./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version d790fecc Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1 --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7573d0f26b9c64760f56bc1038037f99fa78fd69add5234955c16ce4082df45a --- Real Ultimate output --- This is Ultimate 0.3.0-dev-d790fec [2024-12-02 10:08:45,128 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-12-02 10:08:45,184 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-12-02 10:08:45,189 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-12-02 10:08:45,189 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-12-02 10:08:45,210 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-12-02 10:08:45,210 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-12-02 10:08:45,210 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-12-02 10:08:45,211 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-12-02 10:08:45,211 INFO L153 SettingsManager]: * Use memory slicer=true [2024-12-02 10:08:45,211 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-12-02 10:08:45,211 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-12-02 10:08:45,211 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-12-02 10:08:45,211 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-12-02 10:08:45,211 INFO L153 SettingsManager]: * Use SBE=true [2024-12-02 10:08:45,212 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-12-02 10:08:45,212 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-12-02 10:08:45,212 INFO L153 SettingsManager]: * sizeof long=4 [2024-12-02 10:08:45,212 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-12-02 10:08:45,212 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-12-02 10:08:45,212 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-12-02 10:08:45,212 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-12-02 10:08:45,212 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-12-02 10:08:45,212 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-12-02 10:08:45,212 INFO L153 SettingsManager]: * sizeof long double=12 [2024-12-02 10:08:45,212 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-12-02 10:08:45,213 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2024-12-02 10:08:45,213 INFO L153 SettingsManager]: * Use constant arrays=true [2024-12-02 10:08:45,213 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2024-12-02 10:08:45,213 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 10:08:45,213 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 10:08:45,213 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 10:08:45,213 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 10:08:45,213 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-12-02 10:08:45,213 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-12-02 10:08:45,213 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-12-02 10:08:45,213 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-12-02 10:08:45,213 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 10:08:45,214 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-12-02 10:08:45,214 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-12-02 10:08:45,214 INFO L153 SettingsManager]: * Compute procedure contracts=false [2024-12-02 10:08:45,214 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-12-02 10:08:45,214 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-12-02 10:08:45,214 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-12-02 10:08:45,214 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-12-02 10:08:45,214 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-12-02 10:08:45,214 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-12-02 10:08:45,214 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-12-02 10:08:45,214 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7573d0f26b9c64760f56bc1038037f99fa78fd69add5234955c16ce4082df45a [2024-12-02 10:08:45,452 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-12-02 10:08:45,460 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-12-02 10:08:45,463 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-12-02 10:08:45,464 INFO L270 PluginConnector]: Initializing CDTParser... [2024-12-02 10:08:45,464 INFO L274 PluginConnector]: CDTParser initialized [2024-12-02 10:08:45,465 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/../../sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c [2024-12-02 10:08:48,068 INFO L533 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/data/45045cb11/f22cfca3b34a4a61842013683afff93f/FLAGa5a073dff [2024-12-02 10:08:48,318 INFO L384 CDTParser]: Found 1 translation units. [2024-12-02 10:08:48,318 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c [2024-12-02 10:08:48,329 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/data/45045cb11/f22cfca3b34a4a61842013683afff93f/FLAGa5a073dff [2024-12-02 10:08:48,646 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/data/45045cb11/f22cfca3b34a4a61842013683afff93f [2024-12-02 10:08:48,648 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-12-02 10:08:48,649 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-12-02 10:08:48,650 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-12-02 10:08:48,650 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-12-02 10:08:48,653 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-12-02 10:08:48,653 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:48,654 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@173082e5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48, skipping insertion in model container [2024-12-02 10:08:48,654 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:48,672 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-12-02 10:08:48,876 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c[18691,18704] [2024-12-02 10:08:48,879 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 10:08:48,888 INFO L200 MainTranslator]: Completed pre-run [2024-12-02 10:08:48,896 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] [2024-12-02 10:08:48,898 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [118] [2024-12-02 10:08:48,898 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [343] [2024-12-02 10:08:48,898 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [371] [2024-12-02 10:08:48,898 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [474] [2024-12-02 10:08:48,898 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [512] [2024-12-02 10:08:48,898 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [608] [2024-12-02 10:08:48,898 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [974] [2024-12-02 10:08:48,947 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/sv-benchmarks/c/product-lines/minepump_spec4_product57.cil.c[18691,18704] [2024-12-02 10:08:48,948 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-12-02 10:08:48,966 INFO L204 MainTranslator]: Completed translation [2024-12-02 10:08:48,966 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48 WrapperNode [2024-12-02 10:08:48,966 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-12-02 10:08:48,967 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-12-02 10:08:48,967 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-12-02 10:08:48,967 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-12-02 10:08:48,974 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:48,985 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:49,002 INFO L138 Inliner]: procedures = 56, calls = 100, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 226 [2024-12-02 10:08:49,002 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-12-02 10:08:49,003 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-12-02 10:08:49,003 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-12-02 10:08:49,003 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-12-02 10:08:49,012 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:49,012 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:49,014 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:49,027 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2024-12-02 10:08:49,027 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:49,027 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:49,032 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:49,033 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:49,036 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:49,037 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:49,038 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:49,039 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-12-02 10:08:49,040 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-12-02 10:08:49,040 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-12-02 10:08:49,040 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-12-02 10:08:49,040 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48" (1/1) ... [2024-12-02 10:08:49,044 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-12-02 10:08:49,052 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 10:08:49,062 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-12-02 10:08:49,064 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-12-02 10:08:49,084 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-12-02 10:08:49,084 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2024-12-02 10:08:49,084 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2024-12-02 10:08:49,084 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2024-12-02 10:08:49,084 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2024-12-02 10:08:49,084 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2024-12-02 10:08:49,084 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2024-12-02 10:08:49,084 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 10:08:49,084 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 10:08:49,084 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2024-12-02 10:08:49,085 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2024-12-02 10:08:49,085 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-12-02 10:08:49,085 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2024-12-02 10:08:49,085 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2024-12-02 10:08:49,085 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-12-02 10:08:49,085 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-12-02 10:08:49,145 INFO L234 CfgBuilder]: Building ICFG [2024-12-02 10:08:49,146 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2024-12-02 10:08:49,358 INFO L? ?]: Removed 52 outVars from TransFormulas that were not future-live. [2024-12-02 10:08:49,358 INFO L283 CfgBuilder]: Performing block encoding [2024-12-02 10:08:49,369 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-12-02 10:08:49,369 INFO L312 CfgBuilder]: Removed 4 assume(true) statements. [2024-12-02 10:08:49,370 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 10:08:49 BoogieIcfgContainer [2024-12-02 10:08:49,370 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-12-02 10:08:49,372 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-12-02 10:08:49,372 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-12-02 10:08:49,376 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-12-02 10:08:49,376 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 10:08:48" (1/3) ... [2024-12-02 10:08:49,377 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@15aec733 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 10:08:49, skipping insertion in model container [2024-12-02 10:08:49,377 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 10:08:48" (2/3) ... [2024-12-02 10:08:49,377 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@15aec733 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 10:08:49, skipping insertion in model container [2024-12-02 10:08:49,377 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 10:08:49" (3/3) ... [2024-12-02 10:08:49,379 INFO L128 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product57.cil.c [2024-12-02 10:08:49,393 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-12-02 10:08:49,395 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec4_product57.cil.c that has 7 procedures, 84 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2024-12-02 10:08:49,445 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-12-02 10:08:49,457 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@393f0d63, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-12-02 10:08:49,457 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-12-02 10:08:49,460 INFO L276 IsEmpty]: Start isEmpty. Operand has 84 states, 66 states have (on average 1.4090909090909092) internal successors, (93), 74 states have internal predecessors, (93), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2024-12-02 10:08:49,467 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2024-12-02 10:08:49,467 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:08:49,467 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:08:49,468 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:08:49,471 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:08:49,471 INFO L85 PathProgramCache]: Analyzing trace with hash 314132648, now seen corresponding path program 1 times [2024-12-02 10:08:49,476 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:08:49,476 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1082000034] [2024-12-02 10:08:49,476 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:08:49,477 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:08:49,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:08:49,661 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 10:08:49,662 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:08:49,662 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1082000034] [2024-12-02 10:08:49,662 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1082000034] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:08:49,662 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:08:49,663 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-12-02 10:08:49,664 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1794682617] [2024-12-02 10:08:49,665 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:08:49,668 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-12-02 10:08:49,668 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:08:49,683 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-12-02 10:08:49,683 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 10:08:49,685 INFO L87 Difference]: Start difference. First operand has 84 states, 66 states have (on average 1.4090909090909092) internal successors, (93), 74 states have internal predecessors, (93), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-12-02 10:08:49,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:08:49,713 INFO L93 Difference]: Finished difference Result 148 states and 201 transitions. [2024-12-02 10:08:49,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-12-02 10:08:49,715 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2024-12-02 10:08:49,715 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:08:49,721 INFO L225 Difference]: With dead ends: 148 [2024-12-02 10:08:49,721 INFO L226 Difference]: Without dead ends: 67 [2024-12-02 10:08:49,723 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 10:08:49,725 INFO L435 NwaCegarLoop]: 90 mSDtfsCounter, 12 mSDsluCounter, 75 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 165 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 10:08:49,726 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 165 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 10:08:49,746 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2024-12-02 10:08:49,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2024-12-02 10:08:49,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 54 states have (on average 1.3518518518518519) internal successors, (73), 61 states have internal predecessors, (73), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2024-12-02 10:08:49,767 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 87 transitions. [2024-12-02 10:08:49,768 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 87 transitions. Word has length 19 [2024-12-02 10:08:49,769 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:08:49,769 INFO L471 AbstractCegarLoop]: Abstraction has 67 states and 87 transitions. [2024-12-02 10:08:49,769 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-12-02 10:08:49,769 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 87 transitions. [2024-12-02 10:08:49,770 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2024-12-02 10:08:49,771 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:08:49,771 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:08:49,771 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-12-02 10:08:49,771 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:08:49,772 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:08:49,772 INFO L85 PathProgramCache]: Analyzing trace with hash -1306253350, now seen corresponding path program 1 times [2024-12-02 10:08:49,772 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:08:49,772 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [956217988] [2024-12-02 10:08:49,772 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:08:49,772 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:08:49,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:08:49,915 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 10:08:49,915 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:08:49,915 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [956217988] [2024-12-02 10:08:49,915 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [956217988] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:08:49,915 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:08:49,915 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 10:08:49,916 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1744643095] [2024-12-02 10:08:49,916 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:08:49,917 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 10:08:49,917 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:08:49,917 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 10:08:49,917 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2024-12-02 10:08:49,918 INFO L87 Difference]: Start difference. First operand 67 states and 87 transitions. Second operand has 6 states, 6 states have (on average 3.6666666666666665) internal successors, (22), 5 states have internal predecessors, (22), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-12-02 10:08:50,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:08:50,013 INFO L93 Difference]: Finished difference Result 127 states and 168 transitions. [2024-12-02 10:08:50,013 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 10:08:50,014 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.6666666666666665) internal successors, (22), 5 states have internal predecessors, (22), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2024-12-02 10:08:50,014 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:08:50,015 INFO L225 Difference]: With dead ends: 127 [2024-12-02 10:08:50,015 INFO L226 Difference]: Without dead ends: 67 [2024-12-02 10:08:50,015 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2024-12-02 10:08:50,016 INFO L435 NwaCegarLoop]: 83 mSDtfsCounter, 83 mSDsluCounter, 134 mSDsCounter, 0 mSdLazyCounter, 39 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 217 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 39 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 10:08:50,017 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 217 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 39 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 10:08:50,017 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2024-12-02 10:08:50,024 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2024-12-02 10:08:50,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 54 states have (on average 1.3333333333333333) internal successors, (72), 61 states have internal predecessors, (72), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2024-12-02 10:08:50,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 86 transitions. [2024-12-02 10:08:50,025 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 86 transitions. Word has length 23 [2024-12-02 10:08:50,025 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:08:50,026 INFO L471 AbstractCegarLoop]: Abstraction has 67 states and 86 transitions. [2024-12-02 10:08:50,026 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.6666666666666665) internal successors, (22), 5 states have internal predecessors, (22), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-12-02 10:08:50,026 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 86 transitions. [2024-12-02 10:08:50,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2024-12-02 10:08:50,027 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:08:50,027 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:08:50,027 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-12-02 10:08:50,027 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:08:50,028 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:08:50,028 INFO L85 PathProgramCache]: Analyzing trace with hash 1156034830, now seen corresponding path program 1 times [2024-12-02 10:08:50,028 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:08:50,028 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1080962904] [2024-12-02 10:08:50,028 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:08:50,028 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:08:50,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:08:50,077 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 10:08:50,077 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:08:50,077 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1080962904] [2024-12-02 10:08:50,077 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1080962904] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:08:50,077 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:08:50,077 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-12-02 10:08:50,077 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [935633409] [2024-12-02 10:08:50,078 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:08:50,078 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-12-02 10:08:50,078 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:08:50,078 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-12-02 10:08:50,078 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 10:08:50,079 INFO L87 Difference]: Start difference. First operand 67 states and 86 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-12-02 10:08:50,120 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:08:50,120 INFO L93 Difference]: Finished difference Result 165 states and 218 transitions. [2024-12-02 10:08:50,121 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-12-02 10:08:50,121 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2024-12-02 10:08:50,121 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:08:50,122 INFO L225 Difference]: With dead ends: 165 [2024-12-02 10:08:50,122 INFO L226 Difference]: Without dead ends: 105 [2024-12-02 10:08:50,123 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-12-02 10:08:50,124 INFO L435 NwaCegarLoop]: 83 mSDtfsCounter, 66 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 10:08:50,124 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 137 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 10:08:50,125 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105 states. [2024-12-02 10:08:50,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105 to 103. [2024-12-02 10:08:50,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 82 states have (on average 1.3170731707317074) internal successors, (108), 90 states have internal predecessors, (108), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (14), 10 states have call predecessors, (14), 10 states have call successors, (14) [2024-12-02 10:08:50,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 132 transitions. [2024-12-02 10:08:50,139 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 132 transitions. Word has length 31 [2024-12-02 10:08:50,139 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:08:50,140 INFO L471 AbstractCegarLoop]: Abstraction has 103 states and 132 transitions. [2024-12-02 10:08:50,140 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-12-02 10:08:50,140 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 132 transitions. [2024-12-02 10:08:50,141 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2024-12-02 10:08:50,141 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:08:50,141 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:08:50,141 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-12-02 10:08:50,142 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:08:50,142 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:08:50,142 INFO L85 PathProgramCache]: Analyzing trace with hash 42951818, now seen corresponding path program 1 times [2024-12-02 10:08:50,142 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:08:50,142 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1232812121] [2024-12-02 10:08:50,142 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:08:50,142 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:08:50,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:08:50,254 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 10:08:50,254 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:08:50,254 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1232812121] [2024-12-02 10:08:50,254 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1232812121] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:08:50,254 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:08:50,254 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-12-02 10:08:50,254 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [915290417] [2024-12-02 10:08:50,255 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:08:50,255 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 10:08:50,255 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:08:50,256 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 10:08:50,256 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-12-02 10:08:50,256 INFO L87 Difference]: Start difference. First operand 103 states and 132 transitions. Second operand has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 6 states have internal predecessors, (34), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 10:08:50,294 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:08:50,294 INFO L93 Difference]: Finished difference Result 201 states and 268 transitions. [2024-12-02 10:08:50,295 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-12-02 10:08:50,295 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 6 states have internal predecessors, (34), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 39 [2024-12-02 10:08:50,295 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:08:50,296 INFO L225 Difference]: With dead ends: 201 [2024-12-02 10:08:50,296 INFO L226 Difference]: Without dead ends: 105 [2024-12-02 10:08:50,297 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-12-02 10:08:50,297 INFO L435 NwaCegarLoop]: 82 mSDtfsCounter, 0 mSDsluCounter, 320 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 402 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 10:08:50,298 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 402 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 10:08:50,298 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105 states. [2024-12-02 10:08:50,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105 to 105. [2024-12-02 10:08:50,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 84 states have (on average 1.3095238095238095) internal successors, (110), 92 states have internal predecessors, (110), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (14), 10 states have call predecessors, (14), 10 states have call successors, (14) [2024-12-02 10:08:50,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 134 transitions. [2024-12-02 10:08:50,310 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 134 transitions. Word has length 39 [2024-12-02 10:08:50,310 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:08:50,310 INFO L471 AbstractCegarLoop]: Abstraction has 105 states and 134 transitions. [2024-12-02 10:08:50,310 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.666666666666667) internal successors, (34), 6 states have internal predecessors, (34), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 10:08:50,310 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 134 transitions. [2024-12-02 10:08:50,311 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2024-12-02 10:08:50,311 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:08:50,311 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:08:50,311 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-12-02 10:08:50,311 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:08:50,311 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:08:50,312 INFO L85 PathProgramCache]: Analyzing trace with hash 1064020172, now seen corresponding path program 1 times [2024-12-02 10:08:50,312 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:08:50,312 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1694583702] [2024-12-02 10:08:50,312 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:08:50,312 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:08:50,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:08:50,417 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 10:08:50,417 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:08:50,418 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1694583702] [2024-12-02 10:08:50,418 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1694583702] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:08:50,418 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:08:50,418 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 10:08:50,418 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [711536415] [2024-12-02 10:08:50,418 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:08:50,419 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 10:08:50,419 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:08:50,419 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 10:08:50,419 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 10:08:50,419 INFO L87 Difference]: Start difference. First operand 105 states and 134 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 10:08:50,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:08:50,485 INFO L93 Difference]: Finished difference Result 274 states and 365 transitions. [2024-12-02 10:08:50,485 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 10:08:50,486 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 39 [2024-12-02 10:08:50,486 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:08:50,487 INFO L225 Difference]: With dead ends: 274 [2024-12-02 10:08:50,487 INFO L226 Difference]: Without dead ends: 176 [2024-12-02 10:08:50,488 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-12-02 10:08:50,489 INFO L435 NwaCegarLoop]: 80 mSDtfsCounter, 38 mSDsluCounter, 230 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 310 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 10:08:50,489 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 310 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 10:08:50,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 176 states. [2024-12-02 10:08:50,508 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 176 to 176. [2024-12-02 10:08:50,509 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 176 states, 140 states have (on average 1.2785714285714285) internal successors, (179), 151 states have internal predecessors, (179), 18 states have call successors, (18), 18 states have call predecessors, (18), 17 states have return successors, (27), 17 states have call predecessors, (27), 18 states have call successors, (27) [2024-12-02 10:08:50,511 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 176 states to 176 states and 224 transitions. [2024-12-02 10:08:50,511 INFO L78 Accepts]: Start accepts. Automaton has 176 states and 224 transitions. Word has length 39 [2024-12-02 10:08:50,511 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:08:50,511 INFO L471 AbstractCegarLoop]: Abstraction has 176 states and 224 transitions. [2024-12-02 10:08:50,511 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-12-02 10:08:50,511 INFO L276 IsEmpty]: Start isEmpty. Operand 176 states and 224 transitions. [2024-12-02 10:08:50,513 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2024-12-02 10:08:50,513 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:08:50,513 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:08:50,513 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-12-02 10:08:50,513 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:08:50,513 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:08:50,514 INFO L85 PathProgramCache]: Analyzing trace with hash -879204302, now seen corresponding path program 1 times [2024-12-02 10:08:50,514 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:08:50,514 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1278993651] [2024-12-02 10:08:50,514 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:08:50,514 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:08:50,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:08:50,610 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 10:08:50,610 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:08:50,610 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1278993651] [2024-12-02 10:08:50,610 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1278993651] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:08:50,611 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:08:50,611 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-12-02 10:08:50,611 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1644254107] [2024-12-02 10:08:50,611 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:08:50,611 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 10:08:50,611 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:08:50,612 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 10:08:50,612 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-12-02 10:08:50,612 INFO L87 Difference]: Start difference. First operand 176 states and 224 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-12-02 10:08:50,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:08:50,793 INFO L93 Difference]: Finished difference Result 200 states and 252 transitions. [2024-12-02 10:08:50,793 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-12-02 10:08:50,793 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 43 [2024-12-02 10:08:50,794 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:08:50,795 INFO L225 Difference]: With dead ends: 200 [2024-12-02 10:08:50,795 INFO L226 Difference]: Without dead ends: 198 [2024-12-02 10:08:50,796 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2024-12-02 10:08:50,797 INFO L435 NwaCegarLoop]: 65 mSDtfsCounter, 117 mSDsluCounter, 216 mSDsCounter, 0 mSdLazyCounter, 110 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 281 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 110 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 10:08:50,797 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 281 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 110 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 10:08:50,798 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 198 states. [2024-12-02 10:08:50,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 198 to 196. [2024-12-02 10:08:50,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 196 states, 157 states have (on average 1.2611464968152866) internal successors, (198), 168 states have internal predecessors, (198), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (32), 18 states have call predecessors, (32), 18 states have call successors, (32) [2024-12-02 10:08:50,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 248 transitions. [2024-12-02 10:08:50,820 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 248 transitions. Word has length 43 [2024-12-02 10:08:50,820 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:08:50,820 INFO L471 AbstractCegarLoop]: Abstraction has 196 states and 248 transitions. [2024-12-02 10:08:50,820 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 6 states have internal predecessors, (36), 3 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-12-02 10:08:50,820 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 248 transitions. [2024-12-02 10:08:50,821 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-12-02 10:08:50,821 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:08:50,822 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:08:50,822 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-12-02 10:08:50,822 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:08:50,825 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:08:50,825 INFO L85 PathProgramCache]: Analyzing trace with hash -166493697, now seen corresponding path program 1 times [2024-12-02 10:08:50,825 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:08:50,825 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1651705027] [2024-12-02 10:08:50,825 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:08:50,826 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:08:50,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:08:50,897 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 10:08:50,897 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:08:50,897 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1651705027] [2024-12-02 10:08:50,897 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1651705027] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:08:50,897 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:08:50,897 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 10:08:50,897 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1680125383] [2024-12-02 10:08:50,897 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:08:50,897 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 10:08:50,897 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:08:50,898 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 10:08:50,898 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 10:08:50,898 INFO L87 Difference]: Start difference. First operand 196 states and 248 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-12-02 10:08:50,936 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:08:50,937 INFO L93 Difference]: Finished difference Result 356 states and 459 transitions. [2024-12-02 10:08:50,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 10:08:50,937 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 45 [2024-12-02 10:08:50,937 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:08:50,939 INFO L225 Difference]: With dead ends: 356 [2024-12-02 10:08:50,939 INFO L226 Difference]: Without dead ends: 167 [2024-12-02 10:08:50,940 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 10:08:50,940 INFO L435 NwaCegarLoop]: 83 mSDtfsCounter, 0 mSDsluCounter, 243 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 326 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 10:08:50,941 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 326 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 10:08:50,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2024-12-02 10:08:50,956 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 167. [2024-12-02 10:08:50,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 167 states, 134 states have (on average 1.2462686567164178) internal successors, (167), 143 states have internal predecessors, (167), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (22), 15 states have call predecessors, (22), 15 states have call successors, (22) [2024-12-02 10:08:50,957 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 204 transitions. [2024-12-02 10:08:50,958 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 204 transitions. Word has length 45 [2024-12-02 10:08:50,958 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:08:50,958 INFO L471 AbstractCegarLoop]: Abstraction has 167 states and 204 transitions. [2024-12-02 10:08:50,958 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-12-02 10:08:50,958 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 204 transitions. [2024-12-02 10:08:50,959 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-12-02 10:08:50,959 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:08:50,959 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:08:50,959 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-12-02 10:08:50,960 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:08:50,960 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:08:50,960 INFO L85 PathProgramCache]: Analyzing trace with hash 1316680443, now seen corresponding path program 1 times [2024-12-02 10:08:50,960 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:08:50,960 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1977270533] [2024-12-02 10:08:50,960 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:08:50,960 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:08:50,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:08:51,076 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 10:08:51,076 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:08:51,076 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1977270533] [2024-12-02 10:08:51,076 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1977270533] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:08:51,077 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:08:51,077 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 10:08:51,077 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [338396989] [2024-12-02 10:08:51,077 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:08:51,077 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 10:08:51,077 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:08:51,078 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 10:08:51,078 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 10:08:51,078 INFO L87 Difference]: Start difference. First operand 167 states and 204 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-12-02 10:08:51,143 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:08:51,143 INFO L93 Difference]: Finished difference Result 344 states and 453 transitions. [2024-12-02 10:08:51,144 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 10:08:51,144 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 45 [2024-12-02 10:08:51,144 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:08:51,145 INFO L225 Difference]: With dead ends: 344 [2024-12-02 10:08:51,145 INFO L226 Difference]: Without dead ends: 223 [2024-12-02 10:08:51,146 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-12-02 10:08:51,146 INFO L435 NwaCegarLoop]: 131 mSDtfsCounter, 41 mSDsluCounter, 324 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 455 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 10:08:51,147 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 455 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 10:08:51,147 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2024-12-02 10:08:51,164 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 223. [2024-12-02 10:08:51,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 223 states, 175 states have (on average 1.24) internal successors, (217), 187 states have internal predecessors, (217), 23 states have call successors, (23), 23 states have call predecessors, (23), 24 states have return successors, (42), 23 states have call predecessors, (42), 23 states have call successors, (42) [2024-12-02 10:08:51,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 223 states to 223 states and 282 transitions. [2024-12-02 10:08:51,165 INFO L78 Accepts]: Start accepts. Automaton has 223 states and 282 transitions. Word has length 45 [2024-12-02 10:08:51,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:08:51,166 INFO L471 AbstractCegarLoop]: Abstraction has 223 states and 282 transitions. [2024-12-02 10:08:51,166 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-12-02 10:08:51,166 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 282 transitions. [2024-12-02 10:08:51,167 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2024-12-02 10:08:51,167 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:08:51,168 INFO L218 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:08:51,168 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-12-02 10:08:51,168 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:08:51,168 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:08:51,168 INFO L85 PathProgramCache]: Analyzing trace with hash 568065099, now seen corresponding path program 1 times [2024-12-02 10:08:51,169 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:08:51,169 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1470882269] [2024-12-02 10:08:51,169 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:08:51,169 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:08:51,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:08:51,287 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 11 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-12-02 10:08:51,287 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:08:51,287 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1470882269] [2024-12-02 10:08:51,287 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1470882269] provided 0 perfect and 1 imperfect interpolant sequences [2024-12-02 10:08:51,287 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1804056389] [2024-12-02 10:08:51,287 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:08:51,287 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-12-02 10:08:51,287 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/z3 [2024-12-02 10:08:51,289 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-12-02 10:08:51,291 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-12-02 10:08:51,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:08:51,384 INFO L256 TraceCheckSpWp]: Trace formula consists of 280 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-12-02 10:08:51,390 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2024-12-02 10:08:51,506 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 13 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-12-02 10:08:51,506 INFO L312 TraceCheckSpWp]: Computing backward predicates... [2024-12-02 10:08:51,654 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 11 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-12-02 10:08:51,655 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1804056389] provided 0 perfect and 2 imperfect interpolant sequences [2024-12-02 10:08:51,655 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-12-02 10:08:51,655 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 6 [2024-12-02 10:08:51,655 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [414975496] [2024-12-02 10:08:51,655 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-12-02 10:08:51,655 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-12-02 10:08:51,656 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:08:51,656 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-12-02 10:08:51,656 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2024-12-02 10:08:51,656 INFO L87 Difference]: Start difference. First operand 223 states and 282 transitions. Second operand has 6 states, 6 states have (on average 11.666666666666666) internal successors, (70), 6 states have internal predecessors, (70), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2024-12-02 10:08:51,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:08:51,786 INFO L93 Difference]: Finished difference Result 520 states and 703 transitions. [2024-12-02 10:08:51,786 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-12-02 10:08:51,787 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 11.666666666666666) internal successors, (70), 6 states have internal predecessors, (70), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 78 [2024-12-02 10:08:51,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:08:51,789 INFO L225 Difference]: With dead ends: 520 [2024-12-02 10:08:51,789 INFO L226 Difference]: Without dead ends: 343 [2024-12-02 10:08:51,790 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 165 GetRequests, 152 SyntacticMatches, 5 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2024-12-02 10:08:51,790 INFO L435 NwaCegarLoop]: 118 mSDtfsCounter, 81 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 461 SdHoareTripleChecker+Invalid, 75 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 10:08:51,790 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 461 Invalid, 75 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 64 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 10:08:51,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2024-12-02 10:08:51,809 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 314. [2024-12-02 10:08:51,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 314 states, 245 states have (on average 1.2448979591836735) internal successors, (305), 262 states have internal predecessors, (305), 33 states have call successors, (33), 33 states have call predecessors, (33), 35 states have return successors, (66), 31 states have call predecessors, (66), 33 states have call successors, (66) [2024-12-02 10:08:51,812 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 314 states to 314 states and 404 transitions. [2024-12-02 10:08:51,812 INFO L78 Accepts]: Start accepts. Automaton has 314 states and 404 transitions. Word has length 78 [2024-12-02 10:08:51,812 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:08:51,812 INFO L471 AbstractCegarLoop]: Abstraction has 314 states and 404 transitions. [2024-12-02 10:08:51,813 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 11.666666666666666) internal successors, (70), 6 states have internal predecessors, (70), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2024-12-02 10:08:51,813 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 404 transitions. [2024-12-02 10:08:51,814 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2024-12-02 10:08:51,814 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:08:51,814 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:08:51,825 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-12-02 10:08:52,015 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2024-12-02 10:08:52,015 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:08:52,016 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:08:52,016 INFO L85 PathProgramCache]: Analyzing trace with hash 913136891, now seen corresponding path program 2 times [2024-12-02 10:08:52,016 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:08:52,016 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1088972990] [2024-12-02 10:08:52,016 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-12-02 10:08:52,016 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:08:52,046 INFO L229 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-12-02 10:08:52,046 INFO L230 tOrderPrioritization]: Conjunction of SSA is unsat [2024-12-02 10:08:52,291 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 45 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-12-02 10:08:52,291 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:08:52,291 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1088972990] [2024-12-02 10:08:52,291 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1088972990] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:08:52,291 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:08:52,291 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 10:08:52,291 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [871218976] [2024-12-02 10:08:52,291 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:08:52,292 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 10:08:52,292 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:08:52,292 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 10:08:52,293 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 10:08:52,293 INFO L87 Difference]: Start difference. First operand 314 states and 404 transitions. Second operand has 5 states, 5 states have (on average 16.2) internal successors, (81), 5 states have internal predecessors, (81), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2024-12-02 10:08:52,468 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:08:52,468 INFO L93 Difference]: Finished difference Result 759 states and 1018 transitions. [2024-12-02 10:08:52,468 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-12-02 10:08:52,469 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 16.2) internal successors, (81), 5 states have internal predecessors, (81), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 111 [2024-12-02 10:08:52,469 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:08:52,472 INFO L225 Difference]: With dead ends: 759 [2024-12-02 10:08:52,472 INFO L226 Difference]: Without dead ends: 490 [2024-12-02 10:08:52,474 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-12-02 10:08:52,475 INFO L435 NwaCegarLoop]: 127 mSDtfsCounter, 44 mSDsluCounter, 284 mSDsCounter, 0 mSdLazyCounter, 85 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 411 SdHoareTripleChecker+Invalid, 88 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 85 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-12-02 10:08:52,475 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 411 Invalid, 88 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 85 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-12-02 10:08:52,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 490 states. [2024-12-02 10:08:52,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 490 to 475. [2024-12-02 10:08:52,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 475 states, 372 states have (on average 1.2338709677419355) internal successors, (459), 394 states have internal predecessors, (459), 50 states have call successors, (50), 50 states have call predecessors, (50), 52 states have return successors, (96), 46 states have call predecessors, (96), 50 states have call successors, (96) [2024-12-02 10:08:52,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 475 states to 475 states and 605 transitions. [2024-12-02 10:08:52,533 INFO L78 Accepts]: Start accepts. Automaton has 475 states and 605 transitions. Word has length 111 [2024-12-02 10:08:52,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:08:52,534 INFO L471 AbstractCegarLoop]: Abstraction has 475 states and 605 transitions. [2024-12-02 10:08:52,534 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 16.2) internal successors, (81), 5 states have internal predecessors, (81), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2024-12-02 10:08:52,534 INFO L276 IsEmpty]: Start isEmpty. Operand 475 states and 605 transitions. [2024-12-02 10:08:52,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2024-12-02 10:08:52,537 INFO L210 NwaCegarLoop]: Found error trace [2024-12-02 10:08:52,537 INFO L218 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:08:52,537 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2024-12-02 10:08:52,537 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-12-02 10:08:52,538 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-12-02 10:08:52,538 INFO L85 PathProgramCache]: Analyzing trace with hash -1843490375, now seen corresponding path program 1 times [2024-12-02 10:08:52,538 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-12-02 10:08:52,538 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1544602059] [2024-12-02 10:08:52,538 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-12-02 10:08:52,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-12-02 10:08:52,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-12-02 10:08:52,687 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2024-12-02 10:08:52,688 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-12-02 10:08:52,688 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1544602059] [2024-12-02 10:08:52,688 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1544602059] provided 1 perfect and 0 imperfect interpolant sequences [2024-12-02 10:08:52,688 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-12-02 10:08:52,688 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-12-02 10:08:52,688 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1132624253] [2024-12-02 10:08:52,688 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-12-02 10:08:52,688 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-12-02 10:08:52,688 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-12-02 10:08:52,689 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-12-02 10:08:52,689 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 10:08:52,689 INFO L87 Difference]: Start difference. First operand 475 states and 605 transitions. Second operand has 5 states, 5 states have (on average 15.6) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2024-12-02 10:08:52,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-12-02 10:08:52,738 INFO L93 Difference]: Finished difference Result 682 states and 859 transitions. [2024-12-02 10:08:52,738 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-12-02 10:08:52,738 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 15.6) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 111 [2024-12-02 10:08:52,738 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-12-02 10:08:52,739 INFO L225 Difference]: With dead ends: 682 [2024-12-02 10:08:52,739 INFO L226 Difference]: Without dead ends: 0 [2024-12-02 10:08:52,741 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-12-02 10:08:52,742 INFO L435 NwaCegarLoop]: 80 mSDtfsCounter, 0 mSDsluCounter, 227 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-12-02 10:08:52,742 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 307 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-12-02 10:08:52,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-12-02 10:08:52,743 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-12-02 10:08:52,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-12-02 10:08:52,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-12-02 10:08:52,743 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 111 [2024-12-02 10:08:52,743 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-12-02 10:08:52,743 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-12-02 10:08:52,743 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 15.6) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2024-12-02 10:08:52,744 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-12-02 10:08:52,744 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-12-02 10:08:52,746 INFO L782 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-12-02 10:08:52,746 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2024-12-02 10:08:52,749 INFO L422 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-12-02 10:08:52,751 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2024-12-02 10:08:53,797 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-12-02 10:08:53,808 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 10:08:53 BoogieIcfgContainer [2024-12-02 10:08:53,808 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-12-02 10:08:53,808 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-12-02 10:08:53,808 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-12-02 10:08:53,809 INFO L274 PluginConnector]: Witness Printer initialized [2024-12-02 10:08:53,809 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 10:08:49" (3/4) ... [2024-12-02 10:08:53,811 INFO L146 WitnessPrinter]: Generating witness for correct program [2024-12-02 10:08:53,816 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2024-12-02 10:08:53,817 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2024-12-02 10:08:53,817 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2024-12-02 10:08:53,817 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2024-12-02 10:08:53,817 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2024-12-02 10:08:53,817 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2024-12-02 10:08:53,823 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2024-12-02 10:08:53,823 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2024-12-02 10:08:53,823 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2024-12-02 10:08:53,824 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 10:08:53,824 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2024-12-02 10:08:53,918 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/witness.graphml [2024-12-02 10:08:53,918 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/witness.yml [2024-12-02 10:08:53,918 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-12-02 10:08:53,919 INFO L158 Benchmark]: Toolchain (without parser) took 5270.01ms. Allocated memory was 142.6MB in the beginning and 293.6MB in the end (delta: 151.0MB). Free memory was 115.8MB in the beginning and 105.7MB in the end (delta: 10.1MB). Peak memory consumption was 158.2MB. Max. memory is 16.1GB. [2024-12-02 10:08:53,919 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 142.6MB. Free memory is still 82.9MB. There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 10:08:53,919 INFO L158 Benchmark]: CACSL2BoogieTranslator took 316.98ms. Allocated memory is still 142.6MB. Free memory was 115.8MB in the beginning and 96.9MB in the end (delta: 18.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 10:08:53,920 INFO L158 Benchmark]: Boogie Procedure Inliner took 34.99ms. Allocated memory is still 142.6MB. Free memory was 96.9MB in the beginning and 94.9MB in the end (delta: 2.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 10:08:53,920 INFO L158 Benchmark]: Boogie Preprocessor took 36.49ms. Allocated memory is still 142.6MB. Free memory was 94.9MB in the beginning and 93.0MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. [2024-12-02 10:08:53,920 INFO L158 Benchmark]: RCFGBuilder took 330.15ms. Allocated memory is still 142.6MB. Free memory was 93.0MB in the beginning and 75.8MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2024-12-02 10:08:53,920 INFO L158 Benchmark]: TraceAbstraction took 4436.05ms. Allocated memory was 142.6MB in the beginning and 293.6MB in the end (delta: 151.0MB). Free memory was 75.2MB in the beginning and 113.3MB in the end (delta: -38.0MB). Peak memory consumption was 116.3MB. Max. memory is 16.1GB. [2024-12-02 10:08:53,921 INFO L158 Benchmark]: Witness Printer took 109.92ms. Allocated memory is still 293.6MB. Free memory was 113.3MB in the beginning and 105.7MB in the end (delta: 7.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-12-02 10:08:53,922 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 142.6MB. Free memory is still 82.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 316.98ms. Allocated memory is still 142.6MB. Free memory was 115.8MB in the beginning and 96.9MB in the end (delta: 18.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 34.99ms. Allocated memory is still 142.6MB. Free memory was 96.9MB in the beginning and 94.9MB in the end (delta: 2.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 36.49ms. Allocated memory is still 142.6MB. Free memory was 94.9MB in the beginning and 93.0MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 330.15ms. Allocated memory is still 142.6MB. Free memory was 93.0MB in the beginning and 75.8MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 4436.05ms. Allocated memory was 142.6MB in the beginning and 293.6MB in the end (delta: 151.0MB). Free memory was 75.2MB in the beginning and 113.3MB in the end (delta: -38.0MB). Peak memory consumption was 116.3MB. Max. memory is 16.1GB. * Witness Printer took 109.92ms. Allocated memory is still 293.6MB. Free memory was 113.3MB in the beginning and 105.7MB in the end (delta: 7.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] - GenericResultAtLocation [Line: 118]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [118] - GenericResultAtLocation [Line: 343]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [343] - GenericResultAtLocation [Line: 371]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [371] - GenericResultAtLocation [Line: 474]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [474] - GenericResultAtLocation [Line: 512]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [512] - GenericResultAtLocation [Line: 608]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [608] - GenericResultAtLocation [Line: 974]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [974] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 979]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 84 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 3.3s, OverallIterations: 11, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 1.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 488 SdHoareTripleChecker+Valid, 0.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 482 mSDsluCounter, 3472 SdHoareTripleChecker+Invalid, 0.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2450 mSDsCounter, 47 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 431 IncrementalHoareTripleChecker+Invalid, 478 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 47 mSolverCounterUnsat, 1022 mSDtfsCounter, 431 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 232 GetRequests, 177 SyntacticMatches, 5 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 22 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=475occurred in iteration=10, InterpolantAutomatonStates: 61, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 11 MinimizatonAttempts, 48 StatesRemovedByMinimization, 4 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.4s InterpolantComputationTime, 662 NumberOfCodeBlocks, 662 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 727 ConstructedInterpolants, 0 QuantifiedInterpolants, 1250 SizeOfPredicates, 2 NumberOfNonLiveVariables, 280 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 13 InterpolantComputations, 10 PerfectInterpolantSequences, 181/199 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 63]: Location Invariant Derived location invariant: 0 - InvariantResult [Line: 524]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((((2 <= waterLevel) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= waterLevel))) RESULT: Ultimate proved your program to be correct! [2024-12-02 10:08:53,940 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_881aa46e-2b49-465b-89a7-da12e7b992fa/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE