./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 30e01a73 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e --- Real Ultimate output --- This is Ultimate 0.2.3-dev-30e01a7 [2023-11-23 21:38:52,967 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-23 21:38:53,047 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-23 21:38:53,053 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-23 21:38:53,054 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-23 21:38:53,085 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-23 21:38:53,086 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-23 21:38:53,087 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-23 21:38:53,088 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-23 21:38:53,088 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-23 21:38:53,089 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-23 21:38:53,090 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-23 21:38:53,091 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-23 21:38:53,091 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-23 21:38:53,092 INFO L153 SettingsManager]: * Use SBE=true [2023-11-23 21:38:53,093 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-23 21:38:53,093 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-23 21:38:53,094 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-23 21:38:53,095 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-23 21:38:53,095 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-23 21:38:53,096 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-23 21:38:53,097 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-23 21:38:53,099 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-23 21:38:53,099 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-23 21:38:53,100 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-23 21:38:53,100 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-23 21:38:53,100 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-23 21:38:53,101 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-23 21:38:53,102 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-23 21:38:53,102 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-23 21:38:53,104 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-23 21:38:53,104 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:38:53,104 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-23 21:38:53,104 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-23 21:38:53,105 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-23 21:38:53,105 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-23 21:38:53,105 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-23 21:38:53,105 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-23 21:38:53,106 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-23 21:38:53,106 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-23 21:38:53,106 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-23 21:38:53,106 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-23 21:38:53,107 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e [2023-11-23 21:38:53,409 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-23 21:38:53,441 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-23 21:38:53,444 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-23 21:38:53,446 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-23 21:38:53,446 INFO L274 PluginConnector]: CDTParser initialized [2023-11-23 21:38:53,448 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2023-11-23 21:38:56,541 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-23 21:38:56,836 INFO L384 CDTParser]: Found 1 translation units. [2023-11-23 21:38:56,837 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2023-11-23 21:38:56,852 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/data/ca3cd5572/e2fc22e020ea4fe5a168963bd5e3aa7d/FLAG7724ecce9 [2023-11-23 21:38:56,867 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/data/ca3cd5572/e2fc22e020ea4fe5a168963bd5e3aa7d [2023-11-23 21:38:56,877 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-23 21:38:56,878 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-23 21:38:56,879 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-23 21:38:56,880 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-23 21:38:56,885 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-23 21:38:56,886 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:38:56" (1/1) ... [2023-11-23 21:38:56,887 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7595006f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:56, skipping insertion in model container [2023-11-23 21:38:56,887 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:38:56" (1/1) ... [2023-11-23 21:38:56,938 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-23 21:38:57,371 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2023-11-23 21:38:57,375 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:38:57,388 INFO L202 MainTranslator]: Completed pre-run [2023-11-23 21:38:57,399 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] [2023-11-23 21:38:57,401 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [124] [2023-11-23 21:38:57,401 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [354] [2023-11-23 21:38:57,402 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [455] [2023-11-23 21:38:57,402 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [495] [2023-11-23 21:38:57,402 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [530] [2023-11-23 21:38:57,402 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [634] [2023-11-23 21:38:57,403 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1000] [2023-11-23 21:38:57,456 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2023-11-23 21:38:57,457 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:38:57,478 INFO L206 MainTranslator]: Completed translation [2023-11-23 21:38:57,479 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:57 WrapperNode [2023-11-23 21:38:57,479 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-23 21:38:57,480 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-23 21:38:57,481 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-23 21:38:57,481 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-23 21:38:57,489 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:57" (1/1) ... [2023-11-23 21:38:57,503 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:57" (1/1) ... [2023-11-23 21:38:57,538 INFO L138 Inliner]: procedures = 58, calls = 102, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 212 [2023-11-23 21:38:57,539 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-23 21:38:57,539 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-23 21:38:57,540 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-23 21:38:57,540 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-23 21:38:57,554 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:57" (1/1) ... [2023-11-23 21:38:57,555 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:57" (1/1) ... [2023-11-23 21:38:57,588 INFO L184 PluginConnector]: Executing the observer HeapSplitter from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:57" (1/1) ... [2023-11-23 21:38:57,613 INFO L189 HeapSplitter]: Split 2 memory accesses to 1 slices as follows [2] [2023-11-23 21:38:57,614 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:57" (1/1) ... [2023-11-23 21:38:57,614 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:57" (1/1) ... [2023-11-23 21:38:57,619 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:57" (1/1) ... [2023-11-23 21:38:57,623 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:57" (1/1) ... [2023-11-23 21:38:57,625 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:57" (1/1) ... [2023-11-23 21:38:57,627 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:57" (1/1) ... [2023-11-23 21:38:57,629 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-23 21:38:57,630 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-23 21:38:57,630 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-23 21:38:57,631 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-23 21:38:57,632 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:57" (1/1) ... [2023-11-23 21:38:57,638 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:38:57,657 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 [2023-11-23 21:38:57,673 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-23 21:38:57,699 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-23 21:38:57,734 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-23 21:38:57,734 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-23 21:38:57,735 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-23 21:38:57,735 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-23 21:38:57,735 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-23 21:38:57,735 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-23 21:38:57,735 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-23 21:38:57,736 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-23 21:38:57,736 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-23 21:38:57,736 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:38:57,736 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:38:57,737 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-23 21:38:57,737 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-23 21:38:57,737 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-23 21:38:57,738 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-23 21:38:57,738 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-23 21:38:57,738 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-23 21:38:57,739 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-23 21:38:57,739 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-23 21:38:57,740 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-23 21:38:57,819 INFO L241 CfgBuilder]: Building ICFG [2023-11-23 21:38:57,822 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-23 21:38:58,233 INFO L282 CfgBuilder]: Performing block encoding [2023-11-23 21:38:58,313 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-23 21:38:58,314 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-23 21:38:58,314 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:38:58 BoogieIcfgContainer [2023-11-23 21:38:58,314 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-23 21:38:58,317 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-23 21:38:58,320 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-23 21:38:58,324 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-23 21:38:58,324 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 09:38:56" (1/3) ... [2023-11-23 21:38:58,325 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@71ed900 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:38:58, skipping insertion in model container [2023-11-23 21:38:58,325 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:38:57" (2/3) ... [2023-11-23 21:38:58,327 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@71ed900 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:38:58, skipping insertion in model container [2023-11-23 21:38:58,327 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:38:58" (3/3) ... [2023-11-23 21:38:58,328 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product52.cil.c [2023-11-23 21:38:58,344 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-23 21:38:58,345 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-23 21:38:58,401 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-23 21:38:58,408 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@245fd02c, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-23 21:38:58,409 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-23 21:38:58,414 INFO L276 IsEmpty]: Start isEmpty. Operand has 74 states, 51 states have (on average 1.5490196078431373) internal successors, (79), 60 states have internal predecessors, (79), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-23 21:38:58,427 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-23 21:38:58,427 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:38:58,428 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:38:58,429 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:38:58,437 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:38:58,437 INFO L85 PathProgramCache]: Analyzing trace with hash 149002175, now seen corresponding path program 1 times [2023-11-23 21:38:58,448 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 21:38:58,448 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [128173212] [2023-11-23 21:38:58,449 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:38:58,449 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:38:58,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:38:58,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-23 21:38:58,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:38:58,672 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:38:58,672 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 21:38:58,673 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [128173212] [2023-11-23 21:38:58,673 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [128173212] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:38:58,674 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:38:58,674 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 21:38:58,675 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1175277225] [2023-11-23 21:38:58,676 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:38:58,681 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-23 21:38:58,681 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 21:38:58,724 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-23 21:38:58,724 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 21:38:58,727 INFO L87 Difference]: Start difference. First operand has 74 states, 51 states have (on average 1.5490196078431373) internal successors, (79), 60 states have internal predecessors, (79), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:38:58,784 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:38:58,784 INFO L93 Difference]: Finished difference Result 146 states and 211 transitions. [2023-11-23 21:38:58,786 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-23 21:38:58,787 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-23 21:38:58,788 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:38:58,797 INFO L225 Difference]: With dead ends: 146 [2023-11-23 21:38:58,798 INFO L226 Difference]: Without dead ends: 69 [2023-11-23 21:38:58,802 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 21:38:58,806 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 84 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:38:58,807 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 84 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:38:58,825 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2023-11-23 21:38:58,849 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2023-11-23 21:38:58,850 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 48 states have (on average 1.4375) internal successors, (69), 56 states have internal predecessors, (69), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-23 21:38:58,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 94 transitions. [2023-11-23 21:38:58,855 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 94 transitions. Word has length 17 [2023-11-23 21:38:58,855 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:38:58,855 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 94 transitions. [2023-11-23 21:38:58,856 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:38:58,856 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 94 transitions. [2023-11-23 21:38:58,858 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-23 21:38:58,859 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:38:58,859 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:38:58,859 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-23 21:38:58,859 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:38:58,860 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:38:58,860 INFO L85 PathProgramCache]: Analyzing trace with hash 1711369592, now seen corresponding path program 1 times [2023-11-23 21:38:58,861 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 21:38:58,861 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [250071121] [2023-11-23 21:38:58,861 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:38:58,861 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:38:58,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:38:58,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-23 21:38:58,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:38:58,992 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:38:58,992 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 21:38:58,993 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [250071121] [2023-11-23 21:38:58,993 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [250071121] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:38:58,993 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:38:58,993 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 21:38:58,993 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1605554653] [2023-11-23 21:38:58,994 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:38:59,011 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:38:59,011 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 21:38:59,012 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:38:59,012 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:38:59,013 INFO L87 Difference]: Start difference. First operand 69 states and 94 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:38:59,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:38:59,072 INFO L93 Difference]: Finished difference Result 108 states and 146 transitions. [2023-11-23 21:38:59,074 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:38:59,075 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-11-23 21:38:59,075 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:38:59,076 INFO L225 Difference]: With dead ends: 108 [2023-11-23 21:38:59,076 INFO L226 Difference]: Without dead ends: 61 [2023-11-23 21:38:59,077 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:38:59,079 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 14 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:38:59,079 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 124 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:38:59,080 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2023-11-23 21:38:59,095 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2023-11-23 21:38:59,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 43 states have (on average 1.4651162790697674) internal successors, (63), 51 states have internal predecessors, (63), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-23 21:38:59,103 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 83 transitions. [2023-11-23 21:38:59,103 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 83 transitions. Word has length 18 [2023-11-23 21:38:59,104 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:38:59,104 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 83 transitions. [2023-11-23 21:38:59,104 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:38:59,104 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 83 transitions. [2023-11-23 21:38:59,105 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-23 21:38:59,105 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:38:59,106 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:38:59,106 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-23 21:38:59,106 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:38:59,107 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:38:59,107 INFO L85 PathProgramCache]: Analyzing trace with hash -212216258, now seen corresponding path program 1 times [2023-11-23 21:38:59,107 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 21:38:59,107 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [963816006] [2023-11-23 21:38:59,107 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:38:59,108 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:38:59,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:38:59,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-23 21:38:59,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:38:59,292 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:38:59,292 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 21:38:59,299 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [963816006] [2023-11-23 21:38:59,299 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [963816006] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:38:59,299 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:38:59,300 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 21:38:59,300 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2061488083] [2023-11-23 21:38:59,300 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:38:59,300 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:38:59,301 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 21:38:59,301 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:38:59,301 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:38:59,302 INFO L87 Difference]: Start difference. First operand 61 states and 83 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:38:59,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:38:59,396 INFO L93 Difference]: Finished difference Result 179 states and 246 transitions. [2023-11-23 21:38:59,397 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:38:59,397 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2023-11-23 21:38:59,397 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:38:59,400 INFO L225 Difference]: With dead ends: 179 [2023-11-23 21:38:59,400 INFO L226 Difference]: Without dead ends: 120 [2023-11-23 21:38:59,401 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:38:59,402 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 77 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 149 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:38:59,403 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 149 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:38:59,404 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2023-11-23 21:38:59,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 117. [2023-11-23 21:38:59,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 82 states have (on average 1.475609756097561) internal successors, (121), 97 states have internal predecessors, (121), 20 states have call successors, (20), 14 states have call predecessors, (20), 14 states have return successors, (20), 13 states have call predecessors, (20), 20 states have call successors, (20) [2023-11-23 21:38:59,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 161 transitions. [2023-11-23 21:38:59,428 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 161 transitions. Word has length 21 [2023-11-23 21:38:59,428 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:38:59,428 INFO L495 AbstractCegarLoop]: Abstraction has 117 states and 161 transitions. [2023-11-23 21:38:59,429 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:38:59,429 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 161 transitions. [2023-11-23 21:38:59,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-23 21:38:59,431 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:38:59,431 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:38:59,432 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-23 21:38:59,432 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:38:59,432 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:38:59,433 INFO L85 PathProgramCache]: Analyzing trace with hash 1449497159, now seen corresponding path program 1 times [2023-11-23 21:38:59,433 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 21:38:59,433 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1737641020] [2023-11-23 21:38:59,433 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:38:59,433 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:38:59,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:38:59,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-23 21:38:59,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:38:59,521 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:38:59,522 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 21:38:59,522 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1737641020] [2023-11-23 21:38:59,522 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1737641020] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:38:59,522 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:38:59,522 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-23 21:38:59,523 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [140916300] [2023-11-23 21:38:59,523 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:38:59,523 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 21:38:59,523 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 21:38:59,524 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 21:38:59,524 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:38:59,525 INFO L87 Difference]: Start difference. First operand 117 states and 161 transitions. Second operand has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:38:59,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:38:59,624 INFO L93 Difference]: Finished difference Result 310 states and 433 transitions. [2023-11-23 21:38:59,625 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-23 21:38:59,625 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2023-11-23 21:38:59,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:38:59,628 INFO L225 Difference]: With dead ends: 310 [2023-11-23 21:38:59,629 INFO L226 Difference]: Without dead ends: 195 [2023-11-23 21:38:59,630 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:38:59,632 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 56 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:38:59,633 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 188 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:38:59,634 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2023-11-23 21:38:59,666 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 190. [2023-11-23 21:38:59,666 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 190 states, 135 states have (on average 1.4) internal successors, (189), 150 states have internal predecessors, (189), 28 states have call successors, (28), 26 states have call predecessors, (28), 26 states have return successors, (36), 25 states have call predecessors, (36), 28 states have call successors, (36) [2023-11-23 21:38:59,669 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 190 states to 190 states and 253 transitions. [2023-11-23 21:38:59,669 INFO L78 Accepts]: Start accepts. Automaton has 190 states and 253 transitions. Word has length 24 [2023-11-23 21:38:59,670 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:38:59,670 INFO L495 AbstractCegarLoop]: Abstraction has 190 states and 253 transitions. [2023-11-23 21:38:59,670 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:38:59,670 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 253 transitions. [2023-11-23 21:38:59,672 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-23 21:38:59,672 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:38:59,673 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:38:59,673 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-23 21:38:59,673 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:38:59,673 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:38:59,674 INFO L85 PathProgramCache]: Analyzing trace with hash -1581538435, now seen corresponding path program 1 times [2023-11-23 21:38:59,674 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 21:38:59,674 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1100487038] [2023-11-23 21:38:59,674 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:38:59,674 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:38:59,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:38:59,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-23 21:38:59,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:38:59,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-23 21:38:59,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:38:59,833 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:38:59,833 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 21:38:59,833 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1100487038] [2023-11-23 21:38:59,833 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1100487038] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:38:59,833 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:38:59,834 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-23 21:38:59,834 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [748337446] [2023-11-23 21:38:59,834 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:38:59,834 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-23 21:38:59,835 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 21:38:59,835 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-23 21:38:59,835 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:38:59,836 INFO L87 Difference]: Start difference. First operand 190 states and 253 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-23 21:38:59,982 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:38:59,983 INFO L93 Difference]: Finished difference Result 422 states and 569 transitions. [2023-11-23 21:38:59,983 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-23 21:38:59,983 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 33 [2023-11-23 21:38:59,983 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:38:59,986 INFO L225 Difference]: With dead ends: 422 [2023-11-23 21:38:59,987 INFO L226 Difference]: Without dead ends: 234 [2023-11-23 21:38:59,989 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-23 21:38:59,990 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 49 mSDsluCounter, 132 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 133 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:38:59,991 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 191 Invalid, 133 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:38:59,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 234 states. [2023-11-23 21:39:00,020 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 234 to 232. [2023-11-23 21:39:00,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 232 states, 167 states have (on average 1.3712574850299402) internal successors, (229), 182 states have internal predecessors, (229), 32 states have call successors, (32), 26 states have call predecessors, (32), 32 states have return successors, (46), 33 states have call predecessors, (46), 32 states have call successors, (46) [2023-11-23 21:39:00,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 307 transitions. [2023-11-23 21:39:00,024 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 307 transitions. Word has length 33 [2023-11-23 21:39:00,025 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:39:00,025 INFO L495 AbstractCegarLoop]: Abstraction has 232 states and 307 transitions. [2023-11-23 21:39:00,025 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-23 21:39:00,025 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 307 transitions. [2023-11-23 21:39:00,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-23 21:39:00,027 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:39:00,027 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:39:00,028 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-23 21:39:00,028 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:39:00,028 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:39:00,028 INFO L85 PathProgramCache]: Analyzing trace with hash 1433565183, now seen corresponding path program 1 times [2023-11-23 21:39:00,028 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 21:39:00,029 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1374891470] [2023-11-23 21:39:00,029 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:39:00,029 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:39:00,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:00,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-23 21:39:00,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:00,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-23 21:39:00,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:00,151 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:39:00,151 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 21:39:00,151 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1374891470] [2023-11-23 21:39:00,152 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1374891470] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:39:00,152 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:39:00,152 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-23 21:39:00,152 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [676587197] [2023-11-23 21:39:00,154 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:39:00,155 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-23 21:39:00,155 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 21:39:00,156 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-23 21:39:00,157 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:39:00,157 INFO L87 Difference]: Start difference. First operand 232 states and 307 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-23 21:39:00,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:39:00,343 INFO L93 Difference]: Finished difference Result 478 states and 649 transitions. [2023-11-23 21:39:00,343 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-23 21:39:00,344 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 33 [2023-11-23 21:39:00,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:39:00,347 INFO L225 Difference]: With dead ends: 478 [2023-11-23 21:39:00,347 INFO L226 Difference]: Without dead ends: 248 [2023-11-23 21:39:00,348 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-23 21:39:00,349 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 55 mSDsluCounter, 131 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:39:00,350 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 189 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:39:00,351 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248 states. [2023-11-23 21:39:00,390 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248 to 236. [2023-11-23 21:39:00,395 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 236 states, 171 states have (on average 1.3625730994152048) internal successors, (233), 186 states have internal predecessors, (233), 32 states have call successors, (32), 26 states have call predecessors, (32), 32 states have return successors, (46), 33 states have call predecessors, (46), 32 states have call successors, (46) [2023-11-23 21:39:00,398 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 311 transitions. [2023-11-23 21:39:00,398 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 311 transitions. Word has length 33 [2023-11-23 21:39:00,399 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:39:00,399 INFO L495 AbstractCegarLoop]: Abstraction has 236 states and 311 transitions. [2023-11-23 21:39:00,399 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-23 21:39:00,400 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 311 transitions. [2023-11-23 21:39:00,409 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-23 21:39:00,411 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:39:00,411 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:39:00,411 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-23 21:39:00,412 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:39:00,412 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:39:00,412 INFO L85 PathProgramCache]: Analyzing trace with hash -154782719, now seen corresponding path program 1 times [2023-11-23 21:39:00,412 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 21:39:00,413 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1490610009] [2023-11-23 21:39:00,413 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:39:00,413 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:39:00,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:00,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-23 21:39:00,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:00,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-23 21:39:00,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:00,527 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:39:00,527 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 21:39:00,527 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1490610009] [2023-11-23 21:39:00,527 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1490610009] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:39:00,528 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:39:00,528 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-23 21:39:00,531 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [243822808] [2023-11-23 21:39:00,531 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:39:00,531 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-23 21:39:00,531 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 21:39:00,532 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-23 21:39:00,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:39:00,532 INFO L87 Difference]: Start difference. First operand 236 states and 311 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-23 21:39:00,878 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:39:00,879 INFO L93 Difference]: Finished difference Result 775 states and 1093 transitions. [2023-11-23 21:39:00,879 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-23 21:39:00,879 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 33 [2023-11-23 21:39:00,880 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:39:00,885 INFO L225 Difference]: With dead ends: 775 [2023-11-23 21:39:00,885 INFO L226 Difference]: Without dead ends: 541 [2023-11-23 21:39:00,887 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-23 21:39:00,891 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 182 mSDsluCounter, 161 mSDsCounter, 0 mSdLazyCounter, 230 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 188 SdHoareTripleChecker+Valid, 278 SdHoareTripleChecker+Invalid, 283 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 230 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-23 21:39:00,893 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [188 Valid, 278 Invalid, 283 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 230 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-23 21:39:00,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 541 states. [2023-11-23 21:39:00,954 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 541 to 533. [2023-11-23 21:39:00,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 533 states, 384 states have (on average 1.3463541666666667) internal successors, (517), 413 states have internal predecessors, (517), 78 states have call successors, (78), 71 states have call predecessors, (78), 70 states have return successors, (128), 72 states have call predecessors, (128), 78 states have call successors, (128) [2023-11-23 21:39:00,963 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 533 states to 533 states and 723 transitions. [2023-11-23 21:39:00,964 INFO L78 Accepts]: Start accepts. Automaton has 533 states and 723 transitions. Word has length 33 [2023-11-23 21:39:00,965 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:39:00,966 INFO L495 AbstractCegarLoop]: Abstraction has 533 states and 723 transitions. [2023-11-23 21:39:00,966 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-23 21:39:00,966 INFO L276 IsEmpty]: Start isEmpty. Operand 533 states and 723 transitions. [2023-11-23 21:39:00,967 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2023-11-23 21:39:00,968 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:39:00,968 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:39:00,968 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-23 21:39:00,968 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:39:00,969 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:39:00,969 INFO L85 PathProgramCache]: Analyzing trace with hash 1327300251, now seen corresponding path program 1 times [2023-11-23 21:39:00,969 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 21:39:00,969 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2016563580] [2023-11-23 21:39:00,969 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:39:00,970 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:39:00,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:01,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-23 21:39:01,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:01,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-23 21:39:01,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:01,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-23 21:39:01,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:01,091 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:39:01,091 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 21:39:01,091 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2016563580] [2023-11-23 21:39:01,092 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2016563580] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:39:01,092 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:39:01,092 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-23 21:39:01,092 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [902071454] [2023-11-23 21:39:01,093 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:39:01,094 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-23 21:39:01,097 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 21:39:01,098 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-23 21:39:01,099 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:39:01,099 INFO L87 Difference]: Start difference. First operand 533 states and 723 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-23 21:39:01,545 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:39:01,545 INFO L93 Difference]: Finished difference Result 1147 states and 1649 transitions. [2023-11-23 21:39:01,546 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-23 21:39:01,546 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 37 [2023-11-23 21:39:01,547 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:39:01,556 INFO L225 Difference]: With dead ends: 1147 [2023-11-23 21:39:01,556 INFO L226 Difference]: Without dead ends: 1145 [2023-11-23 21:39:01,558 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-23 21:39:01,559 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 257 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 109 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 261 SdHoareTripleChecker+Valid, 147 SdHoareTripleChecker+Invalid, 266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 109 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-23 21:39:01,559 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [261 Valid, 147 Invalid, 266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [109 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-23 21:39:01,561 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1145 states. [2023-11-23 21:39:01,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1145 to 1038. [2023-11-23 21:39:01,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1038 states, 746 states have (on average 1.3471849865951742) internal successors, (1005), 814 states have internal predecessors, (1005), 162 states have call successors, (162), 121 states have call predecessors, (162), 129 states have return successors, (343), 139 states have call predecessors, (343), 162 states have call successors, (343) [2023-11-23 21:39:01,671 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1038 states to 1038 states and 1510 transitions. [2023-11-23 21:39:01,672 INFO L78 Accepts]: Start accepts. Automaton has 1038 states and 1510 transitions. Word has length 37 [2023-11-23 21:39:01,672 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:39:01,672 INFO L495 AbstractCegarLoop]: Abstraction has 1038 states and 1510 transitions. [2023-11-23 21:39:01,672 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-23 21:39:01,673 INFO L276 IsEmpty]: Start isEmpty. Operand 1038 states and 1510 transitions. [2023-11-23 21:39:01,676 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-11-23 21:39:01,676 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:39:01,676 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:39:01,677 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-23 21:39:01,677 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:39:01,677 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:39:01,677 INFO L85 PathProgramCache]: Analyzing trace with hash 1694581556, now seen corresponding path program 1 times [2023-11-23 21:39:01,678 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 21:39:01,678 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [536165057] [2023-11-23 21:39:01,678 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:39:01,678 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:39:01,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:01,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-23 21:39:01,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:01,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-23 21:39:01,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:01,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-23 21:39:01,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:01,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-23 21:39:01,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:01,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-23 21:39:01,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:01,774 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-23 21:39:01,774 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 21:39:01,774 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [536165057] [2023-11-23 21:39:01,774 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [536165057] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:39:01,774 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:39:01,775 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-23 21:39:01,775 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2130438186] [2023-11-23 21:39:01,775 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:39:01,775 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-23 21:39:01,775 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 21:39:01,776 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-23 21:39:01,776 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-23 21:39:01,777 INFO L87 Difference]: Start difference. First operand 1038 states and 1510 transitions. Second operand has 7 states, 6 states have (on average 8.5) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-23 21:39:02,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:39:02,207 INFO L93 Difference]: Finished difference Result 1662 states and 2401 transitions. [2023-11-23 21:39:02,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-23 21:39:02,208 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 8.5) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 63 [2023-11-23 21:39:02,208 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:39:02,213 INFO L225 Difference]: With dead ends: 1662 [2023-11-23 21:39:02,213 INFO L226 Difference]: Without dead ends: 626 [2023-11-23 21:39:02,218 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2023-11-23 21:39:02,218 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 239 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 238 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 247 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 305 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 238 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-23 21:39:02,219 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [247 Valid, 203 Invalid, 305 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 238 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-23 21:39:02,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 626 states. [2023-11-23 21:39:02,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 626 to 587. [2023-11-23 21:39:02,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 587 states, 427 states have (on average 1.3278688524590163) internal successors, (567), 461 states have internal predecessors, (567), 86 states have call successors, (86), 69 states have call predecessors, (86), 73 states have return successors, (173), 80 states have call predecessors, (173), 86 states have call successors, (173) [2023-11-23 21:39:02,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 587 states to 587 states and 826 transitions. [2023-11-23 21:39:02,296 INFO L78 Accepts]: Start accepts. Automaton has 587 states and 826 transitions. Word has length 63 [2023-11-23 21:39:02,296 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:39:02,297 INFO L495 AbstractCegarLoop]: Abstraction has 587 states and 826 transitions. [2023-11-23 21:39:02,297 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 8.5) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-23 21:39:02,297 INFO L276 IsEmpty]: Start isEmpty. Operand 587 states and 826 transitions. [2023-11-23 21:39:02,299 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2023-11-23 21:39:02,300 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:39:02,300 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:39:02,300 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-23 21:39:02,300 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:39:02,301 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:39:02,301 INFO L85 PathProgramCache]: Analyzing trace with hash -1098289702, now seen corresponding path program 1 times [2023-11-23 21:39:02,301 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 21:39:02,301 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [669451356] [2023-11-23 21:39:02,301 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:39:02,302 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:39:02,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:02,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-23 21:39:02,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:02,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-23 21:39:02,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:02,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-23 21:39:02,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:02,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-23 21:39:02,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:02,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2023-11-23 21:39:02,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:02,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2023-11-23 21:39:02,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:02,449 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 17 proven. 4 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-23 21:39:02,450 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 21:39:02,450 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [669451356] [2023-11-23 21:39:02,450 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [669451356] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:39:02,450 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [36588120] [2023-11-23 21:39:02,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:39:02,451 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:39:02,451 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 [2023-11-23 21:39:02,455 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:39:02,483 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-23 21:39:02,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:02,565 INFO L262 TraceCheckSpWp]: Trace formula consists of 289 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-23 21:39:02,572 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:39:02,675 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:39:02,675 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-23 21:39:02,676 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [36588120] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:39:02,676 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-23 21:39:02,676 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 8 [2023-11-23 21:39:02,676 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1604887930] [2023-11-23 21:39:02,677 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:39:02,677 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:39:02,677 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 21:39:02,678 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:39:02,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-23 21:39:02,678 INFO L87 Difference]: Start difference. First operand 587 states and 826 transitions. Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-23 21:39:02,776 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:39:02,776 INFO L93 Difference]: Finished difference Result 1085 states and 1539 transitions. [2023-11-23 21:39:02,777 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:39:02,777 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 69 [2023-11-23 21:39:02,777 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:39:02,781 INFO L225 Difference]: With dead ends: 1085 [2023-11-23 21:39:02,781 INFO L226 Difference]: Without dead ends: 500 [2023-11-23 21:39:02,784 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 87 GetRequests, 81 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-23 21:39:02,799 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 40 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 35 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 35 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:39:02,800 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 150 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 35 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:39:02,801 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 500 states. [2023-11-23 21:39:02,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 500 to 500. [2023-11-23 21:39:02,855 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 500 states, 364 states have (on average 1.2967032967032968) internal successors, (472), 392 states have internal predecessors, (472), 72 states have call successors, (72), 63 states have call predecessors, (72), 63 states have return successors, (108), 68 states have call predecessors, (108), 72 states have call successors, (108) [2023-11-23 21:39:02,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 500 states to 500 states and 652 transitions. [2023-11-23 21:39:02,859 INFO L78 Accepts]: Start accepts. Automaton has 500 states and 652 transitions. Word has length 69 [2023-11-23 21:39:02,860 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:39:02,860 INFO L495 AbstractCegarLoop]: Abstraction has 500 states and 652 transitions. [2023-11-23 21:39:02,860 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-23 21:39:02,860 INFO L276 IsEmpty]: Start isEmpty. Operand 500 states and 652 transitions. [2023-11-23 21:39:02,862 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2023-11-23 21:39:02,862 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:39:02,862 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:39:02,889 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-23 21:39:03,084 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:39:03,084 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:39:03,085 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:39:03,085 INFO L85 PathProgramCache]: Analyzing trace with hash 914529793, now seen corresponding path program 1 times [2023-11-23 21:39:03,085 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 21:39:03,085 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1408729782] [2023-11-23 21:39:03,085 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:39:03,085 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:39:03,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:03,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-23 21:39:03,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:03,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-23 21:39:03,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:03,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-23 21:39:03,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:03,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-23 21:39:03,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:03,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-23 21:39:03,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:03,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-23 21:39:03,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:03,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-23 21:39:03,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:03,239 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2023-11-23 21:39:03,239 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 21:39:03,239 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1408729782] [2023-11-23 21:39:03,240 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1408729782] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:39:03,240 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1971792351] [2023-11-23 21:39:03,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:39:03,240 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:39:03,240 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 [2023-11-23 21:39:03,241 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:39:03,263 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-23 21:39:03,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:03,347 INFO L262 TraceCheckSpWp]: Trace formula consists of 291 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-23 21:39:03,350 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:39:03,385 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-11-23 21:39:03,385 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-23 21:39:03,386 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1971792351] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:39:03,386 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-23 21:39:03,386 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [7] total 8 [2023-11-23 21:39:03,386 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [76966605] [2023-11-23 21:39:03,386 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:39:03,388 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 21:39:03,388 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 21:39:03,389 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 21:39:03,390 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-23 21:39:03,390 INFO L87 Difference]: Start difference. First operand 500 states and 652 transitions. Second operand has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-23 21:39:03,488 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:39:03,488 INFO L93 Difference]: Finished difference Result 1016 states and 1349 transitions. [2023-11-23 21:39:03,488 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-23 21:39:03,489 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 72 [2023-11-23 21:39:03,490 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:39:03,495 INFO L225 Difference]: With dead ends: 1016 [2023-11-23 21:39:03,495 INFO L226 Difference]: Without dead ends: 518 [2023-11-23 21:39:03,500 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 89 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-23 21:39:03,500 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 1 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:39:03,501 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 206 Invalid, 47 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:39:03,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 518 states. [2023-11-23 21:39:03,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 518 to 506. [2023-11-23 21:39:03,560 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 506 states, 370 states have (on average 1.2918918918918918) internal successors, (478), 398 states have internal predecessors, (478), 72 states have call successors, (72), 63 states have call predecessors, (72), 63 states have return successors, (108), 68 states have call predecessors, (108), 72 states have call successors, (108) [2023-11-23 21:39:03,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 506 states to 506 states and 658 transitions. [2023-11-23 21:39:03,565 INFO L78 Accepts]: Start accepts. Automaton has 506 states and 658 transitions. Word has length 72 [2023-11-23 21:39:03,567 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:39:03,567 INFO L495 AbstractCegarLoop]: Abstraction has 506 states and 658 transitions. [2023-11-23 21:39:03,567 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-23 21:39:03,568 INFO L276 IsEmpty]: Start isEmpty. Operand 506 states and 658 transitions. [2023-11-23 21:39:03,570 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2023-11-23 21:39:03,570 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:39:03,570 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:39:03,597 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-23 21:39:03,791 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:39:03,791 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:39:03,792 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:39:03,792 INFO L85 PathProgramCache]: Analyzing trace with hash 491827967, now seen corresponding path program 1 times [2023-11-23 21:39:03,792 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 21:39:03,792 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1680349531] [2023-11-23 21:39:03,792 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:39:03,792 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:39:03,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:03,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-23 21:39:03,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:03,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-23 21:39:03,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:03,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-23 21:39:03,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:03,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-23 21:39:04,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:04,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-23 21:39:04,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:04,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-23 21:39:04,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:04,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-23 21:39:04,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:04,026 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 18 proven. 1 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-23 21:39:04,026 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 21:39:04,026 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1680349531] [2023-11-23 21:39:04,027 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1680349531] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:39:04,027 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1478512833] [2023-11-23 21:39:04,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:39:04,027 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:39:04,027 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 [2023-11-23 21:39:04,028 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:39:04,049 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-23 21:39:04,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:04,124 INFO L262 TraceCheckSpWp]: Trace formula consists of 290 conjuncts, 11 conjunts are in the unsatisfiable core [2023-11-23 21:39:04,128 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:39:04,291 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 3 proven. 2 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2023-11-23 21:39:04,291 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:39:04,447 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-23 21:39:04,447 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1478512833] provided 1 perfect and 1 imperfect interpolant sequences [2023-11-23 21:39:04,447 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2023-11-23 21:39:04,448 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10, 5] total 14 [2023-11-23 21:39:04,448 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [331775100] [2023-11-23 21:39:04,448 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:39:04,449 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-23 21:39:04,449 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 21:39:04,450 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-23 21:39:04,450 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2023-11-23 21:39:04,450 INFO L87 Difference]: Start difference. First operand 506 states and 658 transitions. Second operand has 6 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-23 21:39:04,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:39:04,672 INFO L93 Difference]: Finished difference Result 1463 states and 1949 transitions. [2023-11-23 21:39:04,673 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-23 21:39:04,673 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 72 [2023-11-23 21:39:04,673 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:39:04,680 INFO L225 Difference]: With dead ends: 1463 [2023-11-23 21:39:04,680 INFO L226 Difference]: Without dead ends: 959 [2023-11-23 21:39:04,683 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 165 GetRequests, 150 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=198, Unknown=0, NotChecked=0, Total=240 [2023-11-23 21:39:04,683 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 52 mSDsluCounter, 247 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 316 SdHoareTripleChecker+Invalid, 105 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:39:04,684 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 316 Invalid, 105 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:39:04,686 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 959 states. [2023-11-23 21:39:04,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 959 to 875. [2023-11-23 21:39:04,781 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 875 states, 633 states have (on average 1.249605055292259) internal successors, (791), 685 states have internal predecessors, (791), 127 states have call successors, (127), 111 states have call predecessors, (127), 114 states have return successors, (191), 120 states have call predecessors, (191), 127 states have call successors, (191) [2023-11-23 21:39:04,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 875 states to 875 states and 1109 transitions. [2023-11-23 21:39:04,788 INFO L78 Accepts]: Start accepts. Automaton has 875 states and 1109 transitions. Word has length 72 [2023-11-23 21:39:04,789 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:39:04,789 INFO L495 AbstractCegarLoop]: Abstraction has 875 states and 1109 transitions. [2023-11-23 21:39:04,789 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-23 21:39:04,789 INFO L276 IsEmpty]: Start isEmpty. Operand 875 states and 1109 transitions. [2023-11-23 21:39:04,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2023-11-23 21:39:04,792 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:39:04,793 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:39:04,819 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-23 21:39:05,011 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:39:05,011 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 21:39:05,012 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:39:05,012 INFO L85 PathProgramCache]: Analyzing trace with hash 1490951459, now seen corresponding path program 1 times [2023-11-23 21:39:05,012 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 21:39:05,012 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2000612989] [2023-11-23 21:39:05,012 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:39:05,012 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:39:05,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:05,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-23 21:39:05,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:05,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-23 21:39:05,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:05,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-23 21:39:05,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:05,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-23 21:39:05,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:05,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-23 21:39:05,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:05,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2023-11-23 21:39:05,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:05,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-23 21:39:05,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:05,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2023-11-23 21:39:05,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:05,275 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-23 21:39:05,275 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 21:39:05,276 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2000612989] [2023-11-23 21:39:05,276 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2000612989] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:39:05,276 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1995520399] [2023-11-23 21:39:05,276 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:39:05,276 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:39:05,277 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 [2023-11-23 21:39:05,278 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:39:05,289 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-23 21:39:05,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:39:05,400 INFO L262 TraceCheckSpWp]: Trace formula consists of 300 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-23 21:39:05,409 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:39:05,476 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:39:05,477 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-23 21:39:05,477 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1995520399] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:39:05,477 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-23 21:39:05,477 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 10 [2023-11-23 21:39:05,478 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1596146538] [2023-11-23 21:39:05,478 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:39:05,478 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-23 21:39:05,479 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 21:39:05,479 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-23 21:39:05,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=68, Unknown=0, NotChecked=0, Total=90 [2023-11-23 21:39:05,480 INFO L87 Difference]: Start difference. First operand 875 states and 1109 transitions. Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-23 21:39:05,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:39:05,673 INFO L93 Difference]: Finished difference Result 1489 states and 1889 transitions. [2023-11-23 21:39:05,674 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-23 21:39:05,674 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 76 [2023-11-23 21:39:05,674 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:39:05,675 INFO L225 Difference]: With dead ends: 1489 [2023-11-23 21:39:05,675 INFO L226 Difference]: Without dead ends: 0 [2023-11-23 21:39:05,679 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 100 GetRequests, 89 SyntacticMatches, 2 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2023-11-23 21:39:05,680 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 96 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 79 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 88 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 79 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:39:05,681 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 224 Invalid, 88 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 79 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:39:05,681 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-23 21:39:05,681 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-23 21:39:05,682 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:39:05,682 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-23 21:39:05,682 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 76 [2023-11-23 21:39:05,682 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:39:05,683 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-23 21:39:05,683 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-23 21:39:05,683 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-23 21:39:05,683 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-23 21:39:05,686 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-23 21:39:05,708 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2023-11-23 21:39:05,907 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:39:05,909 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-23 21:39:08,762 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 229 236) no Hoare annotation was computed. [2023-11-23 21:39:08,762 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 229 236) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1))) (and (or .cse0 (< ~waterLevel~0 1) (not (= 1 ~systemActive~0)) .cse1) (or .cse0 .cse1 (< ~waterLevel~0 2) (= 0 ~systemActive~0)))) [2023-11-23 21:39:08,762 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 162 168) no Hoare annotation was computed. [2023-11-23 21:39:08,763 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 162 168) the Hoare annotation is: true [2023-11-23 21:39:08,763 INFO L899 garLoopResultBuilder]: For program point L562-1(lines 558 569) no Hoare annotation was computed. [2023-11-23 21:39:08,764 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 558 569) the Hoare annotation is: (let ((.cse1 (not (= ~pumpRunning~0 0))) (.cse2 (< ~waterLevel~0 1)) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse4 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse5 (not (= 0 ~systemActive~0))) (or (< ~pumpRunning~0 1) .cse0 .cse3 .cse4 (< ~waterLevel~0 2) .cse5))) [2023-11-23 21:39:08,764 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 558 569) no Hoare annotation was computed. [2023-11-23 21:39:08,764 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 570 578) the Hoare annotation is: true [2023-11-23 21:39:08,764 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 570 578) no Hoare annotation was computed. [2023-11-23 21:39:08,764 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 356 385) no Hoare annotation was computed. [2023-11-23 21:39:08,765 INFO L899 garLoopResultBuilder]: For program point L381(lines 356 385) no Hoare annotation was computed. [2023-11-23 21:39:08,765 INFO L899 garLoopResultBuilder]: For program point L377(line 377) no Hoare annotation was computed. [2023-11-23 21:39:08,765 INFO L899 garLoopResultBuilder]: For program point L370(lines 370 374) no Hoare annotation was computed. [2023-11-23 21:39:08,765 INFO L902 garLoopResultBuilder]: At program point L370-1(lines 370 374) the Hoare annotation is: true [2023-11-23 21:39:08,765 INFO L902 garLoopResultBuilder]: At program point L366-2(lines 366 380) the Hoare annotation is: true [2023-11-23 21:39:08,765 INFO L902 garLoopResultBuilder]: At program point L362(line 362) the Hoare annotation is: true [2023-11-23 21:39:08,766 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 356 385) the Hoare annotation is: true [2023-11-23 21:39:08,766 INFO L899 garLoopResultBuilder]: For program point L362-1(line 362) no Hoare annotation was computed. [2023-11-23 21:39:08,766 INFO L899 garLoopResultBuilder]: For program point L321(lines 321 325) no Hoare annotation was computed. [2023-11-23 21:39:08,766 INFO L899 garLoopResultBuilder]: For program point L321-2(lines 321 325) no Hoare annotation was computed. [2023-11-23 21:39:08,766 INFO L899 garLoopResultBuilder]: For program point L478(lines 478 488) no Hoare annotation was computed. [2023-11-23 21:39:08,766 INFO L899 garLoopResultBuilder]: For program point L474(lines 474 491) no Hoare annotation was computed. [2023-11-23 21:39:08,766 INFO L899 garLoopResultBuilder]: For program point L474-1(lines 466 494) no Hoare annotation was computed. [2023-11-23 21:39:08,767 INFO L895 garLoopResultBuilder]: At program point L210(line 210) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< |old(~waterLevel~0)| 1)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (< |old(~pumpRunning~0)| 1)) (or .cse1 .cse2 (not (= 0 ~systemActive~0))) (or .cse1 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse2 .cse0))) [2023-11-23 21:39:08,767 INFO L895 garLoopResultBuilder]: At program point L206(line 206) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< |old(~waterLevel~0)| 1)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (< |old(~pumpRunning~0)| 1)) (or .cse1 .cse2 (not (= 0 ~systemActive~0))) (or .cse1 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse2 .cse0))) [2023-11-23 21:39:08,767 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2023-11-23 21:39:08,767 INFO L895 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< |old(~waterLevel~0)| 1))) (and (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse1 .cse2 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 (< |old(~waterLevel~0)| 2) (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 (not (= 0 ~systemActive~0))))) [2023-11-23 21:39:08,768 INFO L899 garLoopResultBuilder]: For program point L215-1(lines 196 220) no Hoare annotation was computed. [2023-11-23 21:39:08,768 INFO L899 garLoopResultBuilder]: For program point L149-1(lines 149 155) no Hoare annotation was computed. [2023-11-23 21:39:08,768 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 138 161) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse3 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (< |old(~waterLevel~0)| 1)) (.cse7 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse3) (< |old(~pumpRunning~0)| 1)) (or .cse4 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse5 .cse0 (and .cse6 (= ~methAndRunningLastTime~0 0) .cse2)) (or .cse4 .cse1 (and .cse6 .cse2 .cse3) .cse7) (or (< 1 |old(~waterLevel~0)|) (and .cse6 .cse3 (= ~waterLevel~0 1)) .cse4 .cse5 .cse7))) [2023-11-23 21:39:08,768 INFO L899 garLoopResultBuilder]: For program point L538(lines 538 542) no Hoare annotation was computed. [2023-11-23 21:39:08,768 INFO L899 garLoopResultBuilder]: For program point L538-2(lines 534 545) no Hoare annotation was computed. [2023-11-23 21:39:08,769 INFO L895 garLoopResultBuilder]: At program point L472(line 472) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< |old(~waterLevel~0)| 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (< |old(~pumpRunning~0)| 1) (and .cse1 (<= 1 ~waterLevel~0))) (or .cse2 .cse3 (and .cse1 .cse4 .cse5) (not (= 0 ~systemActive~0))) (or .cse2 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse3 .cse0 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse4) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse5)))) [2023-11-23 21:39:08,769 INFO L899 garLoopResultBuilder]: For program point L472-1(line 472) no Hoare annotation was computed. [2023-11-23 21:39:08,769 INFO L899 garLoopResultBuilder]: For program point L142-1(lines 141 160) no Hoare annotation was computed. [2023-11-23 21:39:08,769 INFO L899 garLoopResultBuilder]: For program point L1005(line 1005) no Hoare annotation was computed. [2023-11-23 21:39:08,769 INFO L899 garLoopResultBuilder]: For program point L204(lines 204 212) no Hoare annotation was computed. [2023-11-23 21:39:08,769 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 138 161) no Hoare annotation was computed. [2023-11-23 21:39:08,769 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1005) no Hoare annotation was computed. [2023-11-23 21:39:08,770 INFO L899 garLoopResultBuilder]: For program point L200(lines 200 217) no Hoare annotation was computed. [2023-11-23 21:39:08,770 INFO L895 garLoopResultBuilder]: At program point L337(line 337) the Hoare annotation is: (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-23 21:39:08,770 INFO L899 garLoopResultBuilder]: For program point L119(lines 56 123) no Hoare annotation was computed. [2023-11-23 21:39:08,770 INFO L899 garLoopResultBuilder]: For program point L86(lines 86 92) no Hoare annotation was computed. [2023-11-23 21:39:08,770 INFO L899 garLoopResultBuilder]: For program point L86-1(lines 86 92) no Hoare annotation was computed. [2023-11-23 21:39:08,770 INFO L895 garLoopResultBuilder]: At program point L78(line 78) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~waterLevel~0))) (or (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse3 .cse0 .cse1 .cse4) (and .cse2 .cse3 .cse1 .cse4 (= 0 ~systemActive~0)))) [2023-11-23 21:39:08,770 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-23 21:39:08,770 INFO L899 garLoopResultBuilder]: For program point L442(lines 442 449) no Hoare annotation was computed. [2023-11-23 21:39:08,771 INFO L899 garLoopResultBuilder]: For program point L442-2(lines 442 449) no Hoare annotation was computed. [2023-11-23 21:39:08,771 INFO L895 garLoopResultBuilder]: At program point L116(lines 65 117) the Hoare annotation is: false [2023-11-23 21:39:08,771 INFO L899 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2023-11-23 21:39:08,771 INFO L899 garLoopResultBuilder]: For program point L335-1(lines 335 341) no Hoare annotation was computed. [2023-11-23 21:39:08,771 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-23 21:39:08,771 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 110) no Hoare annotation was computed. [2023-11-23 21:39:08,771 INFO L895 garLoopResultBuilder]: At program point L104-2(lines 96 111) the Hoare annotation is: (let ((.cse1 (= 1 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (<= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= 0 ~systemActive~0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2) (and .cse3 .cse2 .cse4 (= ~waterLevel~0 1)) (and .cse3 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse3 .cse0 .cse2 .cse4))) [2023-11-23 21:39:08,771 INFO L899 garLoopResultBuilder]: For program point L67(lines 66 115) no Hoare annotation was computed. [2023-11-23 21:39:08,772 INFO L899 garLoopResultBuilder]: For program point L96(lines 96 111) no Hoare annotation was computed. [2023-11-23 21:39:08,772 INFO L895 garLoopResultBuilder]: At program point L88(line 88) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~waterLevel~0))) (or (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse3 .cse0 .cse1 .cse4) (and .cse2 .cse3 .cse1 .cse4 (= 0 ~systemActive~0)))) [2023-11-23 21:39:08,772 INFO L895 garLoopResultBuilder]: At program point L113(lines 66 115) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~waterLevel~0))) (or (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse3 .cse0 .cse1 .cse4) (and .cse2 .cse3 .cse1 .cse4 (= 0 ~systemActive~0)))) [2023-11-23 21:39:08,772 INFO L899 garLoopResultBuilder]: For program point L76(lines 76 82) no Hoare annotation was computed. [2023-11-23 21:39:08,772 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2023-11-23 21:39:08,772 INFO L895 garLoopResultBuilder]: At program point L184(line 184) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (not (= 1 ~systemActive~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)) (not (= ~methAndRunningLastTime~0 0))) [2023-11-23 21:39:08,772 INFO L899 garLoopResultBuilder]: For program point L178(lines 178 186) no Hoare annotation was computed. [2023-11-23 21:39:08,772 INFO L899 garLoopResultBuilder]: For program point L174(lines 174 191) no Hoare annotation was computed. [2023-11-23 21:39:08,773 INFO L899 garLoopResultBuilder]: For program point L302(lines 302 306) no Hoare annotation was computed. [2023-11-23 21:39:08,773 INFO L899 garLoopResultBuilder]: For program point L302-2(lines 302 306) no Hoare annotation was computed. [2023-11-23 21:39:08,773 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 170 194) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (< ~waterLevel~0 1) (not (= 1 ~systemActive~0)) (not (= ~methAndRunningLastTime~0 0))) [2023-11-23 21:39:08,773 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 611 624) no Hoare annotation was computed. [2023-11-23 21:39:08,773 INFO L895 garLoopResultBuilder]: At program point L189(line 189) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (not (= 1 ~systemActive~0)) (not (= ~methAndRunningLastTime~0 0))) [2023-11-23 21:39:08,773 INFO L899 garLoopResultBuilder]: For program point L189-1(lines 170 194) no Hoare annotation was computed. [2023-11-23 21:39:08,774 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 170 194) no Hoare annotation was computed. [2023-11-23 21:39:08,774 INFO L899 garLoopResultBuilder]: For program point L615(lines 615 621) no Hoare annotation was computed. [2023-11-23 21:39:08,774 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 546 557) no Hoare annotation was computed. [2023-11-23 21:39:08,774 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 546 557) the Hoare annotation is: (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse5 (< |old(~waterLevel~0)| 1)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (< 1 |old(~waterLevel~0)|) .cse5 .cse0 (= ~waterLevel~0 1) .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse2 .cse3) (or (< ~pumpRunning~0 1) .cse6 .cse1 .cse2))) [2023-11-23 21:39:08,774 INFO L899 garLoopResultBuilder]: For program point L550-1(lines 546 557) no Hoare annotation was computed. [2023-11-23 21:39:08,777 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:39:08,779 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-23 21:39:08,793 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 09:39:08 BoogieIcfgContainer [2023-11-23 21:39:08,793 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-23 21:39:08,794 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-23 21:39:08,794 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-23 21:39:08,794 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-23 21:39:08,794 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:38:58" (3/4) ... [2023-11-23 21:39:08,796 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-23 21:39:08,799 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-23 21:39:08,799 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-23 21:39:08,799 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-23 21:39:08,799 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-23 21:39:08,799 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-23 21:39:08,799 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-23 21:39:08,800 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-23 21:39:08,800 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-23 21:39:08,820 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 33 nodes and edges [2023-11-23 21:39:08,820 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-23 21:39:08,821 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-23 21:39:08,822 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 21:39:08,822 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 21:39:08,951 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/witness.graphml [2023-11-23 21:39:08,951 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/witness.yml [2023-11-23 21:39:08,951 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-23 21:39:08,952 INFO L158 Benchmark]: Toolchain (without parser) took 12074.23ms. Allocated memory was 138.4MB in the beginning and 268.4MB in the end (delta: 130.0MB). Free memory was 91.6MB in the beginning and 177.2MB in the end (delta: -85.6MB). Peak memory consumption was 46.4MB. Max. memory is 16.1GB. [2023-11-23 21:39:08,953 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 138.4MB. Free memory is still 83.0MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-23 21:39:08,953 INFO L158 Benchmark]: CACSL2BoogieTranslator took 600.13ms. Allocated memory is still 138.4MB. Free memory was 91.2MB in the beginning and 71.5MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-23 21:39:08,953 INFO L158 Benchmark]: Boogie Procedure Inliner took 58.46ms. Allocated memory is still 138.4MB. Free memory was 71.5MB in the beginning and 69.1MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-23 21:39:08,954 INFO L158 Benchmark]: Boogie Preprocessor took 90.06ms. Allocated memory was 138.4MB in the beginning and 184.5MB in the end (delta: 46.1MB). Free memory was 69.1MB in the beginning and 152.7MB in the end (delta: -83.7MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-23 21:39:08,954 INFO L158 Benchmark]: RCFGBuilder took 684.32ms. Allocated memory is still 184.5MB. Free memory was 152.7MB in the beginning and 135.8MB in the end (delta: 16.9MB). Peak memory consumption was 19.9MB. Max. memory is 16.1GB. [2023-11-23 21:39:08,955 INFO L158 Benchmark]: TraceAbstraction took 10476.03ms. Allocated memory was 184.5MB in the beginning and 268.4MB in the end (delta: 83.9MB). Free memory was 135.0MB in the beginning and 184.5MB in the end (delta: -49.6MB). Peak memory consumption was 139.2MB. Max. memory is 16.1GB. [2023-11-23 21:39:08,955 INFO L158 Benchmark]: Witness Printer took 157.87ms. Allocated memory is still 268.4MB. Free memory was 184.5MB in the beginning and 177.2MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-23 21:39:08,957 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 138.4MB. Free memory is still 83.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 600.13ms. Allocated memory is still 138.4MB. Free memory was 91.2MB in the beginning and 71.5MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 58.46ms. Allocated memory is still 138.4MB. Free memory was 71.5MB in the beginning and 69.1MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 90.06ms. Allocated memory was 138.4MB in the beginning and 184.5MB in the end (delta: 46.1MB). Free memory was 69.1MB in the beginning and 152.7MB in the end (delta: -83.7MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * RCFGBuilder took 684.32ms. Allocated memory is still 184.5MB. Free memory was 152.7MB in the beginning and 135.8MB in the end (delta: 16.9MB). Peak memory consumption was 19.9MB. Max. memory is 16.1GB. * TraceAbstraction took 10476.03ms. Allocated memory was 184.5MB in the beginning and 268.4MB in the end (delta: 83.9MB). Free memory was 135.0MB in the beginning and 184.5MB in the end (delta: -49.6MB). Peak memory consumption was 139.2MB. Max. memory is 16.1GB. * Witness Printer took 157.87ms. Allocated memory is still 268.4MB. Free memory was 184.5MB in the beginning and 177.2MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] - GenericResultAtLocation [Line: 124]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [124] - GenericResultAtLocation [Line: 354]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [354] - GenericResultAtLocation [Line: 455]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [455] - GenericResultAtLocation [Line: 495]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [495] - GenericResultAtLocation [Line: 530]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [530] - GenericResultAtLocation [Line: 634]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [634] - GenericResultAtLocation [Line: 1000]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1000] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1005]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 74 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 10.4s, OverallIterations: 13, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 2.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1147 SdHoareTripleChecker+Valid, 1.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1118 mSDsluCounter, 2449 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1444 mSDsCounter, 288 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1244 IncrementalHoareTripleChecker+Invalid, 1532 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 288 mSolverCounterUnsat, 1005 mSDtfsCounter, 1244 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 539 GetRequests, 462 SyntacticMatches, 3 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 72 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1038occurred in iteration=8, InterpolantAutomatonStates: 70, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 13 MinimizatonAttempts, 272 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 23 LocationsWithAnnotation, 1452 PreInvPairs, 1574 NumberOfFragments, 757 HoareAnnotationTreeSize, 1452 FomulaSimplifications, 1329 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 23 FomulaSimplificationsInter, 7660 FormulaSimplificationTreeSizeReductionInter, 2.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 857 NumberOfCodeBlocks, 857 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 911 ConstructedInterpolants, 0 QuantifiedInterpolants, 1614 SizeOfPredicates, 7 NumberOfNonLiveVariables, 1170 ConjunctsInSsa, 28 ConjunctsInUnsatCore, 18 InterpolantComputations, 13 PerfectInterpolantSequences, 236/247 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning) && (2 <= waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= waterLevel))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (splverifierCounter == 0)) && (1 <= waterLevel)) && (0 == systemActive))) - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2023-11-23 21:39:08,999 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ecf1e3f-ccdd-44a5-a849-cfc4737d9737/bin/uautomizer-verify-zZY32mL2XJ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE