36:07,537 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 10:36:07,537 INFO L435 NwaCegarLoop]: 166 mSDtfsCounter, 128 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 128 SdHoareTripleChecker+Valid, 322 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 10:36:07,538 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [128 Valid, 322 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 10:36:07,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 629 states. [2024-12-02 10:36:07,604 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 629 to 615. [2024-12-02 10:36:07,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 615 states, 464 states have (on average 1.271551724137931) internal successors, (590), 500 states have internal predecessors, (590), 77 states have call successors, (77), 71 states have call predecessors, (77), 73 states have return successors, (120), 73 states have call predecessors, (120), 77 states have call successors, (120) [2024-12-02 10:36:07,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 615 states to 615 states and 787 transitions. [2024-12-02 10:36:07,610 INFO L78 Accepts]: Start accepts. Automaton has 615 states and 787 transitions. Word has length 49 [2024-12-02 10:36:07,611 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:36:07,611 INFO L471 AbstractCegarLoop]: Abstraction has 615 states and 787 transitions. [2024-12-02 10:36:07,611 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-12-02 10:36:07,611 INFO L276 IsEmpty]: Start isEmpty. Operand 615 states and 787 transitions. [2024-12-02 10:36:07,612 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2024-12-02 10:36:07,612 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:36:07,613 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:36:07,613 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-12-02 10:36:07,613 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:36:07,613 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:36:07,613 INFO L85 PathProgramCache]: Analyzing trace with hash 106452078, now seen corresponding path program 1 times [2024-12-02 10:36:07,613 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:36:07,613 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1918361865] [2024-12-02 10:36:07,613 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:07,614 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:36:07,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:07,759 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 10:36:07,760 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:36:07,760 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1918361865] [2024-12-02 10:36:07,760 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1918361865] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:36:07,760 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:36:07,760 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2024-12-02 10:36:07,760 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [928123487] [2024-12-02 10:36:07,760 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:36:07,760 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2024-12-02 10:36:07,760 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:36:07,761 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2024-12-02 10:36:07,761 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2024-12-02 10:36:07,761 INFO L87 Difference]: Start difference. First operand 615 states and 787 transitions. Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (5), 1 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2024-12-02 10:36:08,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:36:08,063 INFO L93 Difference]: Finished difference Result 1797 states and 2397 transitions. [2024-12-02 10:36:08,064 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-12-02 10:36:08,064 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (5), 1 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2024-12-02 10:36:08,064 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:36:08,073 INFO L225 Difference]: With dead ends: 1797 [2024-12-02 10:36:08,073 INFO L226 Difference]: Without dead ends: 1189 [2024-12-02 10:36:08,076 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=171, Unknown=0, NotChecked=0, Total=210 [2024-12-02 10:36:08,077 INFO L435 NwaCegarLoop]: 96 mSDtfsCounter, 86 mSDsluCounter, 554 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 88 SdHoareTripleChecker+Valid, 650 SdHoareTripleChecker+Invalid, 169 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 10:36:08,077 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [88 Valid, 650 Invalid, 169 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 10:36:08,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1189 states. [2024-12-02 10:36:08,245 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1189 to 1189. [2024-12-02 10:36:08,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1189 states, 888 states have (on average 1.2477477477477477) internal successors, (1108), 955 states have internal predecessors, (1108), 154 states have call successors, (154), 142 states have call predecessors, (154), 146 states have return successors, (259), 146 states have call predecessors, (259), 154 states have call successors, (259) [2024-12-02 10:36:08,260 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1189 states to 1189 states and 1521 transitions. [2024-12-02 10:36:08,262 INFO L78 Accepts]: Start accepts. Automaton has 1189 states and 1521 transitions. Word has length 53 [2024-12-02 10:36:08,262 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:36:08,262 INFO L471 AbstractCegarLoop]: Abstraction has 1189 states and 1521 transitions. [2024-12-02 10:36:08,262 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (5), 1 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2024-12-02 10:36:08,263 INFO L276 IsEmpty]: Start isEmpty. Operand 1189 states and 1521 transitions. [2024-12-02 10:36:08,272 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2024-12-02 10:36:08,272 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:36:08,273 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:36:08,273 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-12-02 10:36:08,273 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:36:08,274 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:36:08,274 INFO L85 PathProgramCache]: Analyzing trace with hash 140011379, now seen corresponding path program 1 times [2024-12-02 10:36:08,274 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:36:08,274 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [987417472] [2024-12-02 10:36:08,274 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:08,274 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:36:08,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:08,471 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 20 proven. 2 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2024-12-02 10:36:08,471 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:36:08,471 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [987417472] [2024-12-02 10:36:08,471 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [987417472] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 10:36:08,471 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1657399325] [2024-12-02 10:36:08,471 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:08,471 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 10:36:08,471 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 10:36:08,474 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 10:36:08,475 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-12-02 10:36:08,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:08,596 INFO L256 TraceCheckSpWp]: Trace formula consists of 319 conjuncts, 4 conjuncts are in the unsatisfiable core [2024-12-02 10:36:08,603 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 10:36:08,714 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 10:36:08,714 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-12-02 10:36:08,714 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1657399325] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:36:08,714 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-12-02 10:36:08,715 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [5] total 6 [2024-12-02 10:36:08,715 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1400280399] [2024-12-02 10:36:08,715 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:36:08,715 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 10:36:08,715 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:36:08,716 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 10:36:08,716 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2024-12-02 10:36:08,716 INFO L87 Difference]: Start difference. First operand 1189 states and 1521 transitions. Second operand has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 3 states have call successors, (11), 4 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2024-12-02 10:36:09,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:36:09,224 INFO L93 Difference]: Finished difference Result 2629 states and 3482 transitions. [2024-12-02 10:36:09,224 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-12-02 10:36:09,225 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 3 states have call successors, (11), 4 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 98 [2024-12-02 10:36:09,225 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:36:09,238 INFO L225 Difference]: With dead ends: 2629 [2024-12-02 10:36:09,238 INFO L226 Difference]: Without dead ends: 1685 [2024-12-02 10:36:09,243 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 107 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=47, Unknown=0, NotChecked=0, Total=72 [2024-12-02 10:36:09,243 INFO L435 NwaCegarLoop]: 136 mSDtfsCounter, 139 mSDsluCounter, 223 mSDsCounter, 0 mSdLazyCounter, 219 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 359 SdHoareTripleChecker+Invalid, 257 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 219 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-12-02 10:36:09,243 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [145 Valid, 359 Invalid, 257 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 219 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-12-02 10:36:09,246 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1685 states. [2024-12-02 10:36:09,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1685 to 1673. [2024-12-02 10:36:09,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1673 states, 1242 states have (on average 1.2254428341384862) internal successors, (1522), 1331 states have internal predecessors, (1522), 224 states have call successors, (224), 188 states have call predecessors, (224), 206 states have return successors, (446), 222 states have call predecessors, (446), 224 states have call successors, (446) [2024-12-02 10:36:09,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1673 states to 1673 states and 2192 transitions. [2024-12-02 10:36:09,436 INFO L78 Accepts]: Start accepts. Automaton has 1673 states and 2192 transitions. Word has length 98 [2024-12-02 10:36:09,437 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:36:09,437 INFO L471 AbstractCegarLoop]: Abstraction has 1673 states and 2192 transitions. [2024-12-02 10:36:09,437 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 3 states have call successors, (11), 4 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2024-12-02 10:36:09,437 INFO L276 IsEmpty]: Start isEmpty. Operand 1673 states and 2192 transitions. [2024-12-02 10:36:09,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2024-12-02 10:36:09,443 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:36:09,443 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:36:09,452 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-12-02 10:36:09,644 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 10:36:09,644 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:36:09,644 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:36:09,644 INFO L85 PathProgramCache]: Analyzing trace with hash 276888409, now seen corresponding path program 1 times [2024-12-02 10:36:09,645 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:36:09,645 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [468778785] [2024-12-02 10:36:09,645 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:09,645 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:36:09,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:09,817 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 16 proven. 2 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2024-12-02 10:36:09,818 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:36:09,818 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [468778785] [2024-12-02 10:36:09,818 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [468778785] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 10:36:09,818 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [555267890] [2024-12-02 10:36:09,818 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:09,818 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 10:36:09,818 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 10:36:09,820 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 10:36:09,821 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-12-02 10:36:09,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:09,912 INFO L256 TraceCheckSpWp]: Trace formula consists of 310 conjuncts, 11 conjuncts are in the unsatisfiable core [2024-12-02 10:36:09,915 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 10:36:09,999 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 10:36:09,999 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-12-02 10:36:09,999 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [555267890] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:36:09,999 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-12-02 10:36:10,000 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 6 [2024-12-02 10:36:10,000 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [577509464] [2024-12-02 10:36:10,000 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:36:10,000 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 10:36:10,000 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:36:10,001 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 10:36:10,001 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2024-12-02 10:36:10,001 INFO L87 Difference]: Start difference. First operand 1673 states and 2192 transitions. Second operand has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2024-12-02 10:36:10,248 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:36:10,248 INFO L93 Difference]: Finished difference Result 3917 states and 5356 transitions. [2024-12-02 10:36:10,248 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-12-02 10:36:10,249 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 94 [2024-12-02 10:36:10,249 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:36:10,262 INFO L225 Difference]: With dead ends: 3917 [2024-12-02 10:36:10,263 INFO L226 Difference]: Without dead ends: 2501 [2024-12-02 10:36:10,268 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 96 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=38, Unknown=0, NotChecked=0, Total=56 [2024-12-02 10:36:10,269 INFO L435 NwaCegarLoop]: 149 mSDtfsCounter, 118 mSDsluCounter, 437 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 586 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 10:36:10,269 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [118 Valid, 586 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 10:36:10,272 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2501 states. [2024-12-02 10:36:10,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2501 to 2175. [2024-12-02 10:36:10,451 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2175 states, 1608 states have (on average 1.2300995024875623) internal successors, (1978), 1729 states have internal predecessors, (1978), 296 states have call successors, (296), 248 states have call predecessors, (296), 270 states have return successors, (599), 272 states have call predecessors, (599), 296 states have call successors, (599) [2024-12-02 10:36:10,465 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2175 states to 2175 states and 2873 transitions. [2024-12-02 10:36:10,468 INFO L78 Accepts]: Start accepts. Automaton has 2175 states and 2873 transitions. Word has length 94 [2024-12-02 10:36:10,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:36:10,468 INFO L471 AbstractCegarLoop]: Abstraction has 2175 states and 2873 transitions. [2024-12-02 10:36:10,468 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2024-12-02 10:36:10,469 INFO L276 IsEmpty]: Start isEmpty. Operand 2175 states and 2873 transitions. [2024-12-02 10:36:10,472 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2024-12-02 10:36:10,472 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:36:10,473 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:36:10,481 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-12-02 10:36:10,673 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2024-12-02 10:36:10,673 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:36:10,674 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:36:10,674 INFO L85 PathProgramCache]: Analyzing trace with hash 1545025015, now seen corresponding path program 1 times [2024-12-02 10:36:10,674 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:36:10,674 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1513763931] [2024-12-02 10:36:10,674 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:10,674 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:36:10,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:10,883 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 17 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2024-12-02 10:36:10,883 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:36:10,883 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1513763931] [2024-12-02 10:36:10,883 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1513763931] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 10:36:10,883 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [874250076] [2024-12-02 10:36:10,883 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:10,883 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 10:36:10,883 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 10:36:10,885 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 10:36:10,886 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-12-02 10:36:10,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:10,978 INFO L256 TraceCheckSpWp]: Trace formula consists of 321 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-12-02 10:36:10,980 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 10:36:11,111 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-12-02 10:36:11,111 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-12-02 10:36:11,111 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [874250076] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:36:11,111 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-12-02 10:36:11,111 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2024-12-02 10:36:11,111 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1670330692] [2024-12-02 10:36:11,111 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:36:11,112 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-12-02 10:36:11,112 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:36:11,112 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-12-02 10:36:11,112 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=200, Unknown=0, NotChecked=0, Total=240 [2024-12-02 10:36:11,112 INFO L87 Difference]: Start difference. First operand 2175 states and 2873 transitions. Second operand has 7 states, 7 states have (on average 10.142857142857142) internal successors, (71), 6 states have internal predecessors, (71), 3 states have call successors, (10), 3 states have call predecessors, (10), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2024-12-02 10:36:11,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:36:11,359 INFO L93 Difference]: Finished difference Result 4343 states and 5739 transitions. [2024-12-02 10:36:11,360 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-12-02 10:36:11,360 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.142857142857142) internal successors, (71), 6 states have internal predecessors, (71), 3 states have call successors, (10), 3 states have call predecessors, (10), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) Word has length 98 [2024-12-02 10:36:11,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:36:11,370 INFO L225 Difference]: With dead ends: 4343 [2024-12-02 10:36:11,370 INFO L226 Difference]: Without dead ends: 2175 [2024-12-02 10:36:11,376 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 95 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=200, Unknown=0, NotChecked=0, Total=240 [2024-12-02 10:36:11,377 INFO L435 NwaCegarLoop]: 181 mSDtfsCounter, 67 mSDsluCounter, 523 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 704 SdHoareTripleChecker+Invalid, 129 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 10:36:11,377 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 704 Invalid, 129 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 10:36:11,379 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2175 states. [2024-12-02 10:36:11,479 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2175 to 2175. [2024-12-02 10:36:11,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2175 states, 1608 states have (on average 1.2145522388059702) internal successors, (1953), 1729 states have internal predecessors, (1953), 296 states have call successors, (296), 248 states have call predecessors, (296), 270 states have return successors, (524), 272 states have call predecessors, (524), 296 states have call successors, (524) [2024-12-02 10:36:11,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2175 states to 2175 states and 2773 transitions. [2024-12-02 10:36:11,493 INFO L78 Accepts]: Start accepts. Automaton has 2175 states and 2773 transitions. Word has length 98 [2024-12-02 10:36:11,494 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:36:11,494 INFO L471 AbstractCegarLoop]: Abstraction has 2175 states and 2773 transitions. [2024-12-02 10:36:11,494 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.142857142857142) internal successors, (71), 6 states have internal predecessors, (71), 3 states have call successors, (10), 3 states have call predecessors, (10), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2024-12-02 10:36:11,494 INFO L276 IsEmpty]: Start isEmpty. Operand 2175 states and 2773 transitions. [2024-12-02 10:36:11,496 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2024-12-02 10:36:11,496 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:36:11,496 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:36:11,503 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-12-02 10:36:11,697 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 10:36:11,697 INFO L396 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:36:11,698 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:36:11,698 INFO L85 PathProgramCache]: Analyzing trace with hash -1528549925, now seen corresponding path program 1 times [2024-12-02 10:36:11,698 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:36:11,698 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1466770781] [2024-12-02 10:36:11,698 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:36:11,698 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:36:11,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:36:11,807 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2024-12-02 10:36:11,807 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:36:11,808 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1466770781] [2024-12-02 10:36:11,808 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1466770781] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:36:11,808 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:36:11,808 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-12-02 10:36:11,808 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1486550276] [2024-12-02 10:36:11,808 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:36:11,808 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-12-02 10:36:11,808 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:36:11,809 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-12-02 10:36:11,809 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-12-02 10:36:11,809 INFO L87 Difference]: Start difference. First operand 2175 states and 2773 transitions. Second operand has 7 states, 7 states have (on average 9.0) internal successors, (63), 7 states have internal predecessors, (63), 2 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2024-12-02 10:36:11,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:36:11,902 INFO L93 Difference]: Finished difference Result 2935 states and 3709 transitions. [2024-12-02 10:36:11,902 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-12-02 10:36:11,902 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 9.0) internal successors, (63), 7 states have internal predecessors, (63), 2 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 94 [2024-12-02 10:36:11,903 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:36:11,905 INFO L225 Difference]: With dead ends: 2935 [2024-12-02 10:36:11,905 INFO L226 Difference]: Without dead ends: 0 [2024-12-02 10:36:11,912 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-12-02 10:36:11,912 INFO L435 NwaCegarLoop]: 87 mSDtfsCounter, 0 mSDsluCounter, 428 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 515 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 10:36:11,912 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 515 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 10:36:11,913 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-12-02 10:36:11,913 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-12-02 10:36:11,913 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-12-02 10:36:11,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-12-02 10:36:11,915 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 94 [2024-12-02 10:36:11,915 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:36:11,915 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-12-02 10:36:11,915 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 9.0) internal successors, (63), 7 states have internal predecessors, (63), 2 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2024-12-02 10:36:11,915 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-12-02 10:36:11,915 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-12-02 10:36:11,918 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-12-02 10:36:11,918 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2024-12-02 10:36:11,920 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:36:11,922 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-12-02 10:36:16,122 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-12-02 10:36:16,133 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 10:36:16 BoogieIcfgContainer [2024-12-02 10:36:16,133 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-12-02 10:36:16,133 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-12-02 10:36:16,133 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-12-02 10:36:16,134 INFO L274 PluginConnector]: Witness Printer initialized [2024-12-02 10:36:16,134 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 10:36:06" (3/4) ... [2024-12-02 10:36:16,136 INFO L146 WitnessPrinter]: Generating witness for correct program [2024-12-02 10:36:16,140 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2024-12-02 10:36:16,140 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-12-02 10:36:16,140 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-12-02 10:36:16,140 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-12-02 10:36:16,140 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-12-02 10:36:16,140 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2024-12-02 10:36:16,140 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 10:36:16,140 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-12-02 10:36:16,145 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2024-12-02 10:36:16,145 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-12-02 10:36:16,145 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-12-02 10:36:16,146 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 10:36:16,146 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 10:36:16,215 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/witness.graphml [2024-12-02 10:36:16,215 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/witness.yml [2024-12-02 10:36:16,215 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-12-02 10:36:16,216 INFO L158 Benchmark]: Toolchain (without parser) took 10964.32ms. Allocated memory was 142.6MB in the beginning and 377.5MB in the end (delta: 234.9MB). Free memory was 116.3MB in the beginning and 233.9MB in the end (delta: -117.6MB). Peak memory consumption was 117.2MB. Max. memory is 16.1GB. [2024-12-02 10:36:16,216 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 142.6MB. Free memory is still 82.5MB. There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 10:36:16,216 INFO L158 Benchmark]: CACSL2BoogieTranslator took 367.41ms. Allocated memory is still 142.6MB. Free memory was 116.1MB in the beginning and 97.3MB in the end (delta: 18.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-12-02 10:36:16,216 INFO L158 Benchmark]: Boogie Procedure Inliner took 35.28ms. Allocated memory is still 142.6MB. Free memory was 97.3MB in the beginning and 95.4MB in the end (delta: 2.0MB). There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 10:36:16,216 INFO L158 Benchmark]: Boogie Preprocessor took 36.01ms. Allocated memory is still 142.6MB. Free memory was 95.4MB in the beginning and 93.5MB in the end (delta: 1.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 10:36:16,216 INFO L158 Benchmark]: RCFGBuilder took 328.93ms. Allocated memory is still 142.6MB. Free memory was 93.5MB in the beginning and 76.0MB in the end (delta: 17.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-12-02 10:36:16,217 INFO L158 Benchmark]: TraceAbstraction took 10109.89ms. Allocated memory was 142.6MB in the beginning and 377.5MB in the end (delta: 234.9MB). Free memory was 75.4MB in the beginning and 242.2MB in the end (delta: -166.8MB). Peak memory consumption was 188.5MB. Max. memory is 16.1GB. [2024-12-02 10:36:16,217 INFO L158 Benchmark]: Witness Printer took 81.67ms. Allocated memory is still 377.5MB. Free memory was 242.2MB in the beginning and 233.9MB in the end (delta: 8.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 10:36:16,218 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 142.6MB. Free memory is still 82.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 367.41ms. Allocated memory is still 142.6MB. Free memory was 116.1MB in the beginning and 97.3MB in the end (delta: 18.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 35.28ms. Allocated memory is still 142.6MB. Free memory was 97.3MB in the beginning and 95.4MB in the end (delta: 2.0MB). There was no memory consumed. Max. memory is 16.1GB. * Boogie Preprocessor took 36.01ms. Allocated memory is still 142.6MB. Free memory was 95.4MB in the beginning and 93.5MB in the end (delta: 1.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * RCFGBuilder took 328.93ms. Allocated memory is still 142.6MB. Free memory was 93.5MB in the beginning and 76.0MB in the end (delta: 17.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 10109.89ms. Allocated memory was 142.6MB in the beginning and 377.5MB in the end (delta: 234.9MB). Free memory was 75.4MB in the beginning and 242.2MB in the end (delta: -166.8MB). Peak memory consumption was 188.5MB. Max. memory is 16.1GB. * Witness Printer took 81.67ms. Allocated memory is still 377.5MB. Free memory was 242.2MB in the beginning and 233.9MB in the end (delta: 8.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 160]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [160] - GenericResultAtLocation [Line: 188]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [188] - GenericResultAtLocation [Line: 197]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [197] - GenericResultAtLocation [Line: 267]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [267] - GenericResultAtLocation [Line: 500]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [500] - GenericResultAtLocation [Line: 866]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [866] - GenericResultAtLocation [Line: 904]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [904] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 193]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 96 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.8s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 800 SdHoareTripleChecker+Valid, 0.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 787 mSDsluCounter, 4928 SdHoareTripleChecker+Invalid, 0.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3480 mSDsCounter, 65 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 809 IncrementalHoareTripleChecker+Invalid, 874 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 65 mSolverCounterUnsat, 1448 mSDtfsCounter, 809 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 377 GetRequests, 313 SyntacticMatches, 0 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2175occurred in iteration=10, InterpolantAutomatonStates: 69, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 12 MinimizatonAttempts, 360 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 978 NumberOfCodeBlocks, 978 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 963 ConstructedInterpolants, 0 QuantifiedInterpolants, 1599 SizeOfPredicates, 2 NumberOfNonLiveVariables, 950 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 219/231 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 210]: Location Invariant Derived location invariant: 0 - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (2 <= waterLevel)) && (splverifierCounter == 0)) || ((((methaneLevelCritical == 0) && (2 <= waterLevel)) && (splverifierCounter == 0)) && (0 != systemActive))) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (splverifierCounter == 0)) && (1 <= waterLevel))) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (waterLevel == 1))) - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2024-12-02 10:36:16,235 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b4173372-69b2-462e-a97b-b18f993658ab/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE