./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-26 11:59:54,026 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-26 11:59:54,111 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-26 11:59:54,117 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-26 11:59:54,118 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-26 11:59:54,148 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-26 11:59:54,149 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-26 11:59:54,149 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-26 11:59:54,150 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-26 11:59:54,151 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-26 11:59:54,152 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-26 11:59:54,152 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-26 11:59:54,153 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-26 11:59:54,154 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-26 11:59:54,155 INFO L153 SettingsManager]: * Use SBE=true [2023-11-26 11:59:54,155 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-26 11:59:54,156 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-26 11:59:54,157 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-26 11:59:54,157 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-26 11:59:54,158 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-26 11:59:54,159 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-26 11:59:54,160 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-26 11:59:54,160 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-26 11:59:54,161 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-26 11:59:54,162 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-26 11:59:54,162 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-26 11:59:54,163 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-26 11:59:54,164 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-26 11:59:54,164 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-26 11:59:54,165 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-26 11:59:54,165 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-26 11:59:54,166 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 11:59:54,167 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-26 11:59:54,167 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-26 11:59:54,168 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-26 11:59:54,168 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-26 11:59:54,169 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-26 11:59:54,170 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-26 11:59:54,170 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-26 11:59:54,170 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-26 11:59:54,171 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-26 11:59:54,171 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-26 11:59:54,172 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e [2023-11-26 11:59:54,456 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-26 11:59:54,482 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-26 11:59:54,485 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-26 11:59:54,486 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-26 11:59:54,487 INFO L274 PluginConnector]: CDTParser initialized [2023-11-26 11:59:54,489 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2023-11-26 11:59:57,781 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-26 11:59:58,059 INFO L384 CDTParser]: Found 1 translation units. [2023-11-26 11:59:58,059 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2023-11-26 11:59:58,075 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/data/da0487d66/49eb8e53827043338027f8fcf52a6615/FLAGa453bf45d [2023-11-26 11:59:58,091 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/data/da0487d66/49eb8e53827043338027f8fcf52a6615 [2023-11-26 11:59:58,094 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-26 11:59:58,096 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-26 11:59:58,097 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-26 11:59:58,098 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-26 11:59:58,103 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-26 11:59:58,104 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 11:59:58" (1/1) ... [2023-11-26 11:59:58,106 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@cb8aaf0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58, skipping insertion in model container [2023-11-26 11:59:58,106 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 11:59:58" (1/1) ... [2023-11-26 11:59:58,159 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-26 11:59:58,508 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2023-11-26 11:59:58,514 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 11:59:58,533 INFO L202 MainTranslator]: Completed pre-run [2023-11-26 11:59:58,544 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] [2023-11-26 11:59:58,546 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [124] [2023-11-26 11:59:58,546 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [354] [2023-11-26 11:59:58,546 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [455] [2023-11-26 11:59:58,547 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [495] [2023-11-26 11:59:58,547 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [530] [2023-11-26 11:59:58,548 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [634] [2023-11-26 11:59:58,548 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1000] [2023-11-26 11:59:58,690 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2023-11-26 11:59:58,691 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 11:59:58,724 INFO L206 MainTranslator]: Completed translation [2023-11-26 11:59:58,743 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58 WrapperNode [2023-11-26 11:59:58,743 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-26 11:59:58,745 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-26 11:59:58,745 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-26 11:59:58,746 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-26 11:59:58,754 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58" (1/1) ... [2023-11-26 11:59:58,770 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58" (1/1) ... [2023-11-26 11:59:58,803 INFO L138 Inliner]: procedures = 58, calls = 102, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 212 [2023-11-26 11:59:58,809 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-26 11:59:58,811 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-26 11:59:58,811 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-26 11:59:58,811 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-26 11:59:58,822 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58" (1/1) ... [2023-11-26 11:59:58,823 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58" (1/1) ... [2023-11-26 11:59:58,825 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58" (1/1) ... [2023-11-26 11:59:58,856 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-26 11:59:58,857 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58" (1/1) ... [2023-11-26 11:59:58,857 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58" (1/1) ... [2023-11-26 11:59:58,863 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58" (1/1) ... [2023-11-26 11:59:58,887 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58" (1/1) ... [2023-11-26 11:59:58,890 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58" (1/1) ... [2023-11-26 11:59:58,897 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58" (1/1) ... [2023-11-26 11:59:58,899 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-26 11:59:58,900 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-26 11:59:58,901 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-26 11:59:58,901 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-26 11:59:58,902 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58" (1/1) ... [2023-11-26 11:59:58,909 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 11:59:58,921 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 11:59:58,933 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-26 11:59:58,939 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-26 11:59:58,968 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-26 11:59:58,968 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-26 11:59:58,968 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-26 11:59:58,968 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-26 11:59:58,969 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-26 11:59:58,969 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-26 11:59:58,969 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-26 11:59:58,969 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-26 11:59:58,969 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-26 11:59:58,969 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 11:59:58,969 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 11:59:58,970 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-26 11:59:58,970 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-26 11:59:58,970 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-26 11:59:58,970 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-26 11:59:58,970 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-26 11:59:58,971 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-26 11:59:58,971 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-26 11:59:58,971 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-26 11:59:58,971 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-26 11:59:59,082 INFO L241 CfgBuilder]: Building ICFG [2023-11-26 11:59:59,084 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-26 11:59:59,361 INFO L282 CfgBuilder]: Performing block encoding [2023-11-26 11:59:59,451 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-26 11:59:59,451 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-26 11:59:59,452 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:59:59 BoogieIcfgContainer [2023-11-26 11:59:59,452 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-26 11:59:59,455 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-26 11:59:59,455 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-26 11:59:59,459 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-26 11:59:59,459 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 26.11 11:59:58" (1/3) ... [2023-11-26 11:59:59,460 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7e891c4b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 11:59:59, skipping insertion in model container [2023-11-26 11:59:59,460 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:59:58" (2/3) ... [2023-11-26 11:59:59,461 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7e891c4b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 11:59:59, skipping insertion in model container [2023-11-26 11:59:59,461 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:59:59" (3/3) ... [2023-11-26 11:59:59,462 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product52.cil.c [2023-11-26 11:59:59,487 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-26 11:59:59,487 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-26 11:59:59,539 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-26 11:59:59,546 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1d38fa30, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-26 11:59:59,547 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-26 11:59:59,551 INFO L276 IsEmpty]: Start isEmpty. Operand has 74 states, 51 states have (on average 1.5490196078431373) internal successors, (79), 60 states have internal predecessors, (79), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-26 11:59:59,560 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-26 11:59:59,561 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:59:59,561 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:59:59,562 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:59:59,567 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:59:59,567 INFO L85 PathProgramCache]: Analyzing trace with hash 149002175, now seen corresponding path program 1 times [2023-11-26 11:59:59,574 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:59:59,575 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1141637732] [2023-11-26 11:59:59,575 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:59:59,576 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:59:59,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:59:59,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-26 11:59:59,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:59:59,789 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:59:59,790 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:59:59,790 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1141637732] [2023-11-26 11:59:59,791 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1141637732] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:59:59,791 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:59:59,792 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-26 11:59:59,794 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1264127333] [2023-11-26 11:59:59,795 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:59:59,800 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-26 11:59:59,800 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:59:59,843 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-26 11:59:59,844 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 11:59:59,846 INFO L87 Difference]: Start difference. First operand has 74 states, 51 states have (on average 1.5490196078431373) internal successors, (79), 60 states have internal predecessors, (79), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:59:59,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:59:59,926 INFO L93 Difference]: Finished difference Result 146 states and 211 transitions. [2023-11-26 11:59:59,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-26 11:59:59,929 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-26 11:59:59,929 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:59:59,939 INFO L225 Difference]: With dead ends: 146 [2023-11-26 11:59:59,939 INFO L226 Difference]: Without dead ends: 69 [2023-11-26 11:59:59,943 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 11:59:59,947 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 84 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:59:59,949 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 84 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:59:59,969 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2023-11-26 11:59:59,994 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2023-11-26 11:59:59,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 48 states have (on average 1.4375) internal successors, (69), 56 states have internal predecessors, (69), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-26 11:59:59,999 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 94 transitions. [2023-11-26 12:00:00,002 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 94 transitions. Word has length 17 [2023-11-26 12:00:00,002 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:00:00,003 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 94 transitions. [2023-11-26 12:00:00,004 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 12:00:00,004 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 94 transitions. [2023-11-26 12:00:00,007 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-26 12:00:00,007 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:00:00,007 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:00:00,008 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-26 12:00:00,008 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:00:00,009 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:00:00,009 INFO L85 PathProgramCache]: Analyzing trace with hash 1711369592, now seen corresponding path program 1 times [2023-11-26 12:00:00,010 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:00:00,010 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [841505655] [2023-11-26 12:00:00,010 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:00:00,011 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:00:00,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:00,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-26 12:00:00,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:00,205 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:00:00,206 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:00:00,206 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [841505655] [2023-11-26 12:00:00,206 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [841505655] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:00:00,207 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:00:00,207 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 12:00:00,207 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [602335094] [2023-11-26 12:00:00,207 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:00:00,211 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 12:00:00,212 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:00:00,214 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 12:00:00,214 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 12:00:00,215 INFO L87 Difference]: Start difference. First operand 69 states and 94 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 12:00:00,260 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:00:00,260 INFO L93 Difference]: Finished difference Result 108 states and 146 transitions. [2023-11-26 12:00:00,261 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 12:00:00,261 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-11-26 12:00:00,261 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:00:00,263 INFO L225 Difference]: With dead ends: 108 [2023-11-26 12:00:00,263 INFO L226 Difference]: Without dead ends: 61 [2023-11-26 12:00:00,264 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 12:00:00,266 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 14 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 12:00:00,267 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 124 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 12:00:00,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2023-11-26 12:00:00,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2023-11-26 12:00:00,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 43 states have (on average 1.4651162790697674) internal successors, (63), 51 states have internal predecessors, (63), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-26 12:00:00,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 83 transitions. [2023-11-26 12:00:00,279 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 83 transitions. Word has length 18 [2023-11-26 12:00:00,280 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:00:00,280 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 83 transitions. [2023-11-26 12:00:00,280 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 12:00:00,281 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 83 transitions. [2023-11-26 12:00:00,282 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-26 12:00:00,282 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:00:00,282 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:00:00,283 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-26 12:00:00,283 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:00:00,284 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:00:00,284 INFO L85 PathProgramCache]: Analyzing trace with hash -212216258, now seen corresponding path program 1 times [2023-11-26 12:00:00,284 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:00:00,284 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1542844036] [2023-11-26 12:00:00,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:00:00,285 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:00:00,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:00,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 12:00:00,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:00,406 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:00:00,407 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:00:00,407 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1542844036] [2023-11-26 12:00:00,407 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1542844036] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:00:00,407 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:00:00,408 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 12:00:00,408 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [933109077] [2023-11-26 12:00:00,408 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:00:00,409 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 12:00:00,409 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:00:00,410 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 12:00:00,410 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 12:00:00,410 INFO L87 Difference]: Start difference. First operand 61 states and 83 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 12:00:00,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:00:00,476 INFO L93 Difference]: Finished difference Result 179 states and 246 transitions. [2023-11-26 12:00:00,477 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 12:00:00,477 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2023-11-26 12:00:00,478 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:00:00,480 INFO L225 Difference]: With dead ends: 179 [2023-11-26 12:00:00,480 INFO L226 Difference]: Without dead ends: 120 [2023-11-26 12:00:00,481 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 12:00:00,482 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 77 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 149 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 12:00:00,483 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 149 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 12:00:00,484 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2023-11-26 12:00:00,503 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 117. [2023-11-26 12:00:00,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 82 states have (on average 1.475609756097561) internal successors, (121), 97 states have internal predecessors, (121), 20 states have call successors, (20), 14 states have call predecessors, (20), 14 states have return successors, (20), 13 states have call predecessors, (20), 20 states have call successors, (20) [2023-11-26 12:00:00,506 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 161 transitions. [2023-11-26 12:00:00,507 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 161 transitions. Word has length 21 [2023-11-26 12:00:00,507 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:00:00,508 INFO L495 AbstractCegarLoop]: Abstraction has 117 states and 161 transitions. [2023-11-26 12:00:00,508 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 12:00:00,511 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 161 transitions. [2023-11-26 12:00:00,513 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-26 12:00:00,513 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:00:00,513 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:00:00,514 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-26 12:00:00,514 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:00:00,516 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:00:00,516 INFO L85 PathProgramCache]: Analyzing trace with hash 1449497159, now seen corresponding path program 1 times [2023-11-26 12:00:00,517 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:00:00,517 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1739585659] [2023-11-26 12:00:00,517 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:00:00,519 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:00:00,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:00,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-26 12:00:00,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:00,660 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:00:00,661 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:00:00,661 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1739585659] [2023-11-26 12:00:00,661 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1739585659] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:00:00,661 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:00:00,661 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-26 12:00:00,662 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1116115970] [2023-11-26 12:00:00,662 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:00:00,663 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-26 12:00:00,664 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:00:00,665 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-26 12:00:00,666 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-26 12:00:00,666 INFO L87 Difference]: Start difference. First operand 117 states and 161 transitions. Second operand has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 12:00:00,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:00:00,824 INFO L93 Difference]: Finished difference Result 310 states and 433 transitions. [2023-11-26 12:00:00,824 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-26 12:00:00,824 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2023-11-26 12:00:00,825 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:00:00,827 INFO L225 Difference]: With dead ends: 310 [2023-11-26 12:00:00,828 INFO L226 Difference]: Without dead ends: 195 [2023-11-26 12:00:00,830 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-26 12:00:00,831 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 56 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 12:00:00,832 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 188 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 12:00:00,833 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2023-11-26 12:00:00,863 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 190. [2023-11-26 12:00:00,864 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 190 states, 135 states have (on average 1.4) internal successors, (189), 150 states have internal predecessors, (189), 28 states have call successors, (28), 26 states have call predecessors, (28), 26 states have return successors, (36), 25 states have call predecessors, (36), 28 states have call successors, (36) [2023-11-26 12:00:00,867 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 190 states to 190 states and 253 transitions. [2023-11-26 12:00:00,868 INFO L78 Accepts]: Start accepts. Automaton has 190 states and 253 transitions. Word has length 24 [2023-11-26 12:00:00,868 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:00:00,868 INFO L495 AbstractCegarLoop]: Abstraction has 190 states and 253 transitions. [2023-11-26 12:00:00,869 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 12:00:00,869 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 253 transitions. [2023-11-26 12:00:00,871 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-26 12:00:00,871 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:00:00,871 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:00:00,871 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-26 12:00:00,872 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:00:00,872 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:00:00,872 INFO L85 PathProgramCache]: Analyzing trace with hash -1581538435, now seen corresponding path program 1 times [2023-11-26 12:00:00,873 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:00:00,873 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1045698196] [2023-11-26 12:00:00,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:00:00,873 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:00:00,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:00,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 12:00:00,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:00,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-26 12:00:00,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:01,001 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:00:01,003 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:00:01,003 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1045698196] [2023-11-26 12:00:01,003 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1045698196] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:00:01,003 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:00:01,003 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 12:00:01,004 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1274980240] [2023-11-26 12:00:01,004 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:00:01,004 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 12:00:01,005 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:00:01,005 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 12:00:01,005 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 12:00:01,006 INFO L87 Difference]: Start difference. First operand 190 states and 253 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-26 12:00:01,197 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:00:01,198 INFO L93 Difference]: Finished difference Result 422 states and 569 transitions. [2023-11-26 12:00:01,198 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-26 12:00:01,199 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 33 [2023-11-26 12:00:01,199 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:00:01,206 INFO L225 Difference]: With dead ends: 422 [2023-11-26 12:00:01,206 INFO L226 Difference]: Without dead ends: 234 [2023-11-26 12:00:01,208 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-26 12:00:01,219 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 49 mSDsluCounter, 132 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 133 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 12:00:01,222 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 191 Invalid, 133 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 12:00:01,224 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 234 states. [2023-11-26 12:00:01,274 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 234 to 232. [2023-11-26 12:00:01,275 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 232 states, 167 states have (on average 1.3712574850299402) internal successors, (229), 182 states have internal predecessors, (229), 32 states have call successors, (32), 26 states have call predecessors, (32), 32 states have return successors, (46), 33 states have call predecessors, (46), 32 states have call successors, (46) [2023-11-26 12:00:01,278 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 307 transitions. [2023-11-26 12:00:01,278 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 307 transitions. Word has length 33 [2023-11-26 12:00:01,279 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:00:01,279 INFO L495 AbstractCegarLoop]: Abstraction has 232 states and 307 transitions. [2023-11-26 12:00:01,279 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-26 12:00:01,279 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 307 transitions. [2023-11-26 12:00:01,281 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-26 12:00:01,281 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:00:01,281 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:00:01,281 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-26 12:00:01,282 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:00:01,282 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:00:01,282 INFO L85 PathProgramCache]: Analyzing trace with hash 1433565183, now seen corresponding path program 1 times [2023-11-26 12:00:01,282 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:00:01,283 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1102884685] [2023-11-26 12:00:01,283 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:00:01,283 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:00:01,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:01,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 12:00:01,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:01,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-26 12:00:01,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:01,466 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:00:01,467 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:00:01,468 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1102884685] [2023-11-26 12:00:01,469 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1102884685] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:00:01,469 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:00:01,470 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 12:00:01,470 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [738576766] [2023-11-26 12:00:01,470 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:00:01,471 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 12:00:01,471 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:00:01,472 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 12:00:01,472 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 12:00:01,472 INFO L87 Difference]: Start difference. First operand 232 states and 307 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-26 12:00:01,655 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:00:01,655 INFO L93 Difference]: Finished difference Result 478 states and 649 transitions. [2023-11-26 12:00:01,656 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-26 12:00:01,656 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 33 [2023-11-26 12:00:01,658 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:00:01,664 INFO L225 Difference]: With dead ends: 478 [2023-11-26 12:00:01,664 INFO L226 Difference]: Without dead ends: 248 [2023-11-26 12:00:01,665 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-26 12:00:01,670 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 55 mSDsluCounter, 131 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 12:00:01,670 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 189 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 12:00:01,673 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248 states. [2023-11-26 12:00:01,709 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248 to 236. [2023-11-26 12:00:01,710 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 236 states, 171 states have (on average 1.3625730994152048) internal successors, (233), 186 states have internal predecessors, (233), 32 states have call successors, (32), 26 states have call predecessors, (32), 32 states have return successors, (46), 33 states have call predecessors, (46), 32 states have call successors, (46) [2023-11-26 12:00:01,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 311 transitions. [2023-11-26 12:00:01,714 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 311 transitions. Word has length 33 [2023-11-26 12:00:01,715 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:00:01,715 INFO L495 AbstractCegarLoop]: Abstraction has 236 states and 311 transitions. [2023-11-26 12:00:01,715 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-26 12:00:01,716 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 311 transitions. [2023-11-26 12:00:01,725 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-26 12:00:01,726 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:00:01,726 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:00:01,726 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-26 12:00:01,726 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:00:01,727 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:00:01,727 INFO L85 PathProgramCache]: Analyzing trace with hash -154782719, now seen corresponding path program 1 times [2023-11-26 12:00:01,727 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:00:01,727 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1377026688] [2023-11-26 12:00:01,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:00:01,728 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:00:01,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:01,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 12:00:01,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:01,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-26 12:00:01,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:01,850 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:00:01,851 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:00:01,851 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1377026688] [2023-11-26 12:00:01,851 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1377026688] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:00:01,851 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:00:01,851 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 12:00:01,852 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1642537672] [2023-11-26 12:00:01,853 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:00:01,853 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 12:00:01,853 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:00:01,854 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 12:00:01,854 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 12:00:01,855 INFO L87 Difference]: Start difference. First operand 236 states and 311 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-26 12:00:02,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:00:02,229 INFO L93 Difference]: Finished difference Result 775 states and 1093 transitions. [2023-11-26 12:00:02,230 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-26 12:00:02,230 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 33 [2023-11-26 12:00:02,230 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:00:02,236 INFO L225 Difference]: With dead ends: 775 [2023-11-26 12:00:02,236 INFO L226 Difference]: Without dead ends: 541 [2023-11-26 12:00:02,238 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-26 12:00:02,241 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 182 mSDsluCounter, 161 mSDsCounter, 0 mSdLazyCounter, 230 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 188 SdHoareTripleChecker+Valid, 278 SdHoareTripleChecker+Invalid, 283 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 230 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-26 12:00:02,241 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [188 Valid, 278 Invalid, 283 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 230 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-26 12:00:02,244 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 541 states. [2023-11-26 12:00:02,300 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 541 to 533. [2023-11-26 12:00:02,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 533 states, 384 states have (on average 1.3463541666666667) internal successors, (517), 413 states have internal predecessors, (517), 78 states have call successors, (78), 71 states have call predecessors, (78), 70 states have return successors, (128), 72 states have call predecessors, (128), 78 states have call successors, (128) [2023-11-26 12:00:02,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 533 states to 533 states and 723 transitions. [2023-11-26 12:00:02,308 INFO L78 Accepts]: Start accepts. Automaton has 533 states and 723 transitions. Word has length 33 [2023-11-26 12:00:02,309 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:00:02,309 INFO L495 AbstractCegarLoop]: Abstraction has 533 states and 723 transitions. [2023-11-26 12:00:02,309 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-26 12:00:02,309 INFO L276 IsEmpty]: Start isEmpty. Operand 533 states and 723 transitions. [2023-11-26 12:00:02,310 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2023-11-26 12:00:02,310 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:00:02,311 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:00:02,311 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-26 12:00:02,311 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:00:02,312 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:00:02,312 INFO L85 PathProgramCache]: Analyzing trace with hash 1327300251, now seen corresponding path program 1 times [2023-11-26 12:00:02,312 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:00:02,312 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1516782936] [2023-11-26 12:00:02,312 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:00:02,312 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:00:02,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:02,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 12:00:02,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:02,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-26 12:00:02,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:02,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-26 12:00:02,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:02,424 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:00:02,424 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:00:02,425 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1516782936] [2023-11-26 12:00:02,425 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1516782936] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:00:02,425 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:00:02,425 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 12:00:02,426 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [133357013] [2023-11-26 12:00:02,426 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:00:02,427 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 12:00:02,430 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:00:02,431 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 12:00:02,432 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 12:00:02,433 INFO L87 Difference]: Start difference. First operand 533 states and 723 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-26 12:00:02,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:00:02,890 INFO L93 Difference]: Finished difference Result 1147 states and 1649 transitions. [2023-11-26 12:00:02,892 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-26 12:00:02,892 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 37 [2023-11-26 12:00:02,892 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:00:02,908 INFO L225 Difference]: With dead ends: 1147 [2023-11-26 12:00:02,909 INFO L226 Difference]: Without dead ends: 1145 [2023-11-26 12:00:02,910 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-26 12:00:02,912 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 257 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 109 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 261 SdHoareTripleChecker+Valid, 147 SdHoareTripleChecker+Invalid, 266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 109 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-26 12:00:02,912 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [261 Valid, 147 Invalid, 266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [109 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-26 12:00:02,914 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1145 states. [2023-11-26 12:00:03,016 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1145 to 1038. [2023-11-26 12:00:03,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1038 states, 746 states have (on average 1.3471849865951742) internal successors, (1005), 814 states have internal predecessors, (1005), 162 states have call successors, (162), 121 states have call predecessors, (162), 129 states have return successors, (343), 139 states have call predecessors, (343), 162 states have call successors, (343) [2023-11-26 12:00:03,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1038 states to 1038 states and 1510 transitions. [2023-11-26 12:00:03,030 INFO L78 Accepts]: Start accepts. Automaton has 1038 states and 1510 transitions. Word has length 37 [2023-11-26 12:00:03,031 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:00:03,031 INFO L495 AbstractCegarLoop]: Abstraction has 1038 states and 1510 transitions. [2023-11-26 12:00:03,031 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-26 12:00:03,032 INFO L276 IsEmpty]: Start isEmpty. Operand 1038 states and 1510 transitions. [2023-11-26 12:00:03,035 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-11-26 12:00:03,035 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:00:03,036 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:00:03,036 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-26 12:00:03,036 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:00:03,037 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:00:03,037 INFO L85 PathProgramCache]: Analyzing trace with hash 1694581556, now seen corresponding path program 1 times [2023-11-26 12:00:03,037 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:00:03,037 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1460139391] [2023-11-26 12:00:03,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:00:03,038 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:00:03,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:03,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 12:00:03,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:03,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-26 12:00:03,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:03,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-26 12:00:03,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:03,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-26 12:00:03,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:03,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-26 12:00:03,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:03,137 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 12:00:03,138 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:00:03,138 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1460139391] [2023-11-26 12:00:03,138 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1460139391] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:00:03,138 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:00:03,138 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-26 12:00:03,138 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1895451971] [2023-11-26 12:00:03,139 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:00:03,139 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-26 12:00:03,140 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:00:03,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-26 12:00:03,140 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-26 12:00:03,141 INFO L87 Difference]: Start difference. First operand 1038 states and 1510 transitions. Second operand has 7 states, 6 states have (on average 8.5) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-26 12:00:03,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:00:03,592 INFO L93 Difference]: Finished difference Result 1662 states and 2401 transitions. [2023-11-26 12:00:03,593 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-26 12:00:03,593 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 8.5) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 63 [2023-11-26 12:00:03,594 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:00:03,599 INFO L225 Difference]: With dead ends: 1662 [2023-11-26 12:00:03,599 INFO L226 Difference]: Without dead ends: 626 [2023-11-26 12:00:03,604 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2023-11-26 12:00:03,605 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 239 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 238 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 247 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 305 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 238 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-26 12:00:03,605 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [247 Valid, 203 Invalid, 305 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 238 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-26 12:00:03,607 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 626 states. [2023-11-26 12:00:03,668 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 626 to 587. [2023-11-26 12:00:03,669 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 587 states, 427 states have (on average 1.3278688524590163) internal successors, (567), 461 states have internal predecessors, (567), 86 states have call successors, (86), 69 states have call predecessors, (86), 73 states have return successors, (173), 80 states have call predecessors, (173), 86 states have call successors, (173) [2023-11-26 12:00:03,674 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 587 states to 587 states and 826 transitions. [2023-11-26 12:00:03,675 INFO L78 Accepts]: Start accepts. Automaton has 587 states and 826 transitions. Word has length 63 [2023-11-26 12:00:03,676 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:00:03,676 INFO L495 AbstractCegarLoop]: Abstraction has 587 states and 826 transitions. [2023-11-26 12:00:03,676 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 8.5) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-26 12:00:03,676 INFO L276 IsEmpty]: Start isEmpty. Operand 587 states and 826 transitions. [2023-11-26 12:00:03,679 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2023-11-26 12:00:03,679 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:00:03,679 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:00:03,679 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-26 12:00:03,680 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:00:03,680 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:00:03,680 INFO L85 PathProgramCache]: Analyzing trace with hash -1098289702, now seen corresponding path program 1 times [2023-11-26 12:00:03,680 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:00:03,681 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [791145009] [2023-11-26 12:00:03,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:00:03,681 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:00:03,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:03,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 12:00:03,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:03,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 12:00:03,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:03,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-26 12:00:03,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:03,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-26 12:00:03,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:03,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2023-11-26 12:00:03,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:03,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2023-11-26 12:00:03,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:03,839 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 17 proven. 4 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-26 12:00:03,840 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:00:03,840 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [791145009] [2023-11-26 12:00:03,840 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [791145009] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-26 12:00:03,840 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [657129305] [2023-11-26 12:00:03,840 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:00:03,841 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 12:00:03,841 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 12:00:03,848 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-26 12:00:03,876 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-26 12:00:03,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:03,965 INFO L262 TraceCheckSpWp]: Trace formula consists of 289 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-26 12:00:03,972 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-26 12:00:04,092 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:00:04,093 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-26 12:00:04,093 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [657129305] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:00:04,093 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-26 12:00:04,093 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 8 [2023-11-26 12:00:04,093 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1963841505] [2023-11-26 12:00:04,094 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:00:04,094 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 12:00:04,094 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:00:04,095 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 12:00:04,095 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-26 12:00:04,095 INFO L87 Difference]: Start difference. First operand 587 states and 826 transitions. Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-26 12:00:04,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:00:04,218 INFO L93 Difference]: Finished difference Result 1085 states and 1539 transitions. [2023-11-26 12:00:04,218 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 12:00:04,218 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 69 [2023-11-26 12:00:04,220 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:00:04,225 INFO L225 Difference]: With dead ends: 1085 [2023-11-26 12:00:04,225 INFO L226 Difference]: Without dead ends: 500 [2023-11-26 12:00:04,228 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 87 GetRequests, 81 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-26 12:00:04,230 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 40 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 35 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 35 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 12:00:04,231 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 150 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 35 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 12:00:04,233 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 500 states. [2023-11-26 12:00:04,296 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 500 to 500. [2023-11-26 12:00:04,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 500 states, 364 states have (on average 1.2967032967032968) internal successors, (472), 392 states have internal predecessors, (472), 72 states have call successors, (72), 63 states have call predecessors, (72), 63 states have return successors, (108), 68 states have call predecessors, (108), 72 states have call successors, (108) [2023-11-26 12:00:04,301 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 500 states to 500 states and 652 transitions. [2023-11-26 12:00:04,301 INFO L78 Accepts]: Start accepts. Automaton has 500 states and 652 transitions. Word has length 69 [2023-11-26 12:00:04,302 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:00:04,302 INFO L495 AbstractCegarLoop]: Abstraction has 500 states and 652 transitions. [2023-11-26 12:00:04,302 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-26 12:00:04,302 INFO L276 IsEmpty]: Start isEmpty. Operand 500 states and 652 transitions. [2023-11-26 12:00:04,304 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2023-11-26 12:00:04,304 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:00:04,304 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:00:04,316 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-26 12:00:04,510 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-26 12:00:04,510 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:00:04,510 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:00:04,511 INFO L85 PathProgramCache]: Analyzing trace with hash 914529793, now seen corresponding path program 1 times [2023-11-26 12:00:04,511 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:00:04,511 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1517953163] [2023-11-26 12:00:04,511 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:00:04,511 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:00:04,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:04,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 12:00:04,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:04,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 12:00:04,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:04,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-26 12:00:04,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:04,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-26 12:00:04,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:04,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-26 12:00:04,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:04,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 12:00:04,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:04,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-26 12:00:04,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:04,704 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2023-11-26 12:00:04,704 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:00:04,704 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1517953163] [2023-11-26 12:00:04,705 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1517953163] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-26 12:00:04,705 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1311055124] [2023-11-26 12:00:04,705 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:00:04,705 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 12:00:04,705 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 12:00:04,706 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-26 12:00:04,724 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-26 12:00:04,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:04,814 INFO L262 TraceCheckSpWp]: Trace formula consists of 291 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-26 12:00:04,820 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-26 12:00:04,848 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-11-26 12:00:04,849 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-26 12:00:04,849 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1311055124] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:00:04,849 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-26 12:00:04,849 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [7] total 8 [2023-11-26 12:00:04,849 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1874476604] [2023-11-26 12:00:04,849 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:00:04,850 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-26 12:00:04,850 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:00:04,850 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-26 12:00:04,851 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-26 12:00:04,851 INFO L87 Difference]: Start difference. First operand 500 states and 652 transitions. Second operand has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-26 12:00:04,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:00:04,941 INFO L93 Difference]: Finished difference Result 1016 states and 1349 transitions. [2023-11-26 12:00:04,942 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-26 12:00:04,942 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 72 [2023-11-26 12:00:04,942 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:00:04,946 INFO L225 Difference]: With dead ends: 1016 [2023-11-26 12:00:04,946 INFO L226 Difference]: Without dead ends: 518 [2023-11-26 12:00:04,948 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 89 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-26 12:00:04,949 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 1 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 12:00:04,949 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 206 Invalid, 47 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 12:00:04,950 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 518 states. [2023-11-26 12:00:04,998 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 518 to 506. [2023-11-26 12:00:05,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 506 states, 370 states have (on average 1.2918918918918918) internal successors, (478), 398 states have internal predecessors, (478), 72 states have call successors, (72), 63 states have call predecessors, (72), 63 states have return successors, (108), 68 states have call predecessors, (108), 72 states have call successors, (108) [2023-11-26 12:00:05,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 506 states to 506 states and 658 transitions. [2023-11-26 12:00:05,004 INFO L78 Accepts]: Start accepts. Automaton has 506 states and 658 transitions. Word has length 72 [2023-11-26 12:00:05,004 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:00:05,004 INFO L495 AbstractCegarLoop]: Abstraction has 506 states and 658 transitions. [2023-11-26 12:00:05,005 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-26 12:00:05,005 INFO L276 IsEmpty]: Start isEmpty. Operand 506 states and 658 transitions. [2023-11-26 12:00:05,006 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2023-11-26 12:00:05,006 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:00:05,007 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:00:05,022 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-26 12:00:05,213 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 12:00:05,213 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:00:05,213 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:00:05,214 INFO L85 PathProgramCache]: Analyzing trace with hash 491827967, now seen corresponding path program 1 times [2023-11-26 12:00:05,214 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:00:05,214 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1172638249] [2023-11-26 12:00:05,214 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:00:05,214 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:00:05,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:05,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 12:00:05,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:05,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 12:00:05,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:05,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-26 12:00:05,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:05,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-26 12:00:05,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:05,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-26 12:00:05,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:05,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 12:00:05,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:05,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-26 12:00:05,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:05,462 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 18 proven. 1 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-26 12:00:05,462 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:00:05,462 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1172638249] [2023-11-26 12:00:05,462 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1172638249] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-26 12:00:05,462 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1561228855] [2023-11-26 12:00:05,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:00:05,463 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 12:00:05,463 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 12:00:05,464 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-26 12:00:05,484 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-26 12:00:05,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:00:05,569 INFO L262 TraceCheckSpWp]: Trace formula consists of 290 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-26 12:00:05,581 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-26 12:00:05,677 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:00:05,677 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-26 12:00:05,678 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1561228855] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:00:05,678 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-26 12:00:05,678 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2023-11-26 12:00:05,678 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1765085248] [2023-11-26 12:00:05,678 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:00:05,679 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 12:00:05,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:00:05,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 12:00:05,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=130, Unknown=0, NotChecked=0, Total=156 [2023-11-26 12:00:05,681 INFO L87 Difference]: Start difference. First operand 506 states and 658 transitions. Second operand has 5 states, 5 states have (on average 11.4) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-26 12:00:05,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:00:05,831 INFO L93 Difference]: Finished difference Result 829 states and 1075 transitions. [2023-11-26 12:00:05,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-26 12:00:05,832 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 72 [2023-11-26 12:00:05,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:00:05,833 INFO L225 Difference]: With dead ends: 829 [2023-11-26 12:00:05,833 INFO L226 Difference]: Without dead ends: 0 [2023-11-26 12:00:05,835 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 79 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=152, Unknown=0, NotChecked=0, Total=182 [2023-11-26 12:00:05,836 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 96 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 79 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 88 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 79 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 12:00:05,836 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 224 Invalid, 88 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 79 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 12:00:05,837 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-26 12:00:05,837 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-26 12:00:05,837 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 12:00:05,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-26 12:00:05,838 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 72 [2023-11-26 12:00:05,838 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:00:05,838 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-26 12:00:05,838 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-26 12:00:05,839 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-26 12:00:05,839 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-26 12:00:05,844 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-26 12:00:05,856 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-26 12:00:06,050 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2023-11-26 12:00:06,052 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-26 12:00:07,956 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 229 236) no Hoare annotation was computed. [2023-11-26 12:00:07,956 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 229 236) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1))) (and (or .cse0 (< ~waterLevel~0 1) (not (= 1 ~systemActive~0)) .cse1) (or .cse0 .cse1 (< ~waterLevel~0 2) (= 0 ~systemActive~0)))) [2023-11-26 12:00:07,956 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 162 168) no Hoare annotation was computed. [2023-11-26 12:00:07,957 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 162 168) the Hoare annotation is: true [2023-11-26 12:00:07,957 INFO L899 garLoopResultBuilder]: For program point L562-1(lines 558 569) no Hoare annotation was computed. [2023-11-26 12:00:07,958 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 558 569) the Hoare annotation is: true [2023-11-26 12:00:07,958 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 558 569) no Hoare annotation was computed. [2023-11-26 12:00:07,958 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 570 578) the Hoare annotation is: true [2023-11-26 12:00:07,958 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 570 578) no Hoare annotation was computed. [2023-11-26 12:00:07,958 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 356 385) no Hoare annotation was computed. [2023-11-26 12:00:07,958 INFO L899 garLoopResultBuilder]: For program point L381(lines 356 385) no Hoare annotation was computed. [2023-11-26 12:00:07,958 INFO L899 garLoopResultBuilder]: For program point L377(line 377) no Hoare annotation was computed. [2023-11-26 12:00:07,959 INFO L899 garLoopResultBuilder]: For program point L370(lines 370 374) no Hoare annotation was computed. [2023-11-26 12:00:07,959 INFO L902 garLoopResultBuilder]: At program point L370-1(lines 370 374) the Hoare annotation is: true [2023-11-26 12:00:07,959 INFO L902 garLoopResultBuilder]: At program point L366-2(lines 366 380) the Hoare annotation is: true [2023-11-26 12:00:07,959 INFO L902 garLoopResultBuilder]: At program point L362(line 362) the Hoare annotation is: true [2023-11-26 12:00:07,959 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 356 385) the Hoare annotation is: true [2023-11-26 12:00:07,959 INFO L899 garLoopResultBuilder]: For program point L362-1(line 362) no Hoare annotation was computed. [2023-11-26 12:00:07,960 INFO L899 garLoopResultBuilder]: For program point L321(lines 321 325) no Hoare annotation was computed. [2023-11-26 12:00:07,960 INFO L899 garLoopResultBuilder]: For program point L321-2(lines 321 325) no Hoare annotation was computed. [2023-11-26 12:00:07,960 INFO L899 garLoopResultBuilder]: For program point L478(lines 478 488) no Hoare annotation was computed. [2023-11-26 12:00:07,960 INFO L899 garLoopResultBuilder]: For program point L474(lines 474 491) no Hoare annotation was computed. [2023-11-26 12:00:07,960 INFO L899 garLoopResultBuilder]: For program point L474-1(lines 466 494) no Hoare annotation was computed. [2023-11-26 12:00:07,960 INFO L895 garLoopResultBuilder]: At program point L210(line 210) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< |old(~waterLevel~0)| 1)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (< |old(~pumpRunning~0)| 1)) (or .cse1 .cse2 (not (= 0 ~systemActive~0))) (or .cse1 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse2 .cse0))) [2023-11-26 12:00:07,961 INFO L895 garLoopResultBuilder]: At program point L206(line 206) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< |old(~waterLevel~0)| 1)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (< |old(~pumpRunning~0)| 1)) (or .cse1 .cse2 (not (= 0 ~systemActive~0))) (or .cse1 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse2 .cse0))) [2023-11-26 12:00:07,961 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2023-11-26 12:00:07,961 INFO L895 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< |old(~waterLevel~0)| 1))) (and (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse1 .cse2 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 (< |old(~waterLevel~0)| 2) (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 (not (= 0 ~systemActive~0))))) [2023-11-26 12:00:07,961 INFO L899 garLoopResultBuilder]: For program point L215-1(lines 196 220) no Hoare annotation was computed. [2023-11-26 12:00:07,962 INFO L899 garLoopResultBuilder]: For program point L149-1(lines 149 155) no Hoare annotation was computed. [2023-11-26 12:00:07,962 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 138 161) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse3 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (< |old(~waterLevel~0)| 1)) (.cse7 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse3) (< |old(~pumpRunning~0)| 1)) (or .cse4 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse5 .cse0 (and .cse6 (= ~methAndRunningLastTime~0 0) .cse2)) (or .cse4 .cse1 (and .cse6 .cse2 .cse3) .cse7) (or (< 1 |old(~waterLevel~0)|) (and .cse6 .cse3 (= ~waterLevel~0 1)) .cse4 .cse5 .cse7))) [2023-11-26 12:00:07,962 INFO L899 garLoopResultBuilder]: For program point L538(lines 538 542) no Hoare annotation was computed. [2023-11-26 12:00:07,962 INFO L899 garLoopResultBuilder]: For program point L538-2(lines 534 545) no Hoare annotation was computed. [2023-11-26 12:00:07,963 INFO L895 garLoopResultBuilder]: At program point L472(line 472) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< |old(~waterLevel~0)| 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (< |old(~pumpRunning~0)| 1) (and .cse1 (<= 1 ~waterLevel~0))) (or .cse2 .cse3 (and .cse1 .cse4 .cse5) (not (= 0 ~systemActive~0))) (or .cse2 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse3 .cse0 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse4) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse5)))) [2023-11-26 12:00:07,963 INFO L899 garLoopResultBuilder]: For program point L472-1(line 472) no Hoare annotation was computed. [2023-11-26 12:00:07,963 INFO L899 garLoopResultBuilder]: For program point L142-1(lines 141 160) no Hoare annotation was computed. [2023-11-26 12:00:07,963 INFO L899 garLoopResultBuilder]: For program point L1005(line 1005) no Hoare annotation was computed. [2023-11-26 12:00:07,964 INFO L899 garLoopResultBuilder]: For program point L204(lines 204 212) no Hoare annotation was computed. [2023-11-26 12:00:07,964 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 138 161) no Hoare annotation was computed. [2023-11-26 12:00:07,964 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1005) no Hoare annotation was computed. [2023-11-26 12:00:07,964 INFO L899 garLoopResultBuilder]: For program point L200(lines 200 217) no Hoare annotation was computed. [2023-11-26 12:00:07,964 INFO L895 garLoopResultBuilder]: At program point L337(line 337) the Hoare annotation is: (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-26 12:00:07,964 INFO L899 garLoopResultBuilder]: For program point L119(lines 56 123) no Hoare annotation was computed. [2023-11-26 12:00:07,965 INFO L899 garLoopResultBuilder]: For program point L86(lines 86 92) no Hoare annotation was computed. [2023-11-26 12:00:07,965 INFO L899 garLoopResultBuilder]: For program point L86-1(lines 86 92) no Hoare annotation was computed. [2023-11-26 12:00:07,965 INFO L895 garLoopResultBuilder]: At program point L78(line 78) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~waterLevel~0))) (or (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse3 .cse0 .cse1 .cse4) (and .cse2 .cse3 .cse1 .cse4 (= 0 ~systemActive~0)))) [2023-11-26 12:00:07,965 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-26 12:00:07,965 INFO L899 garLoopResultBuilder]: For program point L442(lines 442 449) no Hoare annotation was computed. [2023-11-26 12:00:07,966 INFO L899 garLoopResultBuilder]: For program point L442-2(lines 442 449) no Hoare annotation was computed. [2023-11-26 12:00:07,966 INFO L895 garLoopResultBuilder]: At program point L116(lines 65 117) the Hoare annotation is: false [2023-11-26 12:00:07,966 INFO L899 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2023-11-26 12:00:07,966 INFO L899 garLoopResultBuilder]: For program point L335-1(lines 335 341) no Hoare annotation was computed. [2023-11-26 12:00:07,966 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-26 12:00:07,966 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 110) no Hoare annotation was computed. [2023-11-26 12:00:07,967 INFO L895 garLoopResultBuilder]: At program point L104-2(lines 96 111) the Hoare annotation is: (let ((.cse1 (= 1 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (<= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= 0 ~systemActive~0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2) (and .cse3 .cse2 .cse4 (= ~waterLevel~0 1)) (and .cse3 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse3 .cse0 .cse2 .cse4))) [2023-11-26 12:00:07,967 INFO L899 garLoopResultBuilder]: For program point L67(lines 66 115) no Hoare annotation was computed. [2023-11-26 12:00:07,967 INFO L899 garLoopResultBuilder]: For program point L96(lines 96 111) no Hoare annotation was computed. [2023-11-26 12:00:07,967 INFO L895 garLoopResultBuilder]: At program point L88(line 88) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~waterLevel~0))) (or (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse3 .cse0 .cse1 .cse4) (and .cse2 .cse3 .cse1 .cse4 (= 0 ~systemActive~0)))) [2023-11-26 12:00:07,967 INFO L895 garLoopResultBuilder]: At program point L113(lines 66 115) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~waterLevel~0))) (or (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse3 .cse0 .cse1 .cse4) (and .cse2 .cse3 .cse1 .cse4 (= 0 ~systemActive~0)))) [2023-11-26 12:00:07,968 INFO L899 garLoopResultBuilder]: For program point L76(lines 76 82) no Hoare annotation was computed. [2023-11-26 12:00:07,968 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2023-11-26 12:00:07,968 INFO L895 garLoopResultBuilder]: At program point L184(line 184) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (not (= 1 ~systemActive~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)) (not (= ~methAndRunningLastTime~0 0))) [2023-11-26 12:00:07,968 INFO L899 garLoopResultBuilder]: For program point L178(lines 178 186) no Hoare annotation was computed. [2023-11-26 12:00:07,968 INFO L899 garLoopResultBuilder]: For program point L174(lines 174 191) no Hoare annotation was computed. [2023-11-26 12:00:07,968 INFO L899 garLoopResultBuilder]: For program point L302(lines 302 306) no Hoare annotation was computed. [2023-11-26 12:00:07,969 INFO L899 garLoopResultBuilder]: For program point L302-2(lines 302 306) no Hoare annotation was computed. [2023-11-26 12:00:07,969 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 170 194) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (< ~waterLevel~0 1) (not (= 1 ~systemActive~0)) (not (= ~methAndRunningLastTime~0 0))) [2023-11-26 12:00:07,969 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 611 624) no Hoare annotation was computed. [2023-11-26 12:00:07,969 INFO L895 garLoopResultBuilder]: At program point L189(line 189) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (not (= 1 ~systemActive~0)) (not (= ~methAndRunningLastTime~0 0))) [2023-11-26 12:00:07,969 INFO L899 garLoopResultBuilder]: For program point L189-1(lines 170 194) no Hoare annotation was computed. [2023-11-26 12:00:07,970 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 170 194) no Hoare annotation was computed. [2023-11-26 12:00:07,970 INFO L899 garLoopResultBuilder]: For program point L615(lines 615 621) no Hoare annotation was computed. [2023-11-26 12:00:07,970 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 546 557) no Hoare annotation was computed. [2023-11-26 12:00:07,970 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 546 557) the Hoare annotation is: (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse5 (< |old(~waterLevel~0)| 1)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (< 1 |old(~waterLevel~0)|) .cse5 .cse0 (= ~waterLevel~0 1) .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse2 .cse3) (or (< ~pumpRunning~0 1) .cse6 .cse1 .cse2))) [2023-11-26 12:00:07,970 INFO L899 garLoopResultBuilder]: For program point L550-1(lines 546 557) no Hoare annotation was computed. [2023-11-26 12:00:07,973 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:00:07,976 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-26 12:00:07,992 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 26.11 12:00:07 BoogieIcfgContainer [2023-11-26 12:00:07,992 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-26 12:00:07,992 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-26 12:00:07,993 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-26 12:00:07,993 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-26 12:00:07,994 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:59:59" (3/4) ... [2023-11-26 12:00:07,996 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-26 12:00:08,000 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-26 12:00:08,000 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-26 12:00:08,000 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-26 12:00:08,000 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-26 12:00:08,000 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-26 12:00:08,000 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-26 12:00:08,001 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 12:00:08,001 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-26 12:00:08,009 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 33 nodes and edges [2023-11-26 12:00:08,010 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-26 12:00:08,011 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-26 12:00:08,012 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 12:00:08,012 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 12:00:08,136 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/witness.graphml [2023-11-26 12:00:08,137 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/witness.yml [2023-11-26 12:00:08,137 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-26 12:00:08,138 INFO L158 Benchmark]: Toolchain (without parser) took 10042.15ms. Allocated memory was 130.0MB in the beginning and 257.9MB in the end (delta: 127.9MB). Free memory was 79.8MB in the beginning and 163.0MB in the end (delta: -83.2MB). Peak memory consumption was 46.7MB. Max. memory is 16.1GB. [2023-11-26 12:00:08,138 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 130.0MB. Free memory is still 69.6MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-26 12:00:08,139 INFO L158 Benchmark]: CACSL2BoogieTranslator took 646.51ms. Allocated memory was 130.0MB in the beginning and 178.3MB in the end (delta: 48.2MB). Free memory was 79.6MB in the beginning and 148.4MB in the end (delta: -68.8MB). Peak memory consumption was 23.9MB. Max. memory is 16.1GB. [2023-11-26 12:00:08,139 INFO L158 Benchmark]: Boogie Procedure Inliner took 64.96ms. Allocated memory is still 178.3MB. Free memory was 148.4MB in the beginning and 146.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-26 12:00:08,140 INFO L158 Benchmark]: Boogie Preprocessor took 88.98ms. Allocated memory is still 178.3MB. Free memory was 146.3MB in the beginning and 144.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-26 12:00:08,140 INFO L158 Benchmark]: RCFGBuilder took 551.56ms. Allocated memory is still 178.3MB. Free memory was 144.2MB in the beginning and 121.8MB in the end (delta: 22.3MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-26 12:00:08,140 INFO L158 Benchmark]: TraceAbstraction took 8536.87ms. Allocated memory was 178.3MB in the beginning and 257.9MB in the end (delta: 79.7MB). Free memory was 121.1MB in the beginning and 170.3MB in the end (delta: -49.2MB). Peak memory consumption was 98.8MB. Max. memory is 16.1GB. [2023-11-26 12:00:08,141 INFO L158 Benchmark]: Witness Printer took 144.65ms. Allocated memory is still 257.9MB. Free memory was 170.3MB in the beginning and 163.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-26 12:00:08,143 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 130.0MB. Free memory is still 69.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 646.51ms. Allocated memory was 130.0MB in the beginning and 178.3MB in the end (delta: 48.2MB). Free memory was 79.6MB in the beginning and 148.4MB in the end (delta: -68.8MB). Peak memory consumption was 23.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 64.96ms. Allocated memory is still 178.3MB. Free memory was 148.4MB in the beginning and 146.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 88.98ms. Allocated memory is still 178.3MB. Free memory was 146.3MB in the beginning and 144.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 551.56ms. Allocated memory is still 178.3MB. Free memory was 144.2MB in the beginning and 121.8MB in the end (delta: 22.3MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 8536.87ms. Allocated memory was 178.3MB in the beginning and 257.9MB in the end (delta: 79.7MB). Free memory was 121.1MB in the beginning and 170.3MB in the end (delta: -49.2MB). Peak memory consumption was 98.8MB. Max. memory is 16.1GB. * Witness Printer took 144.65ms. Allocated memory is still 257.9MB. Free memory was 170.3MB in the beginning and 163.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] - GenericResultAtLocation [Line: 124]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [124] - GenericResultAtLocation [Line: 354]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [354] - GenericResultAtLocation [Line: 455]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [455] - GenericResultAtLocation [Line: 495]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [495] - GenericResultAtLocation [Line: 530]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [530] - GenericResultAtLocation [Line: 634]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [634] - GenericResultAtLocation [Line: 1000]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1000] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1005]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 74 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.5s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1094 SdHoareTripleChecker+Valid, 1.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1066 mSDsluCounter, 2133 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1197 mSDsCounter, 283 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1144 IncrementalHoareTripleChecker+Invalid, 1427 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 283 mSolverCounterUnsat, 936 mSDtfsCounter, 1144 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 365 GetRequests, 302 SyntacticMatches, 0 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1038occurred in iteration=8, InterpolantAutomatonStates: 62, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 188 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 23 LocationsWithAnnotation, 1125 PreInvPairs, 1189 NumberOfFragments, 689 HoareAnnotationTreeSize, 1125 FomulaSimplifications, 675 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 23 FomulaSimplificationsInter, 3312 FormulaSimplificationTreeSizeReductionInter, 1.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 705 NumberOfCodeBlocks, 705 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 690 ConstructedInterpolants, 0 QuantifiedInterpolants, 1104 SizeOfPredicates, 5 NumberOfNonLiveVariables, 870 ConjunctsInSsa, 17 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 169/175 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning) && (2 <= waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= waterLevel))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (splverifierCounter == 0)) && (1 <= waterLevel)) && (0 == systemActive))) - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2023-11-26 12:00:08,172 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ca3f74b8-60fe-4be4-a307-af618be9de16/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE