./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version d790fecc Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1 --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c6b9b08cafcd1ede2e2b3a8fb1be067350eaac45a7dc4fb4db0fb4cb0fdccd74 --- Real Ultimate output --- This is Ultimate 0.3.0-dev-d790fec [2024-12-02 15:37:05,625 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-12-02 15:37:05,694 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-12-02 15:37:05,700 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-12-02 15:37:05,700 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-12-02 15:37:05,728 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-12-02 15:37:05,729 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-12-02 15:37:05,729 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-12-02 15:37:05,729 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-12-02 15:37:05,729 INFO L153 SettingsManager]: * Use memory slicer=true [2024-12-02 15:37:05,730 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-12-02 15:37:05,730 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-12-02 15:37:05,730 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-12-02 15:37:05,730 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-12-02 15:37:05,730 INFO L153 SettingsManager]: * Use SBE=true [2024-12-02 15:37:05,731 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-12-02 15:37:05,731 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-12-02 15:37:05,731 INFO L153 SettingsManager]: * sizeof long=4 [2024-12-02 15:37:05,731 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-12-02 15:37:05,731 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-12-02 15:37:05,731 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-12-02 15:37:05,732 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-12-02 15:37:05,732 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-12-02 15:37:05,732 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-12-02 15:37:05,732 INFO L153 SettingsManager]: * sizeof long double=12 [2024-12-02 15:37:05,732 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-12-02 15:37:05,732 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-12-02 15:37:05,732 INFO L153 SettingsManager]: * Use constant arrays=true [2024-12-02 15:37:05,732 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-12-02 15:37:05,732 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 15:37:05,732 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 15:37:05,733 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 15:37:05,733 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 15:37:05,733 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-12-02 15:37:05,733 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 15:37:05,733 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 15:37:05,733 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 15:37:05,733 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 15:37:05,733 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-12-02 15:37:05,733 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-12-02 15:37:05,734 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-12-02 15:37:05,734 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-12-02 15:37:05,734 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-12-02 15:37:05,734 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-12-02 15:37:05,734 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-12-02 15:37:05,734 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-12-02 15:37:05,734 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-12-02 15:37:05,734 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-12-02 15:37:05,734 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c6b9b08cafcd1ede2e2b3a8fb1be067350eaac45a7dc4fb4db0fb4cb0fdccd74 [2024-12-02 15:37:06,003 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-12-02 15:37:06,013 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-12-02 15:37:06,015 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-12-02 15:37:06,017 INFO L270 PluginConnector]: Initializing CDTParser... [2024-12-02 15:37:06,017 INFO L274 PluginConnector]: CDTParser initialized [2024-12-02 15:37:06,019 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/../../sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c [2024-12-02 15:37:09,314 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/data/959cae1a0/ad90ea3f1a294d1f87a980830deb9936/FLAGb22929271 [2024-12-02 15:37:09,583 INFO L384 CDTParser]: Found 1 translation units. [2024-12-02 15:37:09,584 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c [2024-12-02 15:37:09,595 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/data/959cae1a0/ad90ea3f1a294d1f87a980830deb9936/FLAGb22929271 [2024-12-02 15:37:09,609 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/data/959cae1a0/ad90ea3f1a294d1f87a980830deb9936 [2024-12-02 15:37:09,611 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-12-02 15:37:09,613 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-12-02 15:37:09,614 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-12-02 15:37:09,614 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-12-02 15:37:09,619 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-12-02 15:37:09,620 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 03:37:09" (1/1) ... [2024-12-02 15:37:09,621 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@47ab0954 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:09, skipping insertion in model container [2024-12-02 15:37:09,621 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 03:37:09" (1/1) ... [2024-12-02 15:37:09,654 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-12-02 15:37:09,801 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c[1605,1618] [2024-12-02 15:37:09,938 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 15:37:09,950 INFO L200 MainTranslator]: Completed pre-run [2024-12-02 15:37:09,959 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2024-12-02 15:37:09,961 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [58] [2024-12-02 15:37:09,961 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [96] [2024-12-02 15:37:09,961 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [124] [2024-12-02 15:37:09,961 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [490] [2024-12-02 15:37:09,962 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [591] [2024-12-02 15:37:09,962 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [862] [2024-12-02 15:37:09,962 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [966] [2024-12-02 15:37:09,966 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/sv-benchmarks/c/product-lines/minepump_spec1_product64.cil.c[1605,1618] [2024-12-02 15:37:10,020 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 15:37:10,041 INFO L204 MainTranslator]: Completed translation [2024-12-02 15:37:10,042 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10 WrapperNode [2024-12-02 15:37:10,042 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-12-02 15:37:10,043 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-12-02 15:37:10,044 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-12-02 15:37:10,044 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-12-02 15:37:10,051 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10" (1/1) ... [2024-12-02 15:37:10,060 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10" (1/1) ... [2024-12-02 15:37:10,080 INFO L138 Inliner]: procedures = 59, calls = 107, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 222 [2024-12-02 15:37:10,080 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-12-02 15:37:10,081 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-12-02 15:37:10,081 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-12-02 15:37:10,081 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-12-02 15:37:10,092 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10" (1/1) ... [2024-12-02 15:37:10,092 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10" (1/1) ... [2024-12-02 15:37:10,096 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10" (1/1) ... [2024-12-02 15:37:10,110 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-12-02 15:37:10,110 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10" (1/1) ... [2024-12-02 15:37:10,111 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10" (1/1) ... [2024-12-02 15:37:10,114 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10" (1/1) ... [2024-12-02 15:37:10,115 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10" (1/1) ... [2024-12-02 15:37:10,119 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10" (1/1) ... [2024-12-02 15:37:10,120 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10" (1/1) ... [2024-12-02 15:37:10,120 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10" (1/1) ... [2024-12-02 15:37:10,122 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-12-02 15:37:10,123 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-12-02 15:37:10,123 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-12-02 15:37:10,123 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-12-02 15:37:10,124 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10" (1/1) ... [2024-12-02 15:37:10,128 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 15:37:10,140 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 15:37:10,151 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-12-02 15:37:10,153 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-12-02 15:37:10,180 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-12-02 15:37:10,180 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-12-02 15:37:10,180 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-12-02 15:37:10,180 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-12-02 15:37:10,181 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-12-02 15:37:10,181 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-12-02 15:37:10,181 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-12-02 15:37:10,181 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2024-12-02 15:37:10,181 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2024-12-02 15:37:10,181 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 15:37:10,181 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 15:37:10,181 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-12-02 15:37:10,181 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-12-02 15:37:10,181 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2024-12-02 15:37:10,181 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2024-12-02 15:37:10,181 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2024-12-02 15:37:10,181 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2024-12-02 15:37:10,182 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2024-12-02 15:37:10,182 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2024-12-02 15:37:10,182 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-12-02 15:37:10,182 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-12-02 15:37:10,182 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-12-02 15:37:10,182 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-12-02 15:37:10,182 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-12-02 15:37:10,266 INFO L234 CfgBuilder]: Building ICFG [2024-12-02 15:37:10,269 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-12-02 15:37:10,580 INFO L? ?]: Removed 50 outVars from TransFormulas that were not future-live. [2024-12-02 15:37:10,580 INFO L283 CfgBuilder]: Performing block encoding [2024-12-02 15:37:10,593 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-12-02 15:37:10,593 INFO L312 CfgBuilder]: Removed 4 assume(true) statements. [2024-12-02 15:37:10,594 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:37:10 BoogieIcfgContainer [2024-12-02 15:37:10,594 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-12-02 15:37:10,596 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-12-02 15:37:10,597 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-12-02 15:37:10,602 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-12-02 15:37:10,602 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 03:37:09" (1/3) ... [2024-12-02 15:37:10,603 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5c3c2241 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 03:37:10, skipping insertion in model container [2024-12-02 15:37:10,603 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:37:10" (2/3) ... [2024-12-02 15:37:10,603 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5c3c2241 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 03:37:10, skipping insertion in model container [2024-12-02 15:37:10,603 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:37:10" (3/3) ... [2024-12-02 15:37:10,605 INFO L128 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product64.cil.c [2024-12-02 15:37:10,621 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-12-02 15:37:10,623 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec1_product64.cil.c that has 11 procedures, 111 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-12-02 15:37:10,687 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-12-02 15:37:10,701 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3c11ba0b, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-12-02 15:37:10,701 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-12-02 15:37:10,706 INFO L276 IsEmpty]: Start isEmpty. Operand has 111 states, 80 states have (on average 1.375) internal successors, (110), 91 states have internal predecessors, (110), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2024-12-02 15:37:10,715 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2024-12-02 15:37:10,715 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:37:10,715 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:37:10,716 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:37:10,720 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:37:10,721 INFO L85 PathProgramCache]: Analyzing trace with hash -929011412, now seen corresponding path program 1 times [2024-12-02 15:37:10,727 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:37:10,727 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2053844529] [2024-12-02 15:37:10,727 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:37:10,728 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:37:10,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:37:10,881 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 15:37:10,881 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:37:10,882 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2053844529] [2024-12-02 15:37:10,882 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2053844529] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:37:10,883 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:37:10,883 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-12-02 15:37:10,884 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1782288422] [2024-12-02 15:37:10,885 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:37:10,889 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-12-02 15:37:10,889 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:37:10,908 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-12-02 15:37:10,908 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-12-02 15:37:10,910 INFO L87 Difference]: Start difference. First operand has 111 states, 80 states have (on average 1.375) internal successors, (110), 91 states have internal predecessors, (110), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 15:37:10,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:37:10,945 INFO L93 Difference]: Finished difference Result 214 states and 291 transitions. [2024-12-02 15:37:10,946 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-12-02 15:37:10,947 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2024-12-02 15:37:10,947 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:37:10,955 INFO L225 Difference]: With dead ends: 214 [2024-12-02 15:37:10,955 INFO L226 Difference]: Without dead ends: 102 [2024-12-02 15:37:10,959 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-12-02 15:37:10,962 INFO L435 NwaCegarLoop]: 142 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 142 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 15:37:10,963 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 142 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 15:37:10,975 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102 states. [2024-12-02 15:37:10,997 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102 to 102. [2024-12-02 15:37:10,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102 states, 73 states have (on average 1.3150684931506849) internal successors, (96), 83 states have internal predecessors, (96), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2024-12-02 15:37:11,012 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102 states to 102 states and 133 transitions. [2024-12-02 15:37:11,014 INFO L78 Accepts]: Start accepts. Automaton has 102 states and 133 transitions. Word has length 23 [2024-12-02 15:37:11,014 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:37:11,014 INFO L471 AbstractCegarLoop]: Abstraction has 102 states and 133 transitions. [2024-12-02 15:37:11,015 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 15:37:11,015 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 133 transitions. [2024-12-02 15:37:11,017 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2024-12-02 15:37:11,017 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:37:11,017 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:37:11,018 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-12-02 15:37:11,018 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:37:11,019 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:37:11,020 INFO L85 PathProgramCache]: Analyzing trace with hash 302750822, now seen corresponding path program 1 times [2024-12-02 15:37:11,020 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:37:11,020 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1116305708] [2024-12-02 15:37:11,020 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:37:11,020 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:37:11,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:37:11,133 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 15:37:11,133 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:37:11,133 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1116305708] [2024-12-02 15:37:11,134 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1116305708] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:37:11,134 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:37:11,134 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-12-02 15:37:11,134 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1100086517] [2024-12-02 15:37:11,134 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:37:11,135 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-12-02 15:37:11,135 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:37:11,136 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-12-02 15:37:11,136 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 15:37:11,136 INFO L87 Difference]: Start difference. First operand 102 states and 133 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 15:37:11,160 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:37:11,160 INFO L93 Difference]: Finished difference Result 167 states and 217 transitions. [2024-12-02 15:37:11,160 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-12-02 15:37:11,161 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2024-12-02 15:37:11,161 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:37:11,162 INFO L225 Difference]: With dead ends: 167 [2024-12-02 15:37:11,163 INFO L226 Difference]: Without dead ends: 94 [2024-12-02 15:37:11,163 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 15:37:11,165 INFO L435 NwaCegarLoop]: 121 mSDtfsCounter, 17 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 15:37:11,165 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 221 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 15:37:11,166 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2024-12-02 15:37:11,177 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2024-12-02 15:37:11,177 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 78 states have internal predecessors, (90), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2024-12-02 15:37:11,179 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 122 transitions. [2024-12-02 15:37:11,179 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 122 transitions. Word has length 23 [2024-12-02 15:37:11,179 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:37:11,179 INFO L471 AbstractCegarLoop]: Abstraction has 94 states and 122 transitions. [2024-12-02 15:37:11,180 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 15:37:11,180 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 122 transitions. [2024-12-02 15:37:11,181 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2024-12-02 15:37:11,181 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:37:11,182 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:37:11,182 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-12-02 15:37:11,182 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:37:11,183 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:37:11,183 INFO L85 PathProgramCache]: Analyzing trace with hash 2137177224, now seen corresponding path program 1 times [2024-12-02 15:37:11,183 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:37:11,183 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2097152303] [2024-12-02 15:37:11,183 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:37:11,183 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:37:11,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:37:11,343 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 15:37:11,343 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:37:11,343 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2097152303] [2024-12-02 15:37:11,343 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2097152303] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:37:11,343 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:37:11,343 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-12-02 15:37:11,344 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1492375030] [2024-12-02 15:37:11,344 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:37:11,344 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 15:37:11,344 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:37:11,345 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 15:37:11,345 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2024-12-02 15:37:11,345 INFO L87 Difference]: Start difference. First operand 94 states and 122 transitions. Second operand has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 6 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 15:37:11,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:37:11,645 INFO L93 Difference]: Finished difference Result 307 states and 405 transitions. [2024-12-02 15:37:11,646 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-12-02 15:37:11,646 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 6 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2024-12-02 15:37:11,646 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:37:11,649 INFO L225 Difference]: With dead ends: 307 [2024-12-02 15:37:11,649 INFO L226 Difference]: Without dead ends: 220 [2024-12-02 15:37:11,650 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2024-12-02 15:37:11,651 INFO L435 NwaCegarLoop]: 133 mSDtfsCounter, 214 mSDsluCounter, 363 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 214 SdHoareTripleChecker+Valid, 496 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-12-02 15:37:11,651 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [214 Valid, 496 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-12-02 15:37:11,653 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220 states. [2024-12-02 15:37:11,681 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 220 to 214. [2024-12-02 15:37:11,682 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 214 states, 153 states have (on average 1.3529411764705883) internal successors, (207), 175 states have internal predecessors, (207), 37 states have call successors, (37), 23 states have call predecessors, (37), 23 states have return successors, (38), 25 states have call predecessors, (38), 37 states have call successors, (38) [2024-12-02 15:37:11,684 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 282 transitions. [2024-12-02 15:37:11,685 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 282 transitions. Word has length 28 [2024-12-02 15:37:11,685 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:37:11,685 INFO L471 AbstractCegarLoop]: Abstraction has 214 states and 282 transitions. [2024-12-02 15:37:11,685 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 6 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 15:37:11,685 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 282 transitions. [2024-12-02 15:37:11,687 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2024-12-02 15:37:11,687 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:37:11,687 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:37:11,687 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-12-02 15:37:11,688 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:37:11,688 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:37:11,688 INFO L85 PathProgramCache]: Analyzing trace with hash 502537654, now seen corresponding path program 1 times [2024-12-02 15:37:11,688 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:37:11,689 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1852049508] [2024-12-02 15:37:11,689 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:37:11,689 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:37:11,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:37:11,816 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 15:37:11,816 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:37:11,816 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1852049508] [2024-12-02 15:37:11,816 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1852049508] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:37:11,816 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:37:11,816 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 15:37:11,816 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [186918390] [2024-12-02 15:37:11,817 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:37:11,817 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 15:37:11,817 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:37:11,817 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 15:37:11,818 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 15:37:11,818 INFO L87 Difference]: Start difference. First operand 214 states and 282 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 15:37:11,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:37:11,929 INFO L93 Difference]: Finished difference Result 516 states and 696 transitions. [2024-12-02 15:37:11,930 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 15:37:11,930 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2024-12-02 15:37:11,930 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:37:11,933 INFO L225 Difference]: With dead ends: 516 [2024-12-02 15:37:11,933 INFO L226 Difference]: Without dead ends: 309 [2024-12-02 15:37:11,935 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-12-02 15:37:11,936 INFO L435 NwaCegarLoop]: 116 mSDtfsCounter, 67 mSDsluCounter, 307 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 423 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 15:37:11,937 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 423 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 15:37:11,938 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 309 states. [2024-12-02 15:37:11,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 309 to 307. [2024-12-02 15:37:11,994 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 307 states, 222 states have (on average 1.2882882882882882) internal successors, (286), 243 states have internal predecessors, (286), 46 states have call successors, (46), 38 states have call predecessors, (46), 38 states have return successors, (60), 41 states have call predecessors, (60), 46 states have call successors, (60) [2024-12-02 15:37:11,997 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 307 states to 307 states and 392 transitions. [2024-12-02 15:37:11,998 INFO L78 Accepts]: Start accepts. Automaton has 307 states and 392 transitions. Word has length 31 [2024-12-02 15:37:11,998 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:37:11,998 INFO L471 AbstractCegarLoop]: Abstraction has 307 states and 392 transitions. [2024-12-02 15:37:11,999 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-12-02 15:37:11,999 INFO L276 IsEmpty]: Start isEmpty. Operand 307 states and 392 transitions. [2024-12-02 15:37:12,001 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2024-12-02 15:37:12,001 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:37:12,001 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:37:12,002 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-12-02 15:37:12,002 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:37:12,002 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:37:12,003 INFO L85 PathProgramCache]: Analyzing trace with hash -1073240713, now seen corresponding path program 1 times [2024-12-02 15:37:12,003 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:37:12,003 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1249691227] [2024-12-02 15:37:12,003 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:37:12,003 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:37:12,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:37:12,109 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 15:37:12,109 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:37:12,110 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1249691227] [2024-12-02 15:37:12,110 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1249691227] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:37:12,110 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:37:12,110 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 15:37:12,110 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1044759886] [2024-12-02 15:37:12,110 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:37:12,110 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 15:37:12,111 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:37:12,111 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 15:37:12,111 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 15:37:12,111 INFO L87 Difference]: Start difference. First operand 307 states and 392 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-12-02 15:37:12,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:37:12,165 INFO L93 Difference]: Finished difference Result 613 states and 811 transitions. [2024-12-02 15:37:12,166 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 15:37:12,166 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2024-12-02 15:37:12,166 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:37:12,169 INFO L225 Difference]: With dead ends: 613 [2024-12-02 15:37:12,170 INFO L226 Difference]: Without dead ends: 313 [2024-12-02 15:37:12,171 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 15:37:12,172 INFO L435 NwaCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 351 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 470 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 15:37:12,173 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 470 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 15:37:12,174 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 313 states. [2024-12-02 15:37:12,206 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 313 to 313. [2024-12-02 15:37:12,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 313 states, 228 states have (on average 1.280701754385965) internal successors, (292), 249 states have internal predecessors, (292), 46 states have call successors, (46), 38 states have call predecessors, (46), 38 states have return successors, (60), 41 states have call predecessors, (60), 46 states have call successors, (60) [2024-12-02 15:37:12,210 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 313 states to 313 states and 398 transitions. [2024-12-02 15:37:12,211 INFO L78 Accepts]: Start accepts. Automaton has 313 states and 398 transitions. Word has length 59 [2024-12-02 15:37:12,211 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:37:12,211 INFO L471 AbstractCegarLoop]: Abstraction has 313 states and 398 transitions. [2024-12-02 15:37:12,212 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-12-02 15:37:12,212 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 398 transitions. [2024-12-02 15:37:12,214 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2024-12-02 15:37:12,214 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:37:12,214 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:37:12,215 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-12-02 15:37:12,215 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:37:12,215 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:37:12,216 INFO L85 PathProgramCache]: Analyzing trace with hash -798481099, now seen corresponding path program 1 times [2024-12-02 15:37:12,216 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:37:12,216 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1419497709] [2024-12-02 15:37:12,216 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:37:12,216 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:37:12,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:37:12,310 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 15:37:12,310 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:37:12,311 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1419497709] [2024-12-02 15:37:12,311 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1419497709] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:37:12,311 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:37:12,311 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 15:37:12,311 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [742827033] [2024-12-02 15:37:12,311 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:37:12,311 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 15:37:12,312 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:37:12,312 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 15:37:12,312 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 15:37:12,312 INFO L87 Difference]: Start difference. First operand 313 states and 398 transitions. Second operand has 4 states, 4 states have (on average 11.5) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-12-02 15:37:12,360 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:37:12,360 INFO L93 Difference]: Finished difference Result 623 states and 821 transitions. [2024-12-02 15:37:12,361 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 15:37:12,361 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2024-12-02 15:37:12,362 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:37:12,364 INFO L225 Difference]: With dead ends: 623 [2024-12-02 15:37:12,365 INFO L226 Difference]: Without dead ends: 317 [2024-12-02 15:37:12,366 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 15:37:12,367 INFO L435 NwaCegarLoop]: 120 mSDtfsCounter, 0 mSDsluCounter, 234 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 354 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 15:37:12,367 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 354 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 15:37:12,369 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 317 states. [2024-12-02 15:37:12,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 317 to 317. [2024-12-02 15:37:12,400 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 317 states, 232 states have (on average 1.2758620689655173) internal successors, (296), 253 states have internal predecessors, (296), 46 states have call successors, (46), 38 states have call predecessors, (46), 38 states have return successors, (60), 41 states have call predecessors, (60), 46 states have call successors, (60) [2024-12-02 15:37:12,404 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 317 states to 317 states and 402 transitions. [2024-12-02 15:37:12,405 INFO L78 Accepts]: Start accepts. Automaton has 317 states and 402 transitions. Word has length 59 [2024-12-02 15:37:12,405 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:37:12,405 INFO L471 AbstractCegarLoop]: Abstraction has 317 states and 402 transitions. [2024-12-02 15:37:12,405 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-12-02 15:37:12,405 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 402 transitions. [2024-12-02 15:37:12,406 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2024-12-02 15:37:12,407 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:37:12,407 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:37:12,407 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-12-02 15:37:12,407 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:37:12,408 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:37:12,408 INFO L85 PathProgramCache]: Analyzing trace with hash 1252502899, now seen corresponding path program 1 times [2024-12-02 15:37:12,408 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:37:12,408 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1957053002] [2024-12-02 15:37:12,408 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:37:12,408 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:37:12,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:37:12,536 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-12-02 15:37:12,536 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:37:12,536 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1957053002] [2024-12-02 15:37:12,536 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1957053002] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:37:12,536 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:37:12,536 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-12-02 15:37:12,536 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1800368917] [2024-12-02 15:37:12,536 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:37:12,537 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-12-02 15:37:12,537 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:37:12,537 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-12-02 15:37:12,537 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 15:37:12,538 INFO L87 Difference]: Start difference. First operand 317 states and 402 transitions. Second operand has 4 states, 4 states have (on average 11.5) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2024-12-02 15:37:12,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:37:12,737 INFO L93 Difference]: Finished difference Result 1038 states and 1363 transitions. [2024-12-02 15:37:12,738 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-12-02 15:37:12,738 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 59 [2024-12-02 15:37:12,738 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:37:12,744 INFO L225 Difference]: With dead ends: 1038 [2024-12-02 15:37:12,744 INFO L226 Difference]: Without dead ends: 728 [2024-12-02 15:37:12,746 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-12-02 15:37:12,747 INFO L435 NwaCegarLoop]: 202 mSDtfsCounter, 153 mSDsluCounter, 195 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 153 SdHoareTripleChecker+Valid, 397 SdHoareTripleChecker+Invalid, 74 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 15:37:12,747 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [153 Valid, 397 Invalid, 74 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 15:37:12,748 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 728 states. [2024-12-02 15:37:12,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 728 to 714. [2024-12-02 15:37:12,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 714 states, 523 states have (on average 1.2562141491395793) internal successors, (657), 563 states have internal predecessors, (657), 101 states have call successors, (101), 87 states have call predecessors, (101), 89 states have return successors, (158), 93 states have call predecessors, (158), 101 states have call successors, (158) [2024-12-02 15:37:12,841 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 714 states to 714 states and 916 transitions. [2024-12-02 15:37:12,842 INFO L78 Accepts]: Start accepts. Automaton has 714 states and 916 transitions. Word has length 59 [2024-12-02 15:37:12,842 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:37:12,842 INFO L471 AbstractCegarLoop]: Abstraction has 714 states and 916 transitions. [2024-12-02 15:37:12,842 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2024-12-02 15:37:12,843 INFO L276 IsEmpty]: Start isEmpty. Operand 714 states and 916 transitions. [2024-12-02 15:37:12,844 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2024-12-02 15:37:12,845 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:37:12,845 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:37:12,845 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-12-02 15:37:12,845 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:37:12,846 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:37:12,846 INFO L85 PathProgramCache]: Analyzing trace with hash -1272377383, now seen corresponding path program 1 times [2024-12-02 15:37:12,846 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:37:12,846 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [81147370] [2024-12-02 15:37:12,846 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:37:12,846 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:37:12,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:37:12,976 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-12-02 15:37:12,976 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:37:12,976 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [81147370] [2024-12-02 15:37:12,976 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [81147370] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:37:12,976 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 15:37:12,976 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-12-02 15:37:12,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1711748379] [2024-12-02 15:37:12,977 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:37:12,977 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 15:37:12,977 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:37:12,978 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 15:37:12,978 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-12-02 15:37:12,978 INFO L87 Difference]: Start difference. First operand 714 states and 916 transitions. Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2024-12-02 15:37:13,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:37:13,280 INFO L93 Difference]: Finished difference Result 2100 states and 2766 transitions. [2024-12-02 15:37:13,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-12-02 15:37:13,281 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 63 [2024-12-02 15:37:13,282 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:37:13,294 INFO L225 Difference]: With dead ends: 2100 [2024-12-02 15:37:13,294 INFO L226 Difference]: Without dead ends: 1393 [2024-12-02 15:37:13,298 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2024-12-02 15:37:13,299 INFO L435 NwaCegarLoop]: 120 mSDtfsCounter, 91 mSDsluCounter, 426 mSDsCounter, 0 mSdLazyCounter, 60 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 546 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 60 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 15:37:13,299 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [93 Valid, 546 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 60 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 15:37:13,302 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1393 states. [2024-12-02 15:37:13,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1393 to 1393. [2024-12-02 15:37:13,490 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1393 states, 1012 states have (on average 1.2351778656126482) internal successors, (1250), 1091 states have internal predecessors, (1250), 202 states have call successors, (202), 174 states have call predecessors, (202), 178 states have return successors, (329), 186 states have call predecessors, (329), 202 states have call successors, (329) [2024-12-02 15:37:13,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1393 states to 1393 states and 1781 transitions. [2024-12-02 15:37:13,507 INFO L78 Accepts]: Start accepts. Automaton has 1393 states and 1781 transitions. Word has length 63 [2024-12-02 15:37:13,507 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:37:13,508 INFO L471 AbstractCegarLoop]: Abstraction has 1393 states and 1781 transitions. [2024-12-02 15:37:13,508 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2024-12-02 15:37:13,508 INFO L276 IsEmpty]: Start isEmpty. Operand 1393 states and 1781 transitions. [2024-12-02 15:37:13,513 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2024-12-02 15:37:13,513 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:37:13,514 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:37:13,514 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-12-02 15:37:13,514 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:37:13,514 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:37:13,515 INFO L85 PathProgramCache]: Analyzing trace with hash -1549626595, now seen corresponding path program 1 times [2024-12-02 15:37:13,515 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:37:13,515 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [754638974] [2024-12-02 15:37:13,515 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:37:13,515 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:37:13,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:37:13,792 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-12-02 15:37:13,792 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:37:13,792 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [754638974] [2024-12-02 15:37:13,792 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [754638974] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 15:37:13,792 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1754999198] [2024-12-02 15:37:13,792 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:37:13,792 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 15:37:13,792 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 15:37:13,796 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 15:37:13,798 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-12-02 15:37:13,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:37:13,903 INFO L256 TraceCheckSpWp]: Trace formula consists of 248 conjuncts, 9 conjuncts are in the unsatisfiable core [2024-12-02 15:37:13,912 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 15:37:14,191 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 15:37:14,191 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-12-02 15:37:14,191 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1754999198] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:37:14,191 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-12-02 15:37:14,191 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [12] total 18 [2024-12-02 15:37:14,192 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1599859217] [2024-12-02 15:37:14,192 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:37:14,192 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-12-02 15:37:14,192 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:37:14,193 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-12-02 15:37:14,193 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=46, Invalid=260, Unknown=0, NotChecked=0, Total=306 [2024-12-02 15:37:14,194 INFO L87 Difference]: Start difference. First operand 1393 states and 1781 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2024-12-02 15:37:14,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:37:14,577 INFO L93 Difference]: Finished difference Result 2775 states and 3559 transitions. [2024-12-02 15:37:14,578 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-12-02 15:37:14,578 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) Word has length 67 [2024-12-02 15:37:14,579 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:37:14,588 INFO L225 Difference]: With dead ends: 2775 [2024-12-02 15:37:14,588 INFO L226 Difference]: Without dead ends: 1389 [2024-12-02 15:37:14,593 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=46, Invalid=260, Unknown=0, NotChecked=0, Total=306 [2024-12-02 15:37:14,594 INFO L435 NwaCegarLoop]: 222 mSDtfsCounter, 78 mSDsluCounter, 921 mSDsCounter, 0 mSdLazyCounter, 213 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 1143 SdHoareTripleChecker+Invalid, 214 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 213 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-12-02 15:37:14,594 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 1143 Invalid, 214 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 213 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-12-02 15:37:14,596 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1389 states. [2024-12-02 15:37:14,697 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1389 to 1389. [2024-12-02 15:37:14,700 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1389 states, 1008 states have (on average 1.2212301587301588) internal successors, (1231), 1085 states have internal predecessors, (1231), 202 states have call successors, (202), 174 states have call predecessors, (202), 178 states have return successors, (298), 186 states have call predecessors, (298), 202 states have call successors, (298) [2024-12-02 15:37:14,711 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1389 states to 1389 states and 1731 transitions. [2024-12-02 15:37:14,714 INFO L78 Accepts]: Start accepts. Automaton has 1389 states and 1731 transitions. Word has length 67 [2024-12-02 15:37:14,714 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:37:14,714 INFO L471 AbstractCegarLoop]: Abstraction has 1389 states and 1731 transitions. [2024-12-02 15:37:14,714 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2024-12-02 15:37:14,714 INFO L276 IsEmpty]: Start isEmpty. Operand 1389 states and 1731 transitions. [2024-12-02 15:37:14,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2024-12-02 15:37:14,722 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 15:37:14,723 INFO L218 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:37:14,733 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-12-02 15:37:14,923 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 15:37:14,923 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 15:37:14,924 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 15:37:14,924 INFO L85 PathProgramCache]: Analyzing trace with hash 730583528, now seen corresponding path program 1 times [2024-12-02 15:37:14,924 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 15:37:14,924 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1323354221] [2024-12-02 15:37:14,924 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:37:14,924 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 15:37:14,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:37:15,207 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 19 proven. 2 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2024-12-02 15:37:15,208 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 15:37:15,208 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1323354221] [2024-12-02 15:37:15,208 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1323354221] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 15:37:15,208 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1572187052] [2024-12-02 15:37:15,208 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 15:37:15,208 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 15:37:15,208 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 15:37:15,210 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 15:37:15,212 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-12-02 15:37:15,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 15:37:15,333 INFO L256 TraceCheckSpWp]: Trace formula consists of 375 conjuncts, 9 conjuncts are in the unsatisfiable core [2024-12-02 15:37:15,338 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 15:37:15,487 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2024-12-02 15:37:15,487 INFO L308 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-12-02 15:37:15,487 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1572187052] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 15:37:15,487 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-12-02 15:37:15,487 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [11] total 17 [2024-12-02 15:37:15,488 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1467458964] [2024-12-02 15:37:15,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 15:37:15,488 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-12-02 15:37:15,488 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 15:37:15,489 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-12-02 15:37:15,489 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=230, Unknown=0, NotChecked=0, Total=272 [2024-12-02 15:37:15,489 INFO L87 Difference]: Start difference. First operand 1389 states and 1731 transitions. Second operand has 8 states, 8 states have (on average 10.875) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2024-12-02 15:37:15,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 15:37:15,747 INFO L93 Difference]: Finished difference Result 2345 states and 2951 transitions. [2024-12-02 15:37:15,748 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-12-02 15:37:15,748 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.875) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 121 [2024-12-02 15:37:15,749 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 15:37:15,751 INFO L225 Difference]: With dead ends: 2345 [2024-12-02 15:37:15,751 INFO L226 Difference]: Without dead ends: 0 [2024-12-02 15:37:15,758 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=54, Invalid=288, Unknown=0, NotChecked=0, Total=342 [2024-12-02 15:37:15,759 INFO L435 NwaCegarLoop]: 202 mSDtfsCounter, 69 mSDsluCounter, 803 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 1005 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 15:37:15,759 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 1005 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 15:37:15,760 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-12-02 15:37:15,760 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-12-02 15:37:15,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-12-02 15:37:15,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-12-02 15:37:15,761 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 121 [2024-12-02 15:37:15,762 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 15:37:15,762 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-12-02 15:37:15,762 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.875) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2024-12-02 15:37:15,762 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-12-02 15:37:15,762 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-12-02 15:37:15,765 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-12-02 15:37:15,776 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-12-02 15:37:15,966 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2024-12-02 15:37:15,968 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 15:37:15,970 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-12-02 15:37:21,029 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-12-02 15:37:21,040 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 03:37:21 BoogieIcfgContainer [2024-12-02 15:37:21,040 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-12-02 15:37:21,041 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-12-02 15:37:21,041 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-12-02 15:37:21,041 INFO L274 PluginConnector]: Witness Printer initialized [2024-12-02 15:37:21,041 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:37:10" (3/4) ... [2024-12-02 15:37:21,043 INFO L146 WitnessPrinter]: Generating witness for correct program [2024-12-02 15:37:21,047 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2024-12-02 15:37:21,047 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-12-02 15:37:21,047 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-12-02 15:37:21,048 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-12-02 15:37:21,048 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-12-02 15:37:21,048 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2024-12-02 15:37:21,048 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 15:37:21,048 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-12-02 15:37:21,048 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2024-12-02 15:37:21,048 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2024-12-02 15:37:21,052 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2024-12-02 15:37:21,053 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-12-02 15:37:21,053 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-12-02 15:37:21,053 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 15:37:21,053 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 15:37:21,151 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/witness.graphml [2024-12-02 15:37:21,151 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/witness.yml [2024-12-02 15:37:21,151 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-12-02 15:37:21,152 INFO L158 Benchmark]: Toolchain (without parser) took 11539.24ms. Allocated memory was 142.6MB in the beginning and 318.8MB in the end (delta: 176.2MB). Free memory was 116.1MB in the beginning and 145.9MB in the end (delta: -29.8MB). Peak memory consumption was 141.9MB. Max. memory is 16.1GB. [2024-12-02 15:37:21,152 INFO L158 Benchmark]: CDTParser took 0.39ms. Allocated memory is still 142.6MB. Free memory is still 83.1MB. There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 15:37:21,153 INFO L158 Benchmark]: CACSL2BoogieTranslator took 428.70ms. Allocated memory is still 142.6MB. Free memory was 115.9MB in the beginning and 97.0MB in the end (delta: 18.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-12-02 15:37:21,153 INFO L158 Benchmark]: Boogie Procedure Inliner took 36.85ms. Allocated memory is still 142.6MB. Free memory was 97.0MB in the beginning and 94.9MB in the end (delta: 2.1MB). There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 15:37:21,153 INFO L158 Benchmark]: Boogie Preprocessor took 41.39ms. Allocated memory is still 142.6MB. Free memory was 94.9MB in the beginning and 93.0MB in the end (delta: 1.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 15:37:21,153 INFO L158 Benchmark]: RCFGBuilder took 471.18ms. Allocated memory is still 142.6MB. Free memory was 93.0MB in the beginning and 74.9MB in the end (delta: 18.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-12-02 15:37:21,154 INFO L158 Benchmark]: TraceAbstraction took 10443.56ms. Allocated memory was 142.6MB in the beginning and 318.8MB in the end (delta: 176.2MB). Free memory was 74.2MB in the beginning and 151.1MB in the end (delta: -77.0MB). Peak memory consumption was 136.1MB. Max. memory is 16.1GB. [2024-12-02 15:37:21,154 INFO L158 Benchmark]: Witness Printer took 110.63ms. Allocated memory is still 318.8MB. Free memory was 151.1MB in the beginning and 145.9MB in the end (delta: 5.2MB). There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 15:37:21,156 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.39ms. Allocated memory is still 142.6MB. Free memory is still 83.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 428.70ms. Allocated memory is still 142.6MB. Free memory was 115.9MB in the beginning and 97.0MB in the end (delta: 18.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 36.85ms. Allocated memory is still 142.6MB. Free memory was 97.0MB in the beginning and 94.9MB in the end (delta: 2.1MB). There was no memory consumed. Max. memory is 16.1GB. * Boogie Preprocessor took 41.39ms. Allocated memory is still 142.6MB. Free memory was 94.9MB in the beginning and 93.0MB in the end (delta: 1.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * RCFGBuilder took 471.18ms. Allocated memory is still 142.6MB. Free memory was 93.0MB in the beginning and 74.9MB in the end (delta: 18.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 10443.56ms. Allocated memory was 142.6MB in the beginning and 318.8MB in the end (delta: 176.2MB). Free memory was 74.2MB in the beginning and 151.1MB in the end (delta: -77.0MB). Peak memory consumption was 136.1MB. Max. memory is 16.1GB. * Witness Printer took 110.63ms. Allocated memory is still 318.8MB. Free memory was 151.1MB in the beginning and 145.9MB in the end (delta: 5.2MB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [58] - GenericResultAtLocation [Line: 96]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [96] - GenericResultAtLocation [Line: 124]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [124] - GenericResultAtLocation [Line: 490]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [490] - GenericResultAtLocation [Line: 591]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [591] - GenericResultAtLocation [Line: 862]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [862] - GenericResultAtLocation [Line: 966]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [966] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 111 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.3s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 700 SdHoareTripleChecker+Valid, 0.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 689 mSDsluCounter, 5197 SdHoareTripleChecker+Invalid, 0.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3700 mSDsCounter, 24 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 643 IncrementalHoareTripleChecker+Invalid, 667 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 24 mSolverCounterUnsat, 1497 mSDtfsCounter, 643 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 257 GetRequests, 198 SyntacticMatches, 0 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1393occurred in iteration=8, InterpolantAutomatonStates: 52, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 10 MinimizatonAttempts, 22 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.7s InterpolantComputationTime, 721 NumberOfCodeBlocks, 721 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 709 ConstructedInterpolants, 0 QuantifiedInterpolants, 1231 SizeOfPredicates, 1 NumberOfNonLiveVariables, 623 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 12 InterpolantComputations, 10 PerfectInterpolantSequences, 110/114 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 976]: Location Invariant Derived location invariant: 0 - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) || (((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (splverifierCounter == 0))) || (((methaneLevelCritical == 0) && (splverifierCounter == 0)) && (0 != systemActive))) RESULT: Ultimate proved your program to be correct! [2024-12-02 15:37:21,178 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d8091088-1126-47c6-9329-a4b46d493d5e/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE