./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 527bcce2 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3ab30b3db91b0e47e6f9b2ed9ba465facc49148e5cdc1cad78e4808ba0c7de84 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-527bcce [2023-11-21 22:27:41,805 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-21 22:27:41,877 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-21 22:27:41,883 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-21 22:27:41,884 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-21 22:27:41,929 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-21 22:27:41,931 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-21 22:27:41,932 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-21 22:27:41,934 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-21 22:27:41,938 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-21 22:27:41,939 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-21 22:27:41,940 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-21 22:27:41,941 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-21 22:27:41,943 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-21 22:27:41,944 INFO L153 SettingsManager]: * Use SBE=true [2023-11-21 22:27:41,944 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-21 22:27:41,945 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-21 22:27:41,945 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-21 22:27:41,946 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-21 22:27:41,946 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-21 22:27:41,947 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-21 22:27:41,948 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-21 22:27:41,948 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-21 22:27:41,949 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-21 22:27:41,949 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-21 22:27:41,950 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-21 22:27:41,950 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-21 22:27:41,951 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-21 22:27:41,952 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-21 22:27:41,952 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-21 22:27:41,954 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-21 22:27:41,954 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:27:41,955 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-21 22:27:41,955 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-21 22:27:41,955 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-21 22:27:41,956 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-21 22:27:41,956 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-21 22:27:41,956 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-21 22:27:41,956 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-21 22:27:41,957 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-21 22:27:41,957 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-21 22:27:41,958 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-21 22:27:41,958 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3ab30b3db91b0e47e6f9b2ed9ba465facc49148e5cdc1cad78e4808ba0c7de84 [2023-11-21 22:27:42,285 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-21 22:27:42,319 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-21 22:27:42,322 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-21 22:27:42,323 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-21 22:27:42,324 INFO L274 PluginConnector]: CDTParser initialized [2023-11-21 22:27:42,325 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/../../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c [2023-11-21 22:27:45,472 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-21 22:27:45,719 INFO L384 CDTParser]: Found 1 translation units. [2023-11-21 22:27:45,720 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c [2023-11-21 22:27:45,744 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/data/dca640193/e5dfbccf328b448084cb5b707a371b8e/FLAG16f769bf2 [2023-11-21 22:27:45,759 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/data/dca640193/e5dfbccf328b448084cb5b707a371b8e [2023-11-21 22:27:45,763 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-21 22:27:45,768 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-21 22:27:45,772 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-21 22:27:45,772 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-21 22:27:45,779 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-21 22:27:45,780 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:27:45" (1/1) ... [2023-11-21 22:27:45,781 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3c1d6fa3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:45, skipping insertion in model container [2023-11-21 22:27:45,782 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:27:45" (1/1) ... [2023-11-21 22:27:45,860 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-21 22:27:46,064 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c[5071,5084] [2023-11-21 22:27:46,171 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:27:46,185 INFO L202 MainTranslator]: Completed pre-run [2023-11-21 22:27:46,198 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-21 22:27:46,201 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [150] [2023-11-21 22:27:46,202 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [201] [2023-11-21 22:27:46,206 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [304] [2023-11-21 22:27:46,207 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [313] [2023-11-21 22:27:46,207 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [496] [2023-11-21 22:27:46,208 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [561] [2023-11-21 22:27:46,208 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [596] [2023-11-21 22:27:46,240 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c[5071,5084] [2023-11-21 22:27:46,322 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:27:46,359 INFO L206 MainTranslator]: Completed translation [2023-11-21 22:27:46,360 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:46 WrapperNode [2023-11-21 22:27:46,360 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-21 22:27:46,361 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-21 22:27:46,362 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-21 22:27:46,362 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-21 22:27:46,374 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:46" (1/1) ... [2023-11-21 22:27:46,390 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:46" (1/1) ... [2023-11-21 22:27:46,423 INFO L138 Inliner]: procedures = 55, calls = 100, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 203 [2023-11-21 22:27:46,424 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-21 22:27:46,424 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-21 22:27:46,424 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-21 22:27:46,424 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-21 22:27:46,440 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:46" (1/1) ... [2023-11-21 22:27:46,440 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:46" (1/1) ... [2023-11-21 22:27:46,443 INFO L184 PluginConnector]: Executing the observer HeapSplitter from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:46" (1/1) ... [2023-11-21 22:27:46,456 INFO L187 HeapSplitter]: Split 2 memory accesses to 1 slices as follows [2] [2023-11-21 22:27:46,456 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:46" (1/1) ... [2023-11-21 22:27:46,457 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:46" (1/1) ... [2023-11-21 22:27:46,467 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:46" (1/1) ... [2023-11-21 22:27:46,473 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:46" (1/1) ... [2023-11-21 22:27:46,475 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:46" (1/1) ... [2023-11-21 22:27:46,477 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:46" (1/1) ... [2023-11-21 22:27:46,480 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-21 22:27:46,492 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-21 22:27:46,495 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-21 22:27:46,495 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-21 22:27:46,498 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:46" (1/1) ... [2023-11-21 22:27:46,505 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:27:46,519 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:27:46,537 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-21 22:27:46,566 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-21 22:27:46,586 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-21 22:27:46,587 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-21 22:27:46,588 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-21 22:27:46,588 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-21 22:27:46,588 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-21 22:27:46,588 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-21 22:27:46,588 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-21 22:27:46,589 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:27:46,589 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:27:46,589 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-21 22:27:46,590 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-21 22:27:46,591 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-21 22:27:46,591 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-21 22:27:46,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-21 22:27:46,592 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-21 22:27:46,592 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-21 22:27:46,592 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-21 22:27:46,593 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-21 22:27:46,745 INFO L240 CfgBuilder]: Building ICFG [2023-11-21 22:27:46,750 INFO L266 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-21 22:27:47,183 INFO L281 CfgBuilder]: Performing block encoding [2023-11-21 22:27:47,331 INFO L303 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-21 22:27:47,334 INFO L308 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-21 22:27:47,335 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:27:47 BoogieIcfgContainer [2023-11-21 22:27:47,336 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-21 22:27:47,338 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-21 22:27:47,338 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-21 22:27:47,342 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-21 22:27:47,343 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 10:27:45" (1/3) ... [2023-11-21 22:27:47,343 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5596c91e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:27:47, skipping insertion in model container [2023-11-21 22:27:47,344 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:27:46" (2/3) ... [2023-11-21 22:27:47,344 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5596c91e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:27:47, skipping insertion in model container [2023-11-21 22:27:47,346 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:27:47" (3/3) ... [2023-11-21 22:27:47,348 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product37.cil.c [2023-11-21 22:27:47,369 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-21 22:27:47,369 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-21 22:27:47,417 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-21 22:27:47,424 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7dd0548b, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-21 22:27:47,424 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-21 22:27:47,429 INFO L276 IsEmpty]: Start isEmpty. Operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-21 22:27:47,439 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-21 22:27:47,440 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:27:47,440 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:27:47,441 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:27:47,447 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:27:47,447 INFO L85 PathProgramCache]: Analyzing trace with hash -1322932552, now seen corresponding path program 1 times [2023-11-21 22:27:47,457 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:27:47,458 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1584171452] [2023-11-21 22:27:47,458 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:47,459 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:27:47,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:47,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:27:47,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:47,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:27:47,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:47,674 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:27:47,674 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:27:47,675 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1584171452] [2023-11-21 22:27:47,676 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1584171452] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:27:47,676 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:27:47,676 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 22:27:47,678 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1288779501] [2023-11-21 22:27:47,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:27:47,683 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-21 22:27:47,684 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:27:47,728 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-21 22:27:47,729 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:27:47,731 INFO L87 Difference]: Start difference. First operand has 58 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 45 states have internal predecessors, (53), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:27:47,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:27:47,795 INFO L93 Difference]: Finished difference Result 114 states and 155 transitions. [2023-11-21 22:27:47,797 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-21 22:27:47,798 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2023-11-21 22:27:47,799 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:27:47,808 INFO L225 Difference]: With dead ends: 114 [2023-11-21 22:27:47,809 INFO L226 Difference]: Without dead ends: 53 [2023-11-21 22:27:47,814 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:27:47,821 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 57 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:27:47,823 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 57 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 22:27:47,841 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2023-11-21 22:27:47,861 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2023-11-21 22:27:47,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 34 states have (on average 1.3235294117647058) internal successors, (45), 41 states have internal predecessors, (45), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-21 22:27:47,865 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 68 transitions. [2023-11-21 22:27:47,867 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 68 transitions. Word has length 21 [2023-11-21 22:27:47,867 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:27:47,867 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 68 transitions. [2023-11-21 22:27:47,868 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:27:47,868 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 68 transitions. [2023-11-21 22:27:47,871 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-21 22:27:47,871 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:27:47,871 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:27:47,872 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-21 22:27:47,872 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:27:47,873 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:27:47,873 INFO L85 PathProgramCache]: Analyzing trace with hash 764002386, now seen corresponding path program 1 times [2023-11-21 22:27:47,873 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:27:47,874 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1734074230] [2023-11-21 22:27:47,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:47,874 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:27:47,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:47,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:27:47,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:47,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:27:47,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:47,994 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:27:47,994 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:27:47,995 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1734074230] [2023-11-21 22:27:47,995 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1734074230] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:27:47,995 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:27:47,995 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:27:47,995 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1164886867] [2023-11-21 22:27:47,996 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:27:47,997 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:27:47,997 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:27:47,998 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:27:47,998 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:27:47,999 INFO L87 Difference]: Start difference. First operand 53 states and 68 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:27:48,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:27:48,078 INFO L93 Difference]: Finished difference Result 83 states and 107 transitions. [2023-11-21 22:27:48,078 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:27:48,078 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-11-21 22:27:48,079 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:27:48,081 INFO L225 Difference]: With dead ends: 83 [2023-11-21 22:27:48,083 INFO L226 Difference]: Without dead ends: 45 [2023-11-21 22:27:48,084 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:27:48,085 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 7 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 77 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:27:48,086 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 77 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:27:48,088 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2023-11-21 22:27:48,098 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2023-11-21 22:27:48,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 29 states have (on average 1.3448275862068966) internal successors, (39), 36 states have internal predecessors, (39), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-21 22:27:48,105 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 57 transitions. [2023-11-21 22:27:48,107 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 57 transitions. Word has length 22 [2023-11-21 22:27:48,108 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:27:48,108 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 57 transitions. [2023-11-21 22:27:48,108 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:27:48,109 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 57 transitions. [2023-11-21 22:27:48,110 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-21 22:27:48,111 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:27:48,111 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:27:48,112 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-21 22:27:48,112 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:27:48,114 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:27:48,115 INFO L85 PathProgramCache]: Analyzing trace with hash 2086168665, now seen corresponding path program 1 times [2023-11-21 22:27:48,115 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:27:48,116 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1197138698] [2023-11-21 22:27:48,117 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:48,117 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:27:48,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:48,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-21 22:27:48,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:48,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-21 22:27:48,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:48,280 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:27:48,280 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:27:48,281 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1197138698] [2023-11-21 22:27:48,281 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1197138698] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:27:48,281 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:27:48,285 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:27:48,285 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [473064296] [2023-11-21 22:27:48,286 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:27:48,286 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:27:48,287 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:27:48,288 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:27:48,288 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:27:48,288 INFO L87 Difference]: Start difference. First operand 45 states and 57 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-21 22:27:48,331 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:27:48,331 INFO L93 Difference]: Finished difference Result 88 states and 113 transitions. [2023-11-21 22:27:48,332 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:27:48,332 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 24 [2023-11-21 22:27:48,333 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:27:48,334 INFO L225 Difference]: With dead ends: 88 [2023-11-21 22:27:48,334 INFO L226 Difference]: Without dead ends: 45 [2023-11-21 22:27:48,335 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:27:48,337 INFO L413 NwaCegarLoop]: 41 mSDtfsCounter, 44 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:27:48,338 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 41 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 22:27:48,339 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2023-11-21 22:27:48,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2023-11-21 22:27:48,372 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 29 states have (on average 1.3103448275862069) internal successors, (38), 36 states have internal predecessors, (38), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-21 22:27:48,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 56 transitions. [2023-11-21 22:27:48,374 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 56 transitions. Word has length 24 [2023-11-21 22:27:48,375 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:27:48,375 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 56 transitions. [2023-11-21 22:27:48,376 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-21 22:27:48,376 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 56 transitions. [2023-11-21 22:27:48,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2023-11-21 22:27:48,377 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:27:48,377 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:27:48,378 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-21 22:27:48,378 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:27:48,378 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:27:48,379 INFO L85 PathProgramCache]: Analyzing trace with hash 121402747, now seen corresponding path program 1 times [2023-11-21 22:27:48,379 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:27:48,379 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1270190805] [2023-11-21 22:27:48,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:48,379 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:27:48,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:48,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-21 22:27:48,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:48,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-21 22:27:48,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:48,525 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:27:48,525 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:27:48,526 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1270190805] [2023-11-21 22:27:48,526 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1270190805] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:27:48,526 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:27:48,526 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:27:48,527 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1989486224] [2023-11-21 22:27:48,527 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:27:48,528 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:27:48,528 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:27:48,528 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:27:48,529 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:27:48,529 INFO L87 Difference]: Start difference. First operand 45 states and 56 transitions. Second operand has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-21 22:27:48,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:27:48,597 INFO L93 Difference]: Finished difference Result 125 states and 159 transitions. [2023-11-21 22:27:48,598 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:27:48,598 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 27 [2023-11-21 22:27:48,599 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:27:48,601 INFO L225 Difference]: With dead ends: 125 [2023-11-21 22:27:48,601 INFO L226 Difference]: Without dead ends: 82 [2023-11-21 22:27:48,602 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:27:48,604 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 36 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 92 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:27:48,605 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 92 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 22:27:48,606 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2023-11-21 22:27:48,622 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 80. [2023-11-21 22:27:48,623 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 53 states have (on average 1.2641509433962264) internal successors, (67), 60 states have internal predecessors, (67), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) [2023-11-21 22:27:48,625 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 99 transitions. [2023-11-21 22:27:48,625 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 99 transitions. Word has length 27 [2023-11-21 22:27:48,626 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:27:48,626 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 99 transitions. [2023-11-21 22:27:48,626 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-21 22:27:48,627 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 99 transitions. [2023-11-21 22:27:48,628 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-21 22:27:48,628 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:27:48,629 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:27:48,629 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-21 22:27:48,629 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:27:48,630 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:27:48,630 INFO L85 PathProgramCache]: Analyzing trace with hash 594627513, now seen corresponding path program 1 times [2023-11-21 22:27:48,630 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:27:48,631 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1886193963] [2023-11-21 22:27:48,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:48,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:27:48,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:49,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-21 22:27:49,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:49,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-21 22:27:49,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:49,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-21 22:27:49,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:49,169 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:27:49,169 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:27:49,170 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1886193963] [2023-11-21 22:27:49,170 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1886193963] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:27:49,171 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:27:49,172 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-21 22:27:49,173 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [397848485] [2023-11-21 22:27:49,173 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:27:49,173 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-21 22:27:49,174 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:27:49,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-21 22:27:49,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2023-11-21 22:27:49,177 INFO L87 Difference]: Start difference. First operand 80 states and 99 transitions. Second operand has 8 states, 8 states have (on average 3.0) internal successors, (24), 7 states have internal predecessors, (24), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-21 22:27:49,616 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:27:49,616 INFO L93 Difference]: Finished difference Result 239 states and 298 transitions. [2023-11-21 22:27:49,617 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-21 22:27:49,617 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 3.0) internal successors, (24), 7 states have internal predecessors, (24), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 32 [2023-11-21 22:27:49,618 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:27:49,625 INFO L225 Difference]: With dead ends: 239 [2023-11-21 22:27:49,629 INFO L226 Difference]: Without dead ends: 161 [2023-11-21 22:27:49,634 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=90, Unknown=0, NotChecked=0, Total=132 [2023-11-21 22:27:49,638 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 128 mSDsluCounter, 114 mSDsCounter, 0 mSdLazyCounter, 173 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 225 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 173 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-21 22:27:49,639 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 173 Invalid, 225 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 173 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-21 22:27:49,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 161 states. [2023-11-21 22:27:49,697 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 161 to 152. [2023-11-21 22:27:49,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 102 states have (on average 1.2647058823529411) internal successors, (129), 112 states have internal predecessors, (129), 26 states have call successors, (26), 21 states have call predecessors, (26), 23 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) [2023-11-21 22:27:49,701 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 191 transitions. [2023-11-21 22:27:49,701 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 191 transitions. Word has length 32 [2023-11-21 22:27:49,702 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:27:49,702 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 191 transitions. [2023-11-21 22:27:49,703 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 3.0) internal successors, (24), 7 states have internal predecessors, (24), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-21 22:27:49,703 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 191 transitions. [2023-11-21 22:27:49,705 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-11-21 22:27:49,706 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:27:49,706 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:27:49,706 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-21 22:27:49,707 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:27:49,707 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:27:49,708 INFO L85 PathProgramCache]: Analyzing trace with hash 1765566545, now seen corresponding path program 1 times [2023-11-21 22:27:49,708 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:27:49,708 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1319250476] [2023-11-21 22:27:49,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:49,709 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:27:49,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:50,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:27:50,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:50,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-21 22:27:50,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:50,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-21 22:27:50,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:50,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-21 22:27:50,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:50,138 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:27:50,138 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:27:50,139 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1319250476] [2023-11-21 22:27:50,139 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1319250476] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:27:50,139 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:27:50,140 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-21 22:27:50,140 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1984966281] [2023-11-21 22:27:50,141 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:27:50,141 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-21 22:27:50,142 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:27:50,143 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-21 22:27:50,144 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2023-11-21 22:27:50,145 INFO L87 Difference]: Start difference. First operand 152 states and 191 transitions. Second operand has 9 states, 8 states have (on average 3.125) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-21 22:27:50,904 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:27:50,904 INFO L93 Difference]: Finished difference Result 387 states and 487 transitions. [2023-11-21 22:27:50,905 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2023-11-21 22:27:50,905 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 3.125) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 35 [2023-11-21 22:27:50,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:27:50,909 INFO L225 Difference]: With dead ends: 387 [2023-11-21 22:27:50,909 INFO L226 Difference]: Without dead ends: 272 [2023-11-21 22:27:50,911 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 79 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=116, Invalid=346, Unknown=0, NotChecked=0, Total=462 [2023-11-21 22:27:50,912 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 224 mSDsluCounter, 240 mSDsCounter, 0 mSdLazyCounter, 400 mSolverCounterSat, 115 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 229 SdHoareTripleChecker+Valid, 300 SdHoareTripleChecker+Invalid, 515 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 115 IncrementalHoareTripleChecker+Valid, 400 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-21 22:27:50,912 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [229 Valid, 300 Invalid, 515 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [115 Valid, 400 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-21 22:27:50,913 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2023-11-21 22:27:50,954 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 243. [2023-11-21 22:27:50,955 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 164 states have (on average 1.2621951219512195) internal successors, (207), 181 states have internal predecessors, (207), 41 states have call successors, (41), 31 states have call predecessors, (41), 37 states have return successors, (58), 43 states have call predecessors, (58), 41 states have call successors, (58) [2023-11-21 22:27:50,958 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 306 transitions. [2023-11-21 22:27:50,958 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 306 transitions. Word has length 35 [2023-11-21 22:27:50,959 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:27:50,959 INFO L495 AbstractCegarLoop]: Abstraction has 243 states and 306 transitions. [2023-11-21 22:27:50,959 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 3.125) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-21 22:27:50,960 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 306 transitions. [2023-11-21 22:27:50,961 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-11-21 22:27:50,961 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:27:50,961 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:27:50,962 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-21 22:27:50,962 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:27:50,962 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:27:50,962 INFO L85 PathProgramCache]: Analyzing trace with hash 1155681459, now seen corresponding path program 1 times [2023-11-21 22:27:50,963 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:27:50,963 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1864249421] [2023-11-21 22:27:50,963 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:50,963 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:27:50,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:51,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-21 22:27:51,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:51,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-21 22:27:51,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:51,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-21 22:27:51,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:51,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-21 22:27:51,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:51,096 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-21 22:27:51,097 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:27:51,097 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1864249421] [2023-11-21 22:27:51,097 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1864249421] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:27:51,097 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:27:51,097 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-21 22:27:51,098 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [143730887] [2023-11-21 22:27:51,098 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:27:51,098 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-21 22:27:51,098 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:27:51,099 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-21 22:27:51,099 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-21 22:27:51,099 INFO L87 Difference]: Start difference. First operand 243 states and 306 transitions. Second operand has 7 states, 6 states have (on average 4.333333333333333) internal successors, (26), 5 states have internal predecessors, (26), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2023-11-21 22:27:51,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:27:51,372 INFO L93 Difference]: Finished difference Result 499 states and 630 transitions. [2023-11-21 22:27:51,372 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-21 22:27:51,373 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 4.333333333333333) internal successors, (26), 5 states have internal predecessors, (26), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 35 [2023-11-21 22:27:51,373 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:27:51,376 INFO L225 Difference]: With dead ends: 499 [2023-11-21 22:27:51,376 INFO L226 Difference]: Without dead ends: 258 [2023-11-21 22:27:51,377 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 22 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2023-11-21 22:27:51,378 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 60 mSDsluCounter, 160 mSDsCounter, 0 mSdLazyCounter, 207 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 234 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 207 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:27:51,379 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 200 Invalid, 234 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 207 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:27:51,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 258 states. [2023-11-21 22:27:51,414 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 258 to 239. [2023-11-21 22:27:51,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 239 states, 160 states have (on average 1.21875) internal successors, (195), 177 states have internal predecessors, (195), 41 states have call successors, (41), 31 states have call predecessors, (41), 37 states have return successors, (58), 43 states have call predecessors, (58), 41 states have call successors, (58) [2023-11-21 22:27:51,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 239 states to 239 states and 294 transitions. [2023-11-21 22:27:51,418 INFO L78 Accepts]: Start accepts. Automaton has 239 states and 294 transitions. Word has length 35 [2023-11-21 22:27:51,418 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:27:51,418 INFO L495 AbstractCegarLoop]: Abstraction has 239 states and 294 transitions. [2023-11-21 22:27:51,419 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 4.333333333333333) internal successors, (26), 5 states have internal predecessors, (26), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2023-11-21 22:27:51,419 INFO L276 IsEmpty]: Start isEmpty. Operand 239 states and 294 transitions. [2023-11-21 22:27:51,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2023-11-21 22:27:51,422 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:27:51,422 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:27:51,422 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-21 22:27:51,423 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:27:51,423 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:27:51,423 INFO L85 PathProgramCache]: Analyzing trace with hash 992478277, now seen corresponding path program 1 times [2023-11-21 22:27:51,424 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:27:51,424 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [419084888] [2023-11-21 22:27:51,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:51,424 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:27:51,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:51,518 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:27:51,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:51,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:27:51,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:51,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:27:51,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:51,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:27:51,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:51,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-21 22:27:51,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:51,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-21 22:27:51,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:51,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2023-11-21 22:27:51,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:51,592 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 8 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-21 22:27:51,593 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:27:51,593 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [419084888] [2023-11-21 22:27:51,593 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [419084888] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:27:51,593 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [653302734] [2023-11-21 22:27:51,594 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:51,594 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:27:51,594 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:27:51,597 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:27:51,625 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-21 22:27:51,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:51,751 INFO L262 TraceCheckSpWp]: Trace formula consists of 272 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-21 22:27:51,757 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:27:51,835 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:27:51,835 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-21 22:27:51,835 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [653302734] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:27:51,835 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-21 22:27:51,836 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 8 [2023-11-21 22:27:51,836 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1376016185] [2023-11-21 22:27:51,836 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:27:51,837 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:27:51,868 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:27:51,869 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:27:51,869 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-21 22:27:51,869 INFO L87 Difference]: Start difference. First operand 239 states and 294 transitions. Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-21 22:27:51,936 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:27:51,937 INFO L93 Difference]: Finished difference Result 360 states and 446 transitions. [2023-11-21 22:27:51,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:27:51,938 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 60 [2023-11-21 22:27:51,938 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:27:51,940 INFO L225 Difference]: With dead ends: 360 [2023-11-21 22:27:51,940 INFO L226 Difference]: Without dead ends: 229 [2023-11-21 22:27:51,941 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 73 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-21 22:27:51,942 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 26 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:27:51,943 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 97 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 22:27:51,944 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 229 states. [2023-11-21 22:27:51,977 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 229 to 229. [2023-11-21 22:27:51,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 229 states, 153 states have (on average 1.1895424836601307) internal successors, (182), 169 states have internal predecessors, (182), 39 states have call successors, (39), 31 states have call predecessors, (39), 36 states have return successors, (46), 40 states have call predecessors, (46), 39 states have call successors, (46) [2023-11-21 22:27:51,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 229 states to 229 states and 267 transitions. [2023-11-21 22:27:51,981 INFO L78 Accepts]: Start accepts. Automaton has 229 states and 267 transitions. Word has length 60 [2023-11-21 22:27:51,982 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:27:51,982 INFO L495 AbstractCegarLoop]: Abstraction has 229 states and 267 transitions. [2023-11-21 22:27:51,982 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-21 22:27:51,982 INFO L276 IsEmpty]: Start isEmpty. Operand 229 states and 267 transitions. [2023-11-21 22:27:51,984 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-11-21 22:27:51,984 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:27:51,985 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:27:52,010 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-21 22:27:52,200 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:27:52,200 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:27:52,200 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:27:52,201 INFO L85 PathProgramCache]: Analyzing trace with hash -1543258151, now seen corresponding path program 1 times [2023-11-21 22:27:52,201 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:27:52,201 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1625196131] [2023-11-21 22:27:52,201 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:52,201 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:27:52,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:52,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:27:52,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:52,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:27:52,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:52,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:27:52,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:52,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:27:52,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:52,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-21 22:27:52,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:52,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-21 22:27:52,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:52,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-21 22:27:52,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:52,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2023-11-21 22:27:52,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:52,443 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 5 proven. 14 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-21 22:27:52,443 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:27:52,443 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1625196131] [2023-11-21 22:27:52,443 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1625196131] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:27:52,444 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [703279556] [2023-11-21 22:27:52,444 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:52,444 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:27:52,444 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:27:52,445 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:27:52,468 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-21 22:27:52,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:52,567 INFO L262 TraceCheckSpWp]: Trace formula consists of 276 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-21 22:27:52,574 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:27:52,688 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 18 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:27:52,689 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:27:52,856 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 13 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-21 22:27:52,857 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [703279556] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:27:52,857 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:27:52,857 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2023-11-21 22:27:52,857 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [558570921] [2023-11-21 22:27:52,858 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:27:52,858 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-21 22:27:52,859 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:27:52,860 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-21 22:27:52,860 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2023-11-21 22:27:52,860 INFO L87 Difference]: Start difference. First operand 229 states and 267 transitions. Second operand has 15 states, 12 states have (on average 6.583333333333333) internal successors, (79), 10 states have internal predecessors, (79), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2023-11-21 22:27:53,955 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:27:53,956 INFO L93 Difference]: Finished difference Result 270 states and 316 transitions. [2023-11-21 22:27:53,956 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2023-11-21 22:27:53,956 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 12 states have (on average 6.583333333333333) internal successors, (79), 10 states have internal predecessors, (79), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) Word has length 63 [2023-11-21 22:27:53,957 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:27:53,959 INFO L225 Difference]: With dead ends: 270 [2023-11-21 22:27:53,959 INFO L226 Difference]: Without dead ends: 268 [2023-11-21 22:27:53,960 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 145 SyntacticMatches, 4 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 396 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=402, Invalid=1320, Unknown=0, NotChecked=0, Total=1722 [2023-11-21 22:27:53,961 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 182 mSDsluCounter, 459 mSDsCounter, 0 mSdLazyCounter, 798 mSolverCounterSat, 120 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 185 SdHoareTripleChecker+Valid, 530 SdHoareTripleChecker+Invalid, 918 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 120 IncrementalHoareTripleChecker+Valid, 798 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-11-21 22:27:53,961 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [185 Valid, 530 Invalid, 918 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [120 Valid, 798 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-11-21 22:27:53,962 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 268 states. [2023-11-21 22:27:53,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 268 to 265. [2023-11-21 22:27:53,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 174 states have (on average 1.1781609195402298) internal successors, (205), 195 states have internal predecessors, (205), 47 states have call successors, (47), 39 states have call predecessors, (47), 43 states have return successors, (58), 46 states have call predecessors, (58), 47 states have call successors, (58) [2023-11-21 22:27:53,999 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 310 transitions. [2023-11-21 22:27:54,000 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 310 transitions. Word has length 63 [2023-11-21 22:27:54,000 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:27:54,001 INFO L495 AbstractCegarLoop]: Abstraction has 265 states and 310 transitions. [2023-11-21 22:27:54,001 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 12 states have (on average 6.583333333333333) internal successors, (79), 10 states have internal predecessors, (79), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2023-11-21 22:27:54,001 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 310 transitions. [2023-11-21 22:27:54,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2023-11-21 22:27:54,003 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:27:54,003 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:27:54,034 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-21 22:27:54,222 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:27:54,222 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:27:54,222 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:27:54,223 INFO L85 PathProgramCache]: Analyzing trace with hash -1462160153, now seen corresponding path program 1 times [2023-11-21 22:27:54,223 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:27:54,223 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1753582013] [2023-11-21 22:27:54,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:54,223 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:27:54,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:54,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:27:54,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:54,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:27:54,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:54,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:27:54,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:54,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:27:54,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:54,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2023-11-21 22:27:54,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:54,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:27:54,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:54,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2023-11-21 22:27:54,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:54,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-21 22:27:54,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:54,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2023-11-21 22:27:54,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:54,389 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2023-11-21 22:27:54,389 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:27:54,389 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1753582013] [2023-11-21 22:27:54,389 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1753582013] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:27:54,390 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:27:54,390 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-21 22:27:54,390 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1593212721] [2023-11-21 22:27:54,390 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:27:54,391 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-21 22:27:54,391 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:27:54,391 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-21 22:27:54,392 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2023-11-21 22:27:54,392 INFO L87 Difference]: Start difference. First operand 265 states and 310 transitions. Second operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-21 22:27:54,796 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:27:54,797 INFO L93 Difference]: Finished difference Result 630 states and 742 transitions. [2023-11-21 22:27:54,797 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-21 22:27:54,798 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 80 [2023-11-21 22:27:54,799 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:27:54,802 INFO L225 Difference]: With dead ends: 630 [2023-11-21 22:27:54,803 INFO L226 Difference]: Without dead ends: 463 [2023-11-21 22:27:54,804 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 44 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=64, Invalid=208, Unknown=0, NotChecked=0, Total=272 [2023-11-21 22:27:54,805 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 152 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 282 mSolverCounterSat, 94 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 217 SdHoareTripleChecker+Invalid, 376 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 94 IncrementalHoareTripleChecker+Valid, 282 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:27:54,806 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [155 Valid, 217 Invalid, 376 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [94 Valid, 282 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:27:54,807 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 463 states. [2023-11-21 22:27:54,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 463 to 452. [2023-11-21 22:27:54,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 452 states, 297 states have (on average 1.1616161616161615) internal successors, (345), 329 states have internal predecessors, (345), 80 states have call successors, (80), 69 states have call predecessors, (80), 74 states have return successors, (94), 78 states have call predecessors, (94), 80 states have call successors, (94) [2023-11-21 22:27:54,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 452 states to 452 states and 519 transitions. [2023-11-21 22:27:54,890 INFO L78 Accepts]: Start accepts. Automaton has 452 states and 519 transitions. Word has length 80 [2023-11-21 22:27:54,891 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:27:54,891 INFO L495 AbstractCegarLoop]: Abstraction has 452 states and 519 transitions. [2023-11-21 22:27:54,891 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-21 22:27:54,891 INFO L276 IsEmpty]: Start isEmpty. Operand 452 states and 519 transitions. [2023-11-21 22:27:54,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2023-11-21 22:27:54,894 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:27:54,894 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:27:54,895 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-21 22:27:54,895 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:27:54,895 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:27:54,895 INFO L85 PathProgramCache]: Analyzing trace with hash -1741574283, now seen corresponding path program 1 times [2023-11-21 22:27:54,896 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:27:54,896 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1826177005] [2023-11-21 22:27:54,896 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:54,896 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:27:54,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:55,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:27:55,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:55,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-21 22:27:55,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:55,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:27:55,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:55,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:27:55,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:55,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:27:55,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:55,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-21 22:27:55,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:55,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:27:55,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:55,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2023-11-21 22:27:55,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:55,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2023-11-21 22:27:55,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:55,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2023-11-21 22:27:55,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:55,298 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 31 proven. 5 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2023-11-21 22:27:55,299 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:27:55,299 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1826177005] [2023-11-21 22:27:55,299 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1826177005] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:27:55,299 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [140663949] [2023-11-21 22:27:55,299 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:55,300 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:27:55,300 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:27:55,301 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:27:55,325 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-21 22:27:55,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:55,421 INFO L262 TraceCheckSpWp]: Trace formula consists of 347 conjuncts, 15 conjunts are in the unsatisfiable core [2023-11-21 22:27:55,425 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:27:55,706 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 58 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-21 22:27:55,706 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:27:56,039 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 45 proven. 3 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2023-11-21 22:27:56,039 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [140663949] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:27:56,039 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:27:56,039 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 9] total 23 [2023-11-21 22:27:56,040 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1332508077] [2023-11-21 22:27:56,040 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:27:56,040 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2023-11-21 22:27:56,041 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:27:56,041 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2023-11-21 22:27:56,042 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=86, Invalid=420, Unknown=0, NotChecked=0, Total=506 [2023-11-21 22:27:56,042 INFO L87 Difference]: Start difference. First operand 452 states and 519 transitions. Second operand has 23 states, 23 states have (on average 4.608695652173913) internal successors, (106), 20 states have internal predecessors, (106), 7 states have call successors, (23), 8 states have call predecessors, (23), 7 states have return successors, (20), 7 states have call predecessors, (20), 7 states have call successors, (20) [2023-11-21 22:27:58,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:27:58,095 INFO L93 Difference]: Finished difference Result 1356 states and 1697 transitions. [2023-11-21 22:27:58,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2023-11-21 22:27:58,096 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 4.608695652173913) internal successors, (106), 20 states have internal predecessors, (106), 7 states have call successors, (23), 8 states have call predecessors, (23), 7 states have return successors, (20), 7 states have call predecessors, (20), 7 states have call successors, (20) Word has length 83 [2023-11-21 22:27:58,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:27:58,104 INFO L225 Difference]: With dead ends: 1356 [2023-11-21 22:27:58,104 INFO L226 Difference]: Without dead ends: 898 [2023-11-21 22:27:58,108 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 242 GetRequests, 181 SyntacticMatches, 0 SemanticMatches, 61 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 952 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=727, Invalid=3179, Unknown=0, NotChecked=0, Total=3906 [2023-11-21 22:27:58,109 INFO L413 NwaCegarLoop]: 27 mSDtfsCounter, 479 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 1184 mSolverCounterSat, 295 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 482 SdHoareTripleChecker+Valid, 276 SdHoareTripleChecker+Invalid, 1479 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 295 IncrementalHoareTripleChecker+Valid, 1184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:27:58,109 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [482 Valid, 276 Invalid, 1479 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [295 Valid, 1184 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2023-11-21 22:27:58,111 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 898 states. [2023-11-21 22:27:58,231 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 898 to 540. [2023-11-21 22:27:58,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 540 states, 359 states have (on average 1.139275766016713) internal successors, (409), 390 states have internal predecessors, (409), 87 states have call successors, (87), 83 states have call predecessors, (87), 93 states have return successors, (108), 92 states have call predecessors, (108), 87 states have call successors, (108) [2023-11-21 22:27:58,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 540 states to 540 states and 604 transitions. [2023-11-21 22:27:58,237 INFO L78 Accepts]: Start accepts. Automaton has 540 states and 604 transitions. Word has length 83 [2023-11-21 22:27:58,238 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:27:58,238 INFO L495 AbstractCegarLoop]: Abstraction has 540 states and 604 transitions. [2023-11-21 22:27:58,238 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 4.608695652173913) internal successors, (106), 20 states have internal predecessors, (106), 7 states have call successors, (23), 8 states have call predecessors, (23), 7 states have return successors, (20), 7 states have call predecessors, (20), 7 states have call successors, (20) [2023-11-21 22:27:58,239 INFO L276 IsEmpty]: Start isEmpty. Operand 540 states and 604 transitions. [2023-11-21 22:27:58,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2023-11-21 22:27:58,246 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:27:58,247 INFO L195 NwaCegarLoop]: trace histogram [5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:27:58,274 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-21 22:27:58,464 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:27:58,464 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:27:58,465 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:27:58,465 INFO L85 PathProgramCache]: Analyzing trace with hash -1455862016, now seen corresponding path program 1 times [2023-11-21 22:27:58,465 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:27:58,465 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [528771507] [2023-11-21 22:27:58,465 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:58,466 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:27:58,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:58,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-21 22:27:58,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:58,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-21 22:27:58,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:58,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:27:58,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:59,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:27:59,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:59,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:27:59,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:59,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-21 22:27:59,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:59,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:27:59,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:59,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:27:59,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:59,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-21 22:27:59,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:59,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2023-11-21 22:27:59,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:59,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2023-11-21 22:27:59,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:59,333 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 19 proven. 34 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2023-11-21 22:27:59,334 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:27:59,334 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [528771507] [2023-11-21 22:27:59,334 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [528771507] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:27:59,334 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1580703456] [2023-11-21 22:27:59,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:27:59,335 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:27:59,335 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:27:59,336 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:27:59,361 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-21 22:27:59,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:27:59,457 INFO L262 TraceCheckSpWp]: Trace formula consists of 361 conjuncts, 26 conjunts are in the unsatisfiable core [2023-11-21 22:27:59,465 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:27:59,929 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 23 proven. 51 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:27:59,930 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:28:00,508 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 49 proven. 5 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-11-21 22:28:00,509 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1580703456] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:28:00,509 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:28:00,509 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 13, 11] total 33 [2023-11-21 22:28:00,511 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1306976904] [2023-11-21 22:28:00,512 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:28:00,512 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2023-11-21 22:28:00,513 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:28:00,514 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2023-11-21 22:28:00,514 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=159, Invalid=897, Unknown=0, NotChecked=0, Total=1056 [2023-11-21 22:28:00,515 INFO L87 Difference]: Start difference. First operand 540 states and 604 transitions. Second operand has 33 states, 33 states have (on average 4.848484848484849) internal successors, (160), 30 states have internal predecessors, (160), 15 states have call successors, (33), 10 states have call predecessors, (33), 12 states have return successors, (29), 16 states have call predecessors, (29), 14 states have call successors, (29) [2023-11-21 22:28:03,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:28:03,817 INFO L93 Difference]: Finished difference Result 1282 states and 1489 transitions. [2023-11-21 22:28:03,818 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 57 states. [2023-11-21 22:28:03,818 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 4.848484848484849) internal successors, (160), 30 states have internal predecessors, (160), 15 states have call successors, (33), 10 states have call predecessors, (33), 12 states have return successors, (29), 16 states have call predecessors, (29), 14 states have call successors, (29) Word has length 88 [2023-11-21 22:28:03,818 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:28:03,819 INFO L225 Difference]: With dead ends: 1282 [2023-11-21 22:28:03,819 INFO L226 Difference]: Without dead ends: 0 [2023-11-21 22:28:03,825 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 294 GetRequests, 204 SyntacticMatches, 4 SemanticMatches, 86 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2253 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=1324, Invalid=6332, Unknown=0, NotChecked=0, Total=7656 [2023-11-21 22:28:03,826 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 822 mSDsluCounter, 570 mSDsCounter, 0 mSdLazyCounter, 2852 mSolverCounterSat, 559 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 822 SdHoareTripleChecker+Valid, 624 SdHoareTripleChecker+Invalid, 3411 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 559 IncrementalHoareTripleChecker+Valid, 2852 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2023-11-21 22:28:03,827 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [822 Valid, 624 Invalid, 3411 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [559 Valid, 2852 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2023-11-21 22:28:03,828 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-21 22:28:03,828 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-21 22:28:03,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:28:03,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-21 22:28:03,829 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 88 [2023-11-21 22:28:03,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:28:03,830 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-21 22:28:03,830 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 4.848484848484849) internal successors, (160), 30 states have internal predecessors, (160), 15 states have call successors, (33), 10 states have call predecessors, (33), 12 states have return successors, (29), 16 states have call predecessors, (29), 14 states have call successors, (29) [2023-11-21 22:28:03,830 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-21 22:28:03,831 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-21 22:28:03,833 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-21 22:28:03,860 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2023-11-21 22:28:04,049 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:28:04,051 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-21 22:28:10,317 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 346 352) no Hoare annotation was computed. [2023-11-21 22:28:10,317 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 346 352) the Hoare annotation is: true [2023-11-21 22:28:10,318 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (< 2 ~waterLevel~0)) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or .cse0 (not (= ~pumpRunning~0 0)) .cse1 .cse2) (or .cse1 (let ((.cse3 (< ~pumpRunning~0 1))) (and (or .cse0 .cse3 (< ~waterLevel~0 2)) (or .cse0 .cse3 (not (= |old(~methaneLevelCritical~0)| 0)) (< ~switchedOnBeforeTS~0 1)))) .cse2))) [2023-11-21 22:28:10,318 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2023-11-21 22:28:10,318 INFO L899 garLoopResultBuilder]: For program point L184(lines 184 194) no Hoare annotation was computed. [2023-11-21 22:28:10,319 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 197) no Hoare annotation was computed. [2023-11-21 22:28:10,319 INFO L899 garLoopResultBuilder]: For program point L180-1(lines 172 200) no Hoare annotation was computed. [2023-11-21 22:28:10,319 INFO L895 garLoopResultBuilder]: At program point L399(line 399) the Hoare annotation is: (let ((.cse1 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (< |old(~waterLevel~0)| 2) .cse1 .cse2) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse2))) [2023-11-21 22:28:10,319 INFO L899 garLoopResultBuilder]: For program point L399-1(lines 380 404) no Hoare annotation was computed. [2023-11-21 22:28:10,319 INFO L899 garLoopResultBuilder]: For program point L333-1(lines 333 339) no Hoare annotation was computed. [2023-11-21 22:28:10,320 INFO L899 garLoopResultBuilder]: For program point L185(lines 185 191) no Hoare annotation was computed. [2023-11-21 22:28:10,320 INFO L899 garLoopResultBuilder]: For program point L309(line 309) no Hoare annotation was computed. [2023-11-21 22:28:10,320 INFO L899 garLoopResultBuilder]: For program point L326-2(lines 322 344) no Hoare annotation was computed. [2023-11-21 22:28:10,320 INFO L899 garLoopResultBuilder]: For program point L388(lines 388 396) no Hoare annotation was computed. [2023-11-21 22:28:10,320 INFO L899 garLoopResultBuilder]: For program point L384(lines 384 401) no Hoare annotation was computed. [2023-11-21 22:28:10,321 INFO L895 garLoopResultBuilder]: At program point L182(line 182) the Hoare annotation is: (let ((.cse9 (= ~methaneLevelCritical~0 0))) (let ((.cse7 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (<= 1 |old(~waterLevel~0)|)) (.cse5 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse3 (not .cse9)) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse10 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (and .cse1 (= ~waterLevel~0 1) .cse2 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 1)) .cse3 (not (= |old(~waterLevel~0)| 2)) .cse4) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse0 (and .cse1 .cse6 .cse7 .cse8 .cse2) .cse3 .cse4) (or (and (or .cse9 .cse0 (< |old(~waterLevel~0)| 2) .cse4 .cse10) (or .cse9 .cse5 .cse0 .cse4 .cse10)) (and .cse11 .cse6 (or (< |old(~waterLevel~0)| 1) (< ~waterLevel~0 |old(~waterLevel~0)|)) (or (and .cse7 .cse8) .cse12) .cse2)) (or .cse5 .cse0 (< 0 |old(~waterLevel~0)|) .cse3 .cse4 (and .cse1 .cse6 .cse12 .cse2)) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse11 .cse6 (<= ~waterLevel~0 1) .cse12) .cse0 .cse10)))) [2023-11-21 22:28:10,321 INFO L899 garLoopResultBuilder]: For program point L182-1(line 182) no Hoare annotation was computed. [2023-11-21 22:28:10,322 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 319 345) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1))) (and (or (< 1 |old(~waterLevel~0)|) (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4)) (or (and (= ~pumpRunning~0 0) .cse3 .cse4) (not (= |old(~pumpRunning~0)| 0)) .cse0 (< 2 |old(~waterLevel~0)|)) (or .cse0 (and .cse2 (= 2 ~waterLevel~0) .cse3) (not (= |old(~waterLevel~0)| 2)) .cse1))) [2023-11-21 22:28:10,322 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 319 345) no Hoare annotation was computed. [2023-11-21 22:28:10,322 INFO L895 garLoopResultBuilder]: At program point L394(line 394) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= |timeShift_processEnvironment_~tmp~3#1| 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse5 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (< |old(~pumpRunning~0)| 1)) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (< 1 |old(~waterLevel~0)|) (and .cse2 (or (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |old(~waterLevel~0)|)) (= |old(~waterLevel~0)| ~waterLevel~0)) (<= ~waterLevel~0 0) .cse3 .cse4) .cse5 .cse0 .cse6) (or .cse7 .cse0 (< |old(~waterLevel~0)| 2) .cse6 .cse1) (or .cse0 (and .cse2 (= ~waterLevel~0 1) .cse3 .cse4) (not (= |old(~waterLevel~0)| 2)) .cse6) (or .cse7 .cse5 .cse0 .cse6 .cse1))) [2023-11-21 22:28:10,323 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 309) no Hoare annotation was computed. [2023-11-21 22:28:10,323 INFO L895 garLoopResultBuilder]: At program point L167(line 167) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1))) (and (or (< 1 |old(~waterLevel~0)|) (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4)) (or (and (= ~pumpRunning~0 0) .cse3 .cse4) (not (= |old(~pumpRunning~0)| 0)) .cse0 (< 2 |old(~waterLevel~0)|)) (or .cse0 (and .cse2 (= 2 ~waterLevel~0) .cse3) (not (= |old(~waterLevel~0)| 2)) .cse1))) [2023-11-21 22:28:10,323 INFO L899 garLoopResultBuilder]: For program point L167-1(line 167) no Hoare annotation was computed. [2023-11-21 22:28:10,323 INFO L899 garLoopResultBuilder]: For program point L225(line 225) no Hoare annotation was computed. [2023-11-21 22:28:10,323 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 204 233) no Hoare annotation was computed. [2023-11-21 22:28:10,324 INFO L899 garLoopResultBuilder]: For program point L218(lines 218 222) no Hoare annotation was computed. [2023-11-21 22:28:10,324 INFO L902 garLoopResultBuilder]: At program point L218-1(lines 218 222) the Hoare annotation is: true [2023-11-21 22:28:10,324 INFO L902 garLoopResultBuilder]: At program point L214-2(lines 214 228) the Hoare annotation is: true [2023-11-21 22:28:10,324 INFO L902 garLoopResultBuilder]: At program point L210(line 210) the Hoare annotation is: true [2023-11-21 22:28:10,324 INFO L899 garLoopResultBuilder]: For program point L210-1(line 210) no Hoare annotation was computed. [2023-11-21 22:28:10,324 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 204 233) the Hoare annotation is: true [2023-11-21 22:28:10,324 INFO L899 garLoopResultBuilder]: For program point L229(lines 204 233) no Hoare annotation was computed. [2023-11-21 22:28:10,325 INFO L899 garLoopResultBuilder]: For program point L291-2(lines 291 298) no Hoare annotation was computed. [2023-11-21 22:28:10,325 INFO L895 garLoopResultBuilder]: At program point L543-2(lines 537 548) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (= 2 ~waterLevel~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (<= ~waterLevel~0 2)) (.cse5 (not .cse2)) (.cse6 (<= ~waterLevel~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse10 (= ~waterLevel~0 1)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse0 .cse3 .cse5 .cse4 .cse6 .cse7) (and .cse8 .cse2 .cse3 .cse4 .cse9) (and .cse8 .cse3 .cse5 .cse4 .cse9) (and .cse0 .cse3 .cse5 .cse4 .cse10 .cse7) (and .cse0 .cse2 .cse3 .cse4 .cse6 .cse7) (and .cse0 .cse2 .cse3 .cse4 .cse10 .cse7)))) [2023-11-21 22:28:10,325 INFO L899 garLoopResultBuilder]: For program point L527(lines 527 533) no Hoare annotation was computed. [2023-11-21 22:28:10,325 INFO L899 garLoopResultBuilder]: For program point L527-1(lines 527 533) no Hoare annotation was computed. [2023-11-21 22:28:10,325 INFO L899 garLoopResultBuilder]: For program point L556(lines 497 560) no Hoare annotation was computed. [2023-11-21 22:28:10,326 INFO L895 garLoopResultBuilder]: At program point L519(line 519) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (= 2 ~waterLevel~0)) (.cse5 (not .cse2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse6 .cse7 .cse3 .cse5 .cse4) (and .cse6 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse8) (and .cse6 .cse1 .cse3 .cse5 .cse4) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse8) (and .cse6 .cse2 .cse7 .cse3 .cse4)))) [2023-11-21 22:28:10,326 INFO L895 garLoopResultBuilder]: At program point L553(lines 506 554) the Hoare annotation is: false [2023-11-21 22:28:10,326 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-21 22:28:10,326 INFO L899 garLoopResultBuilder]: For program point L508(lines 507 552) no Hoare annotation was computed. [2023-11-21 22:28:10,327 INFO L895 garLoopResultBuilder]: At program point L529(line 529) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (= 2 ~waterLevel~0)) (.cse5 (not .cse2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse6 .cse7 .cse3 .cse5 .cse4) (and .cse6 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse8) (and .cse6 .cse1 .cse3 .cse5 .cse4) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse8) (and .cse6 .cse2 .cse7 .cse3 .cse4)))) [2023-11-21 22:28:10,327 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-21 22:28:10,327 INFO L895 garLoopResultBuilder]: At program point L550(lines 507 552) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (= 2 ~waterLevel~0)) (.cse5 (not .cse2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse6 .cse7 .cse3 .cse5 .cse4) (and .cse6 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse8) (and .cse6 .cse1 .cse3 .cse5 .cse4) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse8) (and .cse6 .cse2 .cse7 .cse3 .cse4)))) [2023-11-21 22:28:10,327 INFO L899 garLoopResultBuilder]: For program point L517(lines 517 523) no Hoare annotation was computed. [2023-11-21 22:28:10,327 INFO L899 garLoopResultBuilder]: For program point L517-1(lines 517 523) no Hoare annotation was computed. [2023-11-21 22:28:10,328 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 298) no Hoare annotation was computed. [2023-11-21 22:28:10,328 INFO L895 garLoopResultBuilder]: At program point L368(line 368) the Hoare annotation is: (let ((.cse1 (< ~switchedOnBeforeTS~0 1)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 0 ~waterLevel~0) .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (or (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) (= 2 ~waterLevel~0)))))) [2023-11-21 22:28:10,328 INFO L899 garLoopResultBuilder]: For program point L362(lines 362 370) no Hoare annotation was computed. [2023-11-21 22:28:10,328 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 354 378) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (< ~switchedOnBeforeTS~0 1)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (< |old(~pumpRunning~0)| 1))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0) (or (not (= ~waterLevel~0 1)) .cse1 .cse0 .cse2 .cse3 .cse4) (or .cse1 .cse0 (< 0 ~waterLevel~0) .cse2 .cse3 .cse4))) [2023-11-21 22:28:10,328 INFO L899 garLoopResultBuilder]: For program point L358(lines 358 375) no Hoare annotation was computed. [2023-11-21 22:28:10,329 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 354 378) no Hoare annotation was computed. [2023-11-21 22:28:10,329 INFO L895 garLoopResultBuilder]: At program point L373(line 373) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (< ~switchedOnBeforeTS~0 1)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (< |old(~pumpRunning~0)| 1))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (not (= ~waterLevel~0 1)) .cse1 .cse0 .cse2 .cse3 .cse4) (or .cse1 .cse0 (< 0 ~waterLevel~0) .cse2 .cse3 .cse4))) [2023-11-21 22:28:10,329 INFO L899 garLoopResultBuilder]: For program point L373-1(lines 354 378) no Hoare annotation was computed. [2023-11-21 22:28:10,329 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2023-11-21 22:28:10,329 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse0 (< ~pumpRunning~0 1)) (.cse5 (< ~switchedOnBeforeTS~0 1)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2 .cse3) (or .cse0 .cse2 (< 0 |old(~waterLevel~0)|) .cse5 .cse6 .cse7) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse5 .cse6 (= ~waterLevel~0 1)) (or (< 1 |old(~waterLevel~0)|) .cse4 .cse2 .cse7))) [2023-11-21 22:28:10,330 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 432 440) no Hoare annotation was computed. [2023-11-21 22:28:10,330 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 432 440) the Hoare annotation is: true [2023-11-21 22:28:10,332 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:28:10,334 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-21 22:28:10,352 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.11 10:28:10 BoogieIcfgContainer [2023-11-21 22:28:10,352 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-21 22:28:10,352 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-21 22:28:10,353 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-21 22:28:10,353 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-21 22:28:10,353 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:27:47" (3/4) ... [2023-11-21 22:28:10,355 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-21 22:28:10,359 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-21 22:28:10,359 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-21 22:28:10,360 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-21 22:28:10,360 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-21 22:28:10,360 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-21 22:28:10,360 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-21 22:28:10,360 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-21 22:28:10,369 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 46 nodes and edges [2023-11-21 22:28:10,369 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2023-11-21 22:28:10,370 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-21 22:28:10,371 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:28:10,372 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:28:10,492 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/witness.graphml [2023-11-21 22:28:10,493 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/witness.yml [2023-11-21 22:28:10,493 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-21 22:28:10,494 INFO L158 Benchmark]: Toolchain (without parser) took 24726.50ms. Allocated memory was 157.3MB in the beginning and 343.9MB in the end (delta: 186.6MB). Free memory was 117.7MB in the beginning and 165.5MB in the end (delta: -47.8MB). Peak memory consumption was 142.0MB. Max. memory is 16.1GB. [2023-11-21 22:28:10,494 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 113.2MB. Free memory is still 62.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-21 22:28:10,495 INFO L158 Benchmark]: CACSL2BoogieTranslator took 588.85ms. Allocated memory is still 157.3MB. Free memory was 117.3MB in the beginning and 97.9MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-21 22:28:10,495 INFO L158 Benchmark]: Boogie Procedure Inliner took 62.51ms. Allocated memory is still 157.3MB. Free memory was 97.9MB in the beginning and 95.5MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:28:10,496 INFO L158 Benchmark]: Boogie Preprocessor took 55.66ms. Allocated memory is still 157.3MB. Free memory was 95.5MB in the beginning and 93.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:28:10,496 INFO L158 Benchmark]: RCFGBuilder took 843.90ms. Allocated memory is still 157.3MB. Free memory was 93.4MB in the beginning and 110.8MB in the end (delta: -17.4MB). Peak memory consumption was 15.7MB. Max. memory is 16.1GB. [2023-11-21 22:28:10,497 INFO L158 Benchmark]: TraceAbstraction took 23013.96ms. Allocated memory was 157.3MB in the beginning and 343.9MB in the end (delta: 186.6MB). Free memory was 109.6MB in the beginning and 172.9MB in the end (delta: -63.3MB). Peak memory consumption was 193.4MB. Max. memory is 16.1GB. [2023-11-21 22:28:10,497 INFO L158 Benchmark]: Witness Printer took 141.02ms. Allocated memory is still 343.9MB. Free memory was 172.9MB in the beginning and 165.5MB in the end (delta: 7.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-21 22:28:10,499 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 113.2MB. Free memory is still 62.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 588.85ms. Allocated memory is still 157.3MB. Free memory was 117.3MB in the beginning and 97.9MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 62.51ms. Allocated memory is still 157.3MB. Free memory was 97.9MB in the beginning and 95.5MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 55.66ms. Allocated memory is still 157.3MB. Free memory was 95.5MB in the beginning and 93.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 843.90ms. Allocated memory is still 157.3MB. Free memory was 93.4MB in the beginning and 110.8MB in the end (delta: -17.4MB). Peak memory consumption was 15.7MB. Max. memory is 16.1GB. * TraceAbstraction took 23013.96ms. Allocated memory was 157.3MB in the beginning and 343.9MB in the end (delta: 186.6MB). Free memory was 109.6MB in the beginning and 172.9MB in the end (delta: -63.3MB). Peak memory consumption was 193.4MB. Max. memory is 16.1GB. * Witness Printer took 141.02ms. Allocated memory is still 343.9MB. Free memory was 172.9MB in the beginning and 165.5MB in the end (delta: 7.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 150]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [150] - GenericResultAtLocation [Line: 201]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [201] - GenericResultAtLocation [Line: 304]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [304] - GenericResultAtLocation [Line: 313]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [313] - GenericResultAtLocation [Line: 496]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [496] - GenericResultAtLocation [Line: 561]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [561] - GenericResultAtLocation [Line: 596]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [596] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 309]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 58 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 22.9s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 8.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2189 SdHoareTripleChecker+Valid, 4.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2160 mSDsluCounter, 2684 SdHoareTripleChecker+Invalid, 4.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2047 mSDsCounter, 1268 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 6015 IncrementalHoareTripleChecker+Invalid, 7283 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1268 mSolverCounterUnsat, 637 mSDtfsCounter, 6015 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 940 GetRequests, 678 SyntacticMatches, 8 SemanticMatches, 254 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3760 ImplicationChecksByTransitivity, 3.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=540occurred in iteration=11, InterpolantAutomatonStates: 203, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 431 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 21 LocationsWithAnnotation, 937 PreInvPairs, 1052 NumberOfFragments, 1368 HoareAnnotationTreeSize, 937 FomulaSimplifications, 14609 FormulaSimplificationTreeSizeReduction, 1.0s HoareSimplificationTime, 21 FomulaSimplificationsInter, 16365 FormulaSimplificationTreeSizeReductionInter, 5.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 5.3s InterpolantComputationTime, 864 NumberOfCodeBlocks, 864 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1079 ConstructedInterpolants, 0 QuantifiedInterpolants, 3143 SizeOfPredicates, 21 NumberOfNonLiveVariables, 1256 ConjunctsInSsa, 53 ConjunctsInUnsatCore, 19 InterpolantComputations, 9 PerfectInterpolantSequences, 493/631 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 214]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 506]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: ((((((((((((1 <= pumpRunning) && (2 == waterLevel)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((((1 <= pumpRunning) && (2 == waterLevel)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((((1 <= pumpRunning) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (splverifierCounter == 0))) || ((((((1 <= pumpRunning) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) RESULT: Ultimate proved your program to be correct! [2023-11-21 22:28:10,533 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2538e302-1d26-4239-b7d2-47eb5637cde0/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE