./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash dcab8ddabad39d2c77c9d9341cfb89acc265e09aeb5bde0419f381c4b7bb75b6 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-26 12:04:25,315 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-26 12:04:25,466 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-26 12:04:25,480 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-26 12:04:25,481 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-26 12:04:25,528 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-26 12:04:25,529 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-26 12:04:25,530 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-26 12:04:25,531 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-26 12:04:25,539 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-26 12:04:25,539 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-26 12:04:25,540 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-26 12:04:25,541 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-26 12:04:25,543 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-26 12:04:25,544 INFO L153 SettingsManager]: * Use SBE=true [2023-11-26 12:04:25,544 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-26 12:04:25,545 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-26 12:04:25,545 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-26 12:04:25,546 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-26 12:04:25,546 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-26 12:04:25,547 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-26 12:04:25,547 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-26 12:04:25,548 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-26 12:04:25,548 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-26 12:04:25,549 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-26 12:04:25,549 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-26 12:04:25,550 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-26 12:04:25,551 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-26 12:04:25,551 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-26 12:04:25,552 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-26 12:04:25,553 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-26 12:04:25,554 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 12:04:25,554 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-26 12:04:25,554 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-26 12:04:25,555 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-26 12:04:25,555 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-26 12:04:25,555 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-26 12:04:25,555 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-26 12:04:25,556 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-26 12:04:25,556 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-26 12:04:25,556 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-26 12:04:25,557 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-26 12:04:25,557 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> dcab8ddabad39d2c77c9d9341cfb89acc265e09aeb5bde0419f381c4b7bb75b6 [2023-11-26 12:04:25,859 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-26 12:04:25,889 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-26 12:04:25,891 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-26 12:04:25,893 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-26 12:04:25,893 INFO L274 PluginConnector]: CDTParser initialized [2023-11-26 12:04:25,895 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/../../sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c [2023-11-26 12:04:29,234 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-26 12:04:29,624 INFO L384 CDTParser]: Found 1 translation units. [2023-11-26 12:04:29,624 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c [2023-11-26 12:04:29,661 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/data/c8b0c664a/7f546e04ff524dafa0aff9933f80a859/FLAG833825d9d [2023-11-26 12:04:29,686 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/data/c8b0c664a/7f546e04ff524dafa0aff9933f80a859 [2023-11-26 12:04:29,693 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-26 12:04:29,695 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-26 12:04:29,697 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-26 12:04:29,697 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-26 12:04:29,704 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-26 12:04:29,705 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 12:04:29" (1/1) ... [2023-11-26 12:04:29,706 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5be3bd77 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:29, skipping insertion in model container [2023-11-26 12:04:29,707 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 12:04:29" (1/1) ... [2023-11-26 12:04:29,783 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-26 12:04:29,967 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c[1605,1618] [2023-11-26 12:04:30,095 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 12:04:30,107 INFO L202 MainTranslator]: Completed pre-run [2023-11-26 12:04:30,119 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2023-11-26 12:04:30,121 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [58] [2023-11-26 12:04:30,121 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [169] [2023-11-26 12:04:30,121 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [271] [2023-11-26 12:04:30,122 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [472] [2023-11-26 12:04:30,122 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [537] [2023-11-26 12:04:30,122 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [572] [2023-11-26 12:04:30,123 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [598] [2023-11-26 12:04:30,128 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/sv-benchmarks/c/product-lines/minepump_spec4_product49.cil.c[1605,1618] [2023-11-26 12:04:30,195 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 12:04:30,222 INFO L206 MainTranslator]: Completed translation [2023-11-26 12:04:30,223 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:30 WrapperNode [2023-11-26 12:04:30,223 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-26 12:04:30,224 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-26 12:04:30,224 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-26 12:04:30,225 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-26 12:04:30,233 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:30" (1/1) ... [2023-11-26 12:04:30,249 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:30" (1/1) ... [2023-11-26 12:04:30,280 INFO L138 Inliner]: procedures = 55, calls = 98, calls flagged for inlining = 24, calls inlined = 20, statements flattened = 204 [2023-11-26 12:04:30,281 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-26 12:04:30,281 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-26 12:04:30,282 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-26 12:04:30,282 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-26 12:04:30,295 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:30" (1/1) ... [2023-11-26 12:04:30,296 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:30" (1/1) ... [2023-11-26 12:04:30,298 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:30" (1/1) ... [2023-11-26 12:04:30,315 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-26 12:04:30,315 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:30" (1/1) ... [2023-11-26 12:04:30,315 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:30" (1/1) ... [2023-11-26 12:04:30,321 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:30" (1/1) ... [2023-11-26 12:04:30,327 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:30" (1/1) ... [2023-11-26 12:04:30,329 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:30" (1/1) ... [2023-11-26 12:04:30,330 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:30" (1/1) ... [2023-11-26 12:04:30,334 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-26 12:04:30,335 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-26 12:04:30,335 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-26 12:04:30,335 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-26 12:04:30,336 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:30" (1/1) ... [2023-11-26 12:04:30,343 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 12:04:30,361 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 12:04:30,376 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-26 12:04:30,397 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-26 12:04:30,438 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-26 12:04:30,439 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-26 12:04:30,439 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-26 12:04:30,439 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-26 12:04:30,439 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-26 12:04:30,439 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-26 12:04:30,439 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-26 12:04:30,440 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 12:04:30,440 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 12:04:30,440 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-26 12:04:30,440 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-26 12:04:30,440 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-26 12:04:30,442 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-26 12:04:30,442 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-26 12:04:30,442 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-26 12:04:30,442 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-26 12:04:30,536 INFO L241 CfgBuilder]: Building ICFG [2023-11-26 12:04:30,539 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-26 12:04:30,925 INFO L282 CfgBuilder]: Performing block encoding [2023-11-26 12:04:31,008 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-26 12:04:31,008 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-26 12:04:31,009 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 12:04:31 BoogieIcfgContainer [2023-11-26 12:04:31,009 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-26 12:04:31,012 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-26 12:04:31,012 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-26 12:04:31,016 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-26 12:04:31,016 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 26.11 12:04:29" (1/3) ... [2023-11-26 12:04:31,017 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@39393f87 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 12:04:31, skipping insertion in model container [2023-11-26 12:04:31,018 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:04:30" (2/3) ... [2023-11-26 12:04:31,018 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@39393f87 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 12:04:31, skipping insertion in model container [2023-11-26 12:04:31,018 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 12:04:31" (3/3) ... [2023-11-26 12:04:31,020 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product49.cil.c [2023-11-26 12:04:31,041 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-26 12:04:31,041 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-26 12:04:31,095 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-26 12:04:31,103 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@69d43d1a, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-26 12:04:31,103 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-26 12:04:31,108 INFO L276 IsEmpty]: Start isEmpty. Operand has 63 states, 45 states have (on average 1.5777777777777777) internal successors, (71), 53 states have internal predecessors, (71), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-26 12:04:31,119 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-11-26 12:04:31,119 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:04:31,120 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:04:31,120 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:04:31,127 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:04:31,127 INFO L85 PathProgramCache]: Analyzing trace with hash 1345566182, now seen corresponding path program 1 times [2023-11-26 12:04:31,139 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:04:31,139 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [589557691] [2023-11-26 12:04:31,139 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:04:31,140 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:04:31,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:31,338 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:04:31,338 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:04:31,339 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [589557691] [2023-11-26 12:04:31,339 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [589557691] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:04:31,340 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:04:31,340 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-26 12:04:31,342 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [386294085] [2023-11-26 12:04:31,343 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:04:31,347 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-26 12:04:31,347 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:04:31,398 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-26 12:04:31,399 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 12:04:31,402 INFO L87 Difference]: Start difference. First operand has 63 states, 45 states have (on average 1.5777777777777777) internal successors, (71), 53 states have internal predecessors, (71), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 12:04:31,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:04:31,506 INFO L93 Difference]: Finished difference Result 124 states and 183 transitions. [2023-11-26 12:04:31,508 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-26 12:04:31,509 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-11-26 12:04:31,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:04:31,519 INFO L225 Difference]: With dead ends: 124 [2023-11-26 12:04:31,519 INFO L226 Difference]: Without dead ends: 58 [2023-11-26 12:04:31,524 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 12:04:31,529 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 72 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 12:04:31,530 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 72 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 12:04:31,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2023-11-26 12:04:31,577 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 58. [2023-11-26 12:04:31,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 42 states have (on average 1.4523809523809523) internal successors, (61), 49 states have internal predecessors, (61), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-26 12:04:31,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 80 transitions. [2023-11-26 12:04:31,583 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 80 transitions. Word has length 12 [2023-11-26 12:04:31,583 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:04:31,584 INFO L495 AbstractCegarLoop]: Abstraction has 58 states and 80 transitions. [2023-11-26 12:04:31,584 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 12:04:31,584 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 80 transitions. [2023-11-26 12:04:31,586 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-11-26 12:04:31,586 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:04:31,587 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:04:31,587 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-26 12:04:31,587 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:04:31,588 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:04:31,588 INFO L85 PathProgramCache]: Analyzing trace with hash -302822846, now seen corresponding path program 1 times [2023-11-26 12:04:31,589 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:04:31,589 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1862338805] [2023-11-26 12:04:31,589 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:04:31,589 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:04:31,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:31,695 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:04:31,695 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:04:31,696 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1862338805] [2023-11-26 12:04:31,696 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1862338805] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:04:31,696 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:04:31,696 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 12:04:31,697 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1234295704] [2023-11-26 12:04:31,697 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:04:31,698 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 12:04:31,699 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:04:31,700 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 12:04:31,700 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 12:04:31,700 INFO L87 Difference]: Start difference. First operand 58 states and 80 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 12:04:31,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:04:31,748 INFO L93 Difference]: Finished difference Result 89 states and 123 transitions. [2023-11-26 12:04:31,751 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 12:04:31,752 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-11-26 12:04:31,752 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:04:31,753 INFO L225 Difference]: With dead ends: 89 [2023-11-26 12:04:31,754 INFO L226 Difference]: Without dead ends: 50 [2023-11-26 12:04:31,755 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 12:04:31,756 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 11 mSDsluCounter, 44 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 12:04:31,757 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 102 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 12:04:31,758 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2023-11-26 12:04:31,772 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 50. [2023-11-26 12:04:31,773 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50 states, 37 states have (on average 1.4864864864864864) internal successors, (55), 44 states have internal predecessors, (55), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2023-11-26 12:04:31,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 69 transitions. [2023-11-26 12:04:31,774 INFO L78 Accepts]: Start accepts. Automaton has 50 states and 69 transitions. Word has length 13 [2023-11-26 12:04:31,775 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:04:31,775 INFO L495 AbstractCegarLoop]: Abstraction has 50 states and 69 transitions. [2023-11-26 12:04:31,775 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 12:04:31,775 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 69 transitions. [2023-11-26 12:04:31,776 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-26 12:04:31,776 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:04:31,776 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:04:31,776 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-26 12:04:31,777 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:04:31,777 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:04:31,777 INFO L85 PathProgramCache]: Analyzing trace with hash 1735559707, now seen corresponding path program 1 times [2023-11-26 12:04:31,778 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:04:31,778 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1277778478] [2023-11-26 12:04:31,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:04:31,778 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:04:31,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:31,883 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:04:31,883 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:04:31,883 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1277778478] [2023-11-26 12:04:31,884 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1277778478] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:04:31,884 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:04:31,884 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-26 12:04:31,885 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [963087475] [2023-11-26 12:04:31,885 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:04:31,885 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 12:04:31,886 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:04:31,886 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 12:04:31,887 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 12:04:31,887 INFO L87 Difference]: Start difference. First operand 50 states and 69 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 12:04:31,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:04:31,927 INFO L93 Difference]: Finished difference Result 98 states and 137 transitions. [2023-11-26 12:04:31,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 12:04:31,927 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-11-26 12:04:31,928 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:04:31,936 INFO L225 Difference]: With dead ends: 98 [2023-11-26 12:04:31,936 INFO L226 Difference]: Without dead ends: 50 [2023-11-26 12:04:31,937 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 12:04:31,939 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 57 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 56 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 12:04:31,940 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 56 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 12:04:31,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2023-11-26 12:04:31,956 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 50. [2023-11-26 12:04:31,961 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50 states, 37 states have (on average 1.4594594594594594) internal successors, (54), 44 states have internal predecessors, (54), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2023-11-26 12:04:31,963 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 68 transitions. [2023-11-26 12:04:31,967 INFO L78 Accepts]: Start accepts. Automaton has 50 states and 68 transitions. Word has length 16 [2023-11-26 12:04:31,967 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:04:31,968 INFO L495 AbstractCegarLoop]: Abstraction has 50 states and 68 transitions. [2023-11-26 12:04:31,968 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 12:04:31,969 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 68 transitions. [2023-11-26 12:04:31,970 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-26 12:04:31,971 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:04:31,972 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:04:31,972 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-26 12:04:31,973 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:04:31,973 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:04:31,977 INFO L85 PathProgramCache]: Analyzing trace with hash -381787079, now seen corresponding path program 1 times [2023-11-26 12:04:31,977 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:04:31,978 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [789848882] [2023-11-26 12:04:31,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:04:31,981 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:04:32,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:32,184 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:04:32,185 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:04:32,185 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [789848882] [2023-11-26 12:04:32,185 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [789848882] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:04:32,186 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:04:32,186 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-26 12:04:32,186 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [45198646] [2023-11-26 12:04:32,186 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:04:32,187 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 12:04:32,188 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:04:32,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 12:04:32,189 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 12:04:32,189 INFO L87 Difference]: Start difference. First operand 50 states and 68 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 12:04:32,284 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:04:32,284 INFO L93 Difference]: Finished difference Result 132 states and 183 transitions. [2023-11-26 12:04:32,285 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 12:04:32,285 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2023-11-26 12:04:32,286 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:04:32,288 INFO L225 Difference]: With dead ends: 132 [2023-11-26 12:04:32,288 INFO L226 Difference]: Without dead ends: 84 [2023-11-26 12:04:32,289 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 12:04:32,291 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 42 mSDsluCounter, 43 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 106 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 12:04:32,292 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 106 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 12:04:32,294 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2023-11-26 12:04:32,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 82. [2023-11-26 12:04:32,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 61 states have (on average 1.4098360655737705) internal successors, (86), 68 states have internal predecessors, (86), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (14), 10 states have call predecessors, (14), 10 states have call successors, (14) [2023-11-26 12:04:32,332 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 110 transitions. [2023-11-26 12:04:32,332 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 110 transitions. Word has length 21 [2023-11-26 12:04:32,333 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:04:32,335 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 110 transitions. [2023-11-26 12:04:32,335 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 12:04:32,336 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 110 transitions. [2023-11-26 12:04:32,342 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-26 12:04:32,344 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:04:32,344 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:04:32,344 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-26 12:04:32,345 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:04:32,347 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:04:32,347 INFO L85 PathProgramCache]: Analyzing trace with hash 1035493083, now seen corresponding path program 1 times [2023-11-26 12:04:32,348 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:04:32,349 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1490208068] [2023-11-26 12:04:32,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:04:32,350 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:04:32,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:32,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 12:04:32,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:32,525 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:04:32,526 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:04:32,526 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1490208068] [2023-11-26 12:04:32,526 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1490208068] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:04:32,527 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:04:32,527 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 12:04:32,527 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2046028697] [2023-11-26 12:04:32,528 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:04:32,528 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 12:04:32,528 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:04:32,530 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 12:04:32,530 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 12:04:32,530 INFO L87 Difference]: Start difference. First operand 82 states and 110 transitions. Second operand has 5 states, 5 states have (on average 5.0) internal successors, (25), 4 states have internal predecessors, (25), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 12:04:32,746 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:04:32,746 INFO L93 Difference]: Finished difference Result 180 states and 244 transitions. [2023-11-26 12:04:32,747 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-26 12:04:32,747 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.0) internal successors, (25), 4 states have internal predecessors, (25), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2023-11-26 12:04:32,748 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:04:32,754 INFO L225 Difference]: With dead ends: 180 [2023-11-26 12:04:32,754 INFO L226 Difference]: Without dead ends: 100 [2023-11-26 12:04:32,757 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-26 12:04:32,759 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 43 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 113 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 155 SdHoareTripleChecker+Invalid, 124 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 113 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 12:04:32,760 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 155 Invalid, 124 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 12:04:32,761 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2023-11-26 12:04:32,776 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 98. [2023-11-26 12:04:32,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 74 states have (on average 1.3918918918918919) internal successors, (103), 81 states have internal predecessors, (103), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (17), 11 states have call predecessors, (17), 10 states have call successors, (17) [2023-11-26 12:04:32,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 130 transitions. [2023-11-26 12:04:32,778 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 130 transitions. Word has length 28 [2023-11-26 12:04:32,778 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:04:32,779 INFO L495 AbstractCegarLoop]: Abstraction has 98 states and 130 transitions. [2023-11-26 12:04:32,779 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.0) internal successors, (25), 4 states have internal predecessors, (25), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 12:04:32,779 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 130 transitions. [2023-11-26 12:04:32,780 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-26 12:04:32,780 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:04:32,780 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:04:32,781 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-26 12:04:32,781 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:04:32,781 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:04:32,781 INFO L85 PathProgramCache]: Analyzing trace with hash 642466073, now seen corresponding path program 1 times [2023-11-26 12:04:32,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:04:32,782 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [661221045] [2023-11-26 12:04:32,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:04:32,782 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:04:32,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:32,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 12:04:32,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:32,911 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:04:32,911 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:04:32,911 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [661221045] [2023-11-26 12:04:32,912 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [661221045] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:04:32,912 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:04:32,912 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-26 12:04:32,912 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [191398179] [2023-11-26 12:04:32,912 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:04:32,913 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-26 12:04:32,913 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:04:32,913 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-26 12:04:32,914 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-26 12:04:32,914 INFO L87 Difference]: Start difference. First operand 98 states and 130 transitions. Second operand has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 5 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 12:04:33,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:04:33,117 INFO L93 Difference]: Finished difference Result 203 states and 277 transitions. [2023-11-26 12:04:33,117 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-26 12:04:33,117 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 5 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2023-11-26 12:04:33,119 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:04:33,120 INFO L225 Difference]: With dead ends: 203 [2023-11-26 12:04:33,120 INFO L226 Difference]: Without dead ends: 107 [2023-11-26 12:04:33,122 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2023-11-26 12:04:33,127 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 103 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 127 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 105 SdHoareTripleChecker+Valid, 149 SdHoareTripleChecker+Invalid, 148 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 127 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 12:04:33,129 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [105 Valid, 149 Invalid, 148 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 127 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 12:04:33,131 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 107 states. [2023-11-26 12:04:33,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 107 to 100. [2023-11-26 12:04:33,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 76 states have (on average 1.381578947368421) internal successors, (105), 83 states have internal predecessors, (105), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (17), 11 states have call predecessors, (17), 10 states have call successors, (17) [2023-11-26 12:04:33,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 132 transitions. [2023-11-26 12:04:33,157 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 132 transitions. Word has length 28 [2023-11-26 12:04:33,157 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:04:33,157 INFO L495 AbstractCegarLoop]: Abstraction has 100 states and 132 transitions. [2023-11-26 12:04:33,158 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 5 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 12:04:33,158 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 132 transitions. [2023-11-26 12:04:33,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-26 12:04:33,159 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:04:33,159 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:04:33,160 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-26 12:04:33,160 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:04:33,161 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:04:33,161 INFO L85 PathProgramCache]: Analyzing trace with hash 900631511, now seen corresponding path program 1 times [2023-11-26 12:04:33,162 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:04:33,162 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [240296739] [2023-11-26 12:04:33,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:04:33,162 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:04:33,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:33,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 12:04:33,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:33,288 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:04:33,289 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:04:33,289 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [240296739] [2023-11-26 12:04:33,289 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [240296739] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:04:33,289 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:04:33,290 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 12:04:33,290 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1198420659] [2023-11-26 12:04:33,290 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:04:33,291 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 12:04:33,291 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:04:33,292 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 12:04:33,292 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 12:04:33,292 INFO L87 Difference]: Start difference. First operand 100 states and 132 transitions. Second operand has 5 states, 5 states have (on average 5.0) internal successors, (25), 4 states have internal predecessors, (25), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 12:04:33,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:04:33,527 INFO L93 Difference]: Finished difference Result 299 states and 412 transitions. [2023-11-26 12:04:33,528 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-26 12:04:33,528 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.0) internal successors, (25), 4 states have internal predecessors, (25), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2023-11-26 12:04:33,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:04:33,534 INFO L225 Difference]: With dead ends: 299 [2023-11-26 12:04:33,534 INFO L226 Difference]: Without dead ends: 201 [2023-11-26 12:04:33,535 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-26 12:04:33,539 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 158 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 162 SdHoareTripleChecker+Valid, 170 SdHoareTripleChecker+Invalid, 187 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-26 12:04:33,540 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [162 Valid, 170 Invalid, 187 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-26 12:04:33,543 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2023-11-26 12:04:33,602 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 193. [2023-11-26 12:04:33,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 193 states, 145 states have (on average 1.3379310344827586) internal successors, (194), 156 states have internal predecessors, (194), 23 states have call successors, (23), 23 states have call predecessors, (23), 24 states have return successors, (42), 23 states have call predecessors, (42), 23 states have call successors, (42) [2023-11-26 12:04:33,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 193 states to 193 states and 259 transitions. [2023-11-26 12:04:33,607 INFO L78 Accepts]: Start accepts. Automaton has 193 states and 259 transitions. Word has length 28 [2023-11-26 12:04:33,607 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:04:33,607 INFO L495 AbstractCegarLoop]: Abstraction has 193 states and 259 transitions. [2023-11-26 12:04:33,608 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.0) internal successors, (25), 4 states have internal predecessors, (25), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 12:04:33,608 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 259 transitions. [2023-11-26 12:04:33,616 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-11-26 12:04:33,616 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:04:33,616 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:04:33,616 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-26 12:04:33,617 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:04:33,617 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:04:33,617 INFO L85 PathProgramCache]: Analyzing trace with hash -1120238990, now seen corresponding path program 1 times [2023-11-26 12:04:33,618 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:04:33,618 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1719550802] [2023-11-26 12:04:33,618 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:04:33,618 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:04:33,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:33,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 12:04:33,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:33,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 12:04:33,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:33,778 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:04:33,778 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:04:33,778 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1719550802] [2023-11-26 12:04:33,779 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1719550802] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:04:33,779 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:04:33,779 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-26 12:04:33,779 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1658040655] [2023-11-26 12:04:33,779 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:04:33,780 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-26 12:04:33,780 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:04:33,781 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-26 12:04:33,781 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-26 12:04:33,781 INFO L87 Difference]: Start difference. First operand 193 states and 259 transitions. Second operand has 6 states, 6 states have (on average 4.333333333333333) internal successors, (26), 5 states have internal predecessors, (26), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-26 12:04:34,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:04:34,096 INFO L93 Difference]: Finished difference Result 405 states and 551 transitions. [2023-11-26 12:04:34,097 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2023-11-26 12:04:34,097 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.333333333333333) internal successors, (26), 5 states have internal predecessors, (26), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 31 [2023-11-26 12:04:34,099 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:04:34,101 INFO L225 Difference]: With dead ends: 405 [2023-11-26 12:04:34,101 INFO L226 Difference]: Without dead ends: 214 [2023-11-26 12:04:34,102 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=52, Invalid=104, Unknown=0, NotChecked=0, Total=156 [2023-11-26 12:04:34,104 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 165 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 182 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 183 SdHoareTripleChecker+Invalid, 226 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 182 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-26 12:04:34,104 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 183 Invalid, 226 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 182 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-26 12:04:34,105 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 214 states. [2023-11-26 12:04:34,128 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 214 to 192. [2023-11-26 12:04:34,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 192 states, 143 states have (on average 1.3006993006993006) internal successors, (186), 155 states have internal predecessors, (186), 23 states have call successors, (23), 23 states have call predecessors, (23), 25 states have return successors, (42), 23 states have call predecessors, (42), 23 states have call successors, (42) [2023-11-26 12:04:34,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 192 states to 192 states and 251 transitions. [2023-11-26 12:04:34,131 INFO L78 Accepts]: Start accepts. Automaton has 192 states and 251 transitions. Word has length 31 [2023-11-26 12:04:34,131 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:04:34,131 INFO L495 AbstractCegarLoop]: Abstraction has 192 states and 251 transitions. [2023-11-26 12:04:34,131 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.333333333333333) internal successors, (26), 5 states have internal predecessors, (26), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-26 12:04:34,132 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 251 transitions. [2023-11-26 12:04:34,133 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2023-11-26 12:04:34,133 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:04:34,133 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:04:34,133 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-26 12:04:34,134 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:04:34,134 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:04:34,134 INFO L85 PathProgramCache]: Analyzing trace with hash -884436628, now seen corresponding path program 1 times [2023-11-26 12:04:34,134 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:04:34,134 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2124421397] [2023-11-26 12:04:34,135 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:04:34,135 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:04:34,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:34,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 12:04:34,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:34,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 12:04:34,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:34,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-26 12:04:34,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:34,259 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 3 proven. 1 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-11-26 12:04:34,260 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:04:34,260 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2124421397] [2023-11-26 12:04:34,260 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2124421397] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-26 12:04:34,260 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1685527782] [2023-11-26 12:04:34,260 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:04:34,260 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 12:04:34,260 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 12:04:34,268 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-26 12:04:34,292 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-26 12:04:34,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:34,368 INFO L262 TraceCheckSpWp]: Trace formula consists of 234 conjuncts, 7 conjunts are in the unsatisfiable core [2023-11-26 12:04:34,374 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-26 12:04:34,490 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:04:34,491 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-26 12:04:34,657 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:04:34,657 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1685527782] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-26 12:04:34,657 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-26 12:04:34,657 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 5] total 10 [2023-11-26 12:04:34,658 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1890502050] [2023-11-26 12:04:34,658 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-26 12:04:34,658 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-11-26 12:04:34,659 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:04:34,659 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-11-26 12:04:34,659 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2023-11-26 12:04:34,660 INFO L87 Difference]: Start difference. First operand 192 states and 251 transitions. Second operand has 10 states, 10 states have (on average 7.1) internal successors, (71), 7 states have internal predecessors, (71), 2 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2023-11-26 12:04:35,693 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:04:35,694 INFO L93 Difference]: Finished difference Result 504 states and 712 transitions. [2023-11-26 12:04:35,694 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2023-11-26 12:04:35,694 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 7.1) internal successors, (71), 7 states have internal predecessors, (71), 2 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 53 [2023-11-26 12:04:35,695 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:04:35,698 INFO L225 Difference]: With dead ends: 504 [2023-11-26 12:04:35,698 INFO L226 Difference]: Without dead ends: 352 [2023-11-26 12:04:35,700 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 115 SyntacticMatches, 4 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 391 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=283, Invalid=1123, Unknown=0, NotChecked=0, Total=1406 [2023-11-26 12:04:35,701 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 314 mSDsluCounter, 321 mSDsCounter, 0 mSdLazyCounter, 634 mSolverCounterSat, 105 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 319 SdHoareTripleChecker+Valid, 376 SdHoareTripleChecker+Invalid, 739 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 105 IncrementalHoareTripleChecker+Valid, 634 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-11-26 12:04:35,702 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [319 Valid, 376 Invalid, 739 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [105 Valid, 634 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-11-26 12:04:35,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 352 states. [2023-11-26 12:04:35,737 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 352 to 304. [2023-11-26 12:04:35,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 227 states have (on average 1.2863436123348018) internal successors, (292), 248 states have internal predecessors, (292), 36 states have call successors, (36), 33 states have call predecessors, (36), 40 states have return successors, (82), 36 states have call predecessors, (82), 36 states have call successors, (82) [2023-11-26 12:04:35,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 410 transitions. [2023-11-26 12:04:35,741 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 410 transitions. Word has length 53 [2023-11-26 12:04:35,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:04:35,742 INFO L495 AbstractCegarLoop]: Abstraction has 304 states and 410 transitions. [2023-11-26 12:04:35,742 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 7.1) internal successors, (71), 7 states have internal predecessors, (71), 2 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2023-11-26 12:04:35,742 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 410 transitions. [2023-11-26 12:04:35,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2023-11-26 12:04:35,744 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:04:35,745 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:04:35,754 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-26 12:04:35,952 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 12:04:35,953 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:04:35,953 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:04:35,953 INFO L85 PathProgramCache]: Analyzing trace with hash 1200385405, now seen corresponding path program 1 times [2023-11-26 12:04:35,953 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:04:35,954 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1091888803] [2023-11-26 12:04:35,954 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:04:35,954 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:04:35,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:36,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 12:04:36,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:36,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 12:04:36,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:36,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-26 12:04:36,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:36,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-26 12:04:36,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:36,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-26 12:04:36,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:36,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 12:04:36,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:36,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-26 12:04:36,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:36,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 12:04:36,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:36,281 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 44 proven. 9 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-26 12:04:36,281 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:04:36,281 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1091888803] [2023-11-26 12:04:36,281 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1091888803] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-26 12:04:36,281 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [704436487] [2023-11-26 12:04:36,282 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:04:36,282 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 12:04:36,282 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 12:04:36,289 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-26 12:04:36,312 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-26 12:04:36,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:36,402 INFO L262 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-26 12:04:36,407 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-26 12:04:36,577 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 58 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 12:04:36,577 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-26 12:04:36,802 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 45 proven. 9 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-11-26 12:04:36,802 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [704436487] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-26 12:04:36,802 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-26 12:04:36,803 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 8, 7] total 16 [2023-11-26 12:04:36,803 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [71391030] [2023-11-26 12:04:36,803 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-26 12:04:36,804 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2023-11-26 12:04:36,804 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:04:36,805 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2023-11-26 12:04:36,806 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=63, Invalid=177, Unknown=0, NotChecked=0, Total=240 [2023-11-26 12:04:36,806 INFO L87 Difference]: Start difference. First operand 304 states and 410 transitions. Second operand has 16 states, 16 states have (on average 5.9375) internal successors, (95), 14 states have internal predecessors, (95), 6 states have call successors, (19), 8 states have call predecessors, (19), 6 states have return successors, (12), 6 states have call predecessors, (12), 6 states have call successors, (12) [2023-11-26 12:04:37,764 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:04:37,765 INFO L93 Difference]: Finished difference Result 826 states and 1192 transitions. [2023-11-26 12:04:37,765 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-11-26 12:04:37,766 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 5.9375) internal successors, (95), 14 states have internal predecessors, (95), 6 states have call successors, (19), 8 states have call predecessors, (19), 6 states have return successors, (12), 6 states have call predecessors, (12), 6 states have call successors, (12) Word has length 90 [2023-11-26 12:04:37,769 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:04:37,774 INFO L225 Difference]: With dead ends: 826 [2023-11-26 12:04:37,774 INFO L226 Difference]: Without dead ends: 561 [2023-11-26 12:04:37,776 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 222 GetRequests, 189 SyntacticMatches, 4 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 179 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=255, Invalid=675, Unknown=0, NotChecked=0, Total=930 [2023-11-26 12:04:37,778 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 310 mSDsluCounter, 395 mSDsCounter, 0 mSdLazyCounter, 728 mSolverCounterSat, 99 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 314 SdHoareTripleChecker+Valid, 478 SdHoareTripleChecker+Invalid, 827 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 99 IncrementalHoareTripleChecker+Valid, 728 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-26 12:04:37,779 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [314 Valid, 478 Invalid, 827 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [99 Valid, 728 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-26 12:04:37,781 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 561 states. [2023-11-26 12:04:37,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 561 to 481. [2023-11-26 12:04:37,846 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 481 states, 359 states have (on average 1.2785515320334262) internal successors, (459), 388 states have internal predecessors, (459), 59 states have call successors, (59), 55 states have call predecessors, (59), 62 states have return successors, (122), 57 states have call predecessors, (122), 59 states have call successors, (122) [2023-11-26 12:04:37,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 481 states to 481 states and 640 transitions. [2023-11-26 12:04:37,852 INFO L78 Accepts]: Start accepts. Automaton has 481 states and 640 transitions. Word has length 90 [2023-11-26 12:04:37,853 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:04:37,854 INFO L495 AbstractCegarLoop]: Abstraction has 481 states and 640 transitions. [2023-11-26 12:04:37,854 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 5.9375) internal successors, (95), 14 states have internal predecessors, (95), 6 states have call successors, (19), 8 states have call predecessors, (19), 6 states have return successors, (12), 6 states have call predecessors, (12), 6 states have call successors, (12) [2023-11-26 12:04:37,854 INFO L276 IsEmpty]: Start isEmpty. Operand 481 states and 640 transitions. [2023-11-26 12:04:37,857 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2023-11-26 12:04:37,857 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 12:04:37,859 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:04:37,866 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-26 12:04:38,066 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-26 12:04:38,066 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 12:04:38,067 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 12:04:38,067 INFO L85 PathProgramCache]: Analyzing trace with hash 2093871743, now seen corresponding path program 1 times [2023-11-26 12:04:38,068 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 12:04:38,068 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [969721500] [2023-11-26 12:04:38,068 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 12:04:38,068 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 12:04:38,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:38,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 12:04:38,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:38,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 12:04:38,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:38,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-26 12:04:38,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:38,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-26 12:04:38,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:38,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-26 12:04:38,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:38,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 12:04:38,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:38,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-26 12:04:38,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:38,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 12:04:38,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 12:04:38,250 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2023-11-26 12:04:38,251 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 12:04:38,251 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [969721500] [2023-11-26 12:04:38,251 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [969721500] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 12:04:38,251 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 12:04:38,251 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-26 12:04:38,252 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1899528717] [2023-11-26 12:04:38,252 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 12:04:38,252 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-26 12:04:38,253 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 12:04:38,253 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-26 12:04:38,253 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-26 12:04:38,254 INFO L87 Difference]: Start difference. First operand 481 states and 640 transitions. Second operand has 7 states, 7 states have (on average 8.285714285714286) internal successors, (58), 4 states have internal predecessors, (58), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-26 12:04:38,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 12:04:38,436 INFO L93 Difference]: Finished difference Result 647 states and 842 transitions. [2023-11-26 12:04:38,437 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-26 12:04:38,438 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 8.285714285714286) internal successors, (58), 4 states have internal predecessors, (58), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 90 [2023-11-26 12:04:38,438 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 12:04:38,438 INFO L225 Difference]: With dead ends: 647 [2023-11-26 12:04:38,438 INFO L226 Difference]: Without dead ends: 0 [2023-11-26 12:04:38,441 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-26 12:04:38,441 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 72 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 170 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 109 SdHoareTripleChecker+Invalid, 190 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 170 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 12:04:38,442 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 109 Invalid, 190 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 170 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 12:04:38,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-26 12:04:38,443 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-26 12:04:38,443 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 12:04:38,443 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-26 12:04:38,443 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 90 [2023-11-26 12:04:38,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 12:04:38,444 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-26 12:04:38,444 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 8.285714285714286) internal successors, (58), 4 states have internal predecessors, (58), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-26 12:04:38,444 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-26 12:04:38,444 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-26 12:04:38,447 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-26 12:04:38,447 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2023-11-26 12:04:38,450 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-26 12:04:39,280 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 303 309) no Hoare annotation was computed. [2023-11-26 12:04:39,280 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 303 309) the Hoare annotation is: true [2023-11-26 12:04:39,280 INFO L899 garLoopResultBuilder]: For program point L97-1(lines 93 104) no Hoare annotation was computed. [2023-11-26 12:04:39,280 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 93 104) the Hoare annotation is: true [2023-11-26 12:04:39,280 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 93 104) no Hoare annotation was computed. [2023-11-26 12:04:39,280 INFO L899 garLoopResultBuilder]: For program point L283-1(lines 282 301) no Hoare annotation was computed. [2023-11-26 12:04:39,281 INFO L899 garLoopResultBuilder]: For program point L345(lines 345 353) no Hoare annotation was computed. [2023-11-26 12:04:39,281 INFO L899 garLoopResultBuilder]: For program point L341(lines 341 358) no Hoare annotation was computed. [2023-11-26 12:04:39,281 INFO L899 garLoopResultBuilder]: For program point L73(lines 73 77) no Hoare annotation was computed. [2023-11-26 12:04:39,281 INFO L899 garLoopResultBuilder]: For program point L585(lines 585 591) no Hoare annotation was computed. [2023-11-26 12:04:39,281 INFO L899 garLoopResultBuilder]: For program point L73-2(lines 69 80) no Hoare annotation was computed. [2023-11-26 12:04:39,281 INFO L899 garLoopResultBuilder]: For program point L581(lines 581 594) no Hoare annotation was computed. [2023-11-26 12:04:39,281 INFO L899 garLoopResultBuilder]: For program point L581-1(lines 573 597) no Hoare annotation was computed. [2023-11-26 12:04:39,281 INFO L899 garLoopResultBuilder]: For program point L462(lines 462 466) no Hoare annotation was computed. [2023-11-26 12:04:39,281 INFO L899 garLoopResultBuilder]: For program point L462-2(lines 462 466) no Hoare annotation was computed. [2023-11-26 12:04:39,282 INFO L895 garLoopResultBuilder]: At program point L351(line 351) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or (not (= |old(~pumpRunning~0)| 0)) (< |old(~waterLevel~0)| 1) .cse0))) [2023-11-26 12:04:39,282 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2023-11-26 12:04:39,282 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 279 302) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1)) (or (not (= |old(~pumpRunning~0)| 0)) (< |old(~waterLevel~0)| 1) (and (= ~pumpRunning~0 0) .cse1) .cse0))) [2023-11-26 12:04:39,282 INFO L895 garLoopResultBuilder]: At program point L356(line 356) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) .cse1) (or (not .cse1) (< |old(~waterLevel~0)| 1) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0))) [2023-11-26 12:04:39,282 INFO L899 garLoopResultBuilder]: For program point L356-1(lines 337 361) no Hoare annotation was computed. [2023-11-26 12:04:39,283 INFO L899 garLoopResultBuilder]: For program point L290-1(lines 290 296) no Hoare annotation was computed. [2023-11-26 12:04:39,283 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 279 302) no Hoare annotation was computed. [2023-11-26 12:04:39,283 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2023-11-26 12:04:39,283 INFO L899 garLoopResultBuilder]: For program point L193(line 193) no Hoare annotation was computed. [2023-11-26 12:04:39,283 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 172 201) no Hoare annotation was computed. [2023-11-26 12:04:39,283 INFO L899 garLoopResultBuilder]: For program point L186(lines 186 190) no Hoare annotation was computed. [2023-11-26 12:04:39,283 INFO L902 garLoopResultBuilder]: At program point L186-1(lines 186 190) the Hoare annotation is: true [2023-11-26 12:04:39,283 INFO L902 garLoopResultBuilder]: At program point L182-2(lines 182 196) the Hoare annotation is: true [2023-11-26 12:04:39,283 INFO L902 garLoopResultBuilder]: At program point L178(line 178) the Hoare annotation is: true [2023-11-26 12:04:39,284 INFO L899 garLoopResultBuilder]: For program point L178-1(line 178) no Hoare annotation was computed. [2023-11-26 12:04:39,284 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 172 201) the Hoare annotation is: true [2023-11-26 12:04:39,284 INFO L899 garLoopResultBuilder]: For program point L197(lines 172 201) no Hoare annotation was computed. [2023-11-26 12:04:39,284 INFO L899 garLoopResultBuilder]: For program point L258-2(lines 258 265) no Hoare annotation was computed. [2023-11-26 12:04:39,284 INFO L899 garLoopResultBuilder]: For program point L519(lines 519 523) no Hoare annotation was computed. [2023-11-26 12:04:39,284 INFO L895 garLoopResultBuilder]: At program point L519-2(lines 513 524) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2023-11-26 12:04:39,284 INFO L899 garLoopResultBuilder]: For program point L503(lines 503 509) no Hoare annotation was computed. [2023-11-26 12:04:39,284 INFO L899 garLoopResultBuilder]: For program point L503-1(lines 503 509) no Hoare annotation was computed. [2023-11-26 12:04:39,284 INFO L899 garLoopResultBuilder]: For program point L532(lines 473 536) no Hoare annotation was computed. [2023-11-26 12:04:39,285 INFO L895 garLoopResultBuilder]: At program point L495(line 495) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2023-11-26 12:04:39,285 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-26 12:04:39,285 INFO L895 garLoopResultBuilder]: At program point L529(lines 482 530) the Hoare annotation is: false [2023-11-26 12:04:39,285 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-26 12:04:39,285 INFO L899 garLoopResultBuilder]: For program point L484(lines 483 528) no Hoare annotation was computed. [2023-11-26 12:04:39,285 INFO L899 garLoopResultBuilder]: For program point L513(lines 513 524) no Hoare annotation was computed. [2023-11-26 12:04:39,285 INFO L895 garLoopResultBuilder]: At program point L505(line 505) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2023-11-26 12:04:39,285 INFO L895 garLoopResultBuilder]: At program point L526(lines 483 528) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2023-11-26 12:04:39,285 INFO L899 garLoopResultBuilder]: For program point L493(lines 493 499) no Hoare annotation was computed. [2023-11-26 12:04:39,286 INFO L899 garLoopResultBuilder]: For program point L493-1(lines 493 499) no Hoare annotation was computed. [2023-11-26 12:04:39,286 INFO L899 garLoopResultBuilder]: For program point L258(lines 258 265) no Hoare annotation was computed. [2023-11-26 12:04:39,286 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 311 335) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (= ~waterLevel~0 ~systemActive~0))) (or .cse0 .cse1 .cse2 (< ~waterLevel~0 2)))) [2023-11-26 12:04:39,286 INFO L895 garLoopResultBuilder]: At program point L325(line 325) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)))) (and (or .cse0 .cse1 (not (= ~waterLevel~0 ~systemActive~0)) .cse2) (or .cse0 .cse1 .cse2 (< ~waterLevel~0 2)))) [2023-11-26 12:04:39,286 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 146 159) no Hoare annotation was computed. [2023-11-26 12:04:39,286 INFO L899 garLoopResultBuilder]: For program point L319(lines 319 327) no Hoare annotation was computed. [2023-11-26 12:04:39,286 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 311 335) no Hoare annotation was computed. [2023-11-26 12:04:39,286 INFO L899 garLoopResultBuilder]: For program point L315(lines 315 332) no Hoare annotation was computed. [2023-11-26 12:04:39,287 INFO L899 garLoopResultBuilder]: For program point L443(lines 443 447) no Hoare annotation was computed. [2023-11-26 12:04:39,287 INFO L899 garLoopResultBuilder]: For program point L443-2(lines 443 447) no Hoare annotation was computed. [2023-11-26 12:04:39,287 INFO L899 garLoopResultBuilder]: For program point L150(lines 150 156) no Hoare annotation was computed. [2023-11-26 12:04:39,287 INFO L895 garLoopResultBuilder]: At program point L330(line 330) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (not (= 1 ~systemActive~0))) [2023-11-26 12:04:39,287 INFO L899 garLoopResultBuilder]: For program point L330-1(lines 311 335) no Hoare annotation was computed. [2023-11-26 12:04:39,287 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 81 92) no Hoare annotation was computed. [2023-11-26 12:04:39,287 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 81 92) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (< |old(~waterLevel~0)| 2) .cse1) (or (< |old(~waterLevel~0)| 1) (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2023-11-26 12:04:39,287 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 81 92) no Hoare annotation was computed. [2023-11-26 12:04:39,296 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 12:04:39,298 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-26 12:04:39,310 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 26.11 12:04:39 BoogieIcfgContainer [2023-11-26 12:04:39,310 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-26 12:04:39,311 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-26 12:04:39,311 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-26 12:04:39,311 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-26 12:04:39,311 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 12:04:31" (3/4) ... [2023-11-26 12:04:39,314 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-26 12:04:39,317 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-26 12:04:39,318 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-26 12:04:39,318 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-26 12:04:39,318 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-26 12:04:39,318 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 12:04:39,318 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-26 12:04:39,335 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 32 nodes and edges [2023-11-26 12:04:39,336 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-26 12:04:39,336 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-26 12:04:39,337 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 12:04:39,338 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 12:04:39,477 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/witness.graphml [2023-11-26 12:04:39,478 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/witness.yml [2023-11-26 12:04:39,478 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-26 12:04:39,479 INFO L158 Benchmark]: Toolchain (without parser) took 9784.25ms. Allocated memory was 163.6MB in the beginning and 237.0MB in the end (delta: 73.4MB). Free memory was 116.6MB in the beginning and 138.8MB in the end (delta: -22.2MB). Peak memory consumption was 54.2MB. Max. memory is 16.1GB. [2023-11-26 12:04:39,479 INFO L158 Benchmark]: CDTParser took 0.27ms. Allocated memory is still 163.6MB. Free memory is still 138.1MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-26 12:04:39,480 INFO L158 Benchmark]: CACSL2BoogieTranslator took 526.60ms. Allocated memory is still 163.6MB. Free memory was 116.4MB in the beginning and 97.0MB in the end (delta: 19.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-26 12:04:39,480 INFO L158 Benchmark]: Boogie Procedure Inliner took 56.57ms. Allocated memory is still 163.6MB. Free memory was 97.0MB in the beginning and 94.7MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-26 12:04:39,480 INFO L158 Benchmark]: Boogie Preprocessor took 52.75ms. Allocated memory is still 163.6MB. Free memory was 94.7MB in the beginning and 92.3MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-26 12:04:39,481 INFO L158 Benchmark]: RCFGBuilder took 674.10ms. Allocated memory is still 163.6MB. Free memory was 92.3MB in the beginning and 123.3MB in the end (delta: -31.0MB). Peak memory consumption was 16.2MB. Max. memory is 16.1GB. [2023-11-26 12:04:39,482 INFO L158 Benchmark]: TraceAbstraction took 8297.94ms. Allocated memory was 163.6MB in the beginning and 237.0MB in the end (delta: 73.4MB). Free memory was 122.8MB in the beginning and 146.1MB in the end (delta: -23.3MB). Peak memory consumption was 105.1MB. Max. memory is 16.1GB. [2023-11-26 12:04:39,482 INFO L158 Benchmark]: Witness Printer took 167.91ms. Allocated memory is still 237.0MB. Free memory was 146.1MB in the beginning and 138.8MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-26 12:04:39,486 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27ms. Allocated memory is still 163.6MB. Free memory is still 138.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 526.60ms. Allocated memory is still 163.6MB. Free memory was 116.4MB in the beginning and 97.0MB in the end (delta: 19.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 56.57ms. Allocated memory is still 163.6MB. Free memory was 97.0MB in the beginning and 94.7MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 52.75ms. Allocated memory is still 163.6MB. Free memory was 94.7MB in the beginning and 92.3MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 674.10ms. Allocated memory is still 163.6MB. Free memory was 92.3MB in the beginning and 123.3MB in the end (delta: -31.0MB). Peak memory consumption was 16.2MB. Max. memory is 16.1GB. * TraceAbstraction took 8297.94ms. Allocated memory was 163.6MB in the beginning and 237.0MB in the end (delta: 73.4MB). Free memory was 122.8MB in the beginning and 146.1MB in the end (delta: -23.3MB). Peak memory consumption was 105.1MB. Max. memory is 16.1GB. * Witness Printer took 167.91ms. Allocated memory is still 237.0MB. Free memory was 146.1MB in the beginning and 138.8MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [58] - GenericResultAtLocation [Line: 169]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [169] - GenericResultAtLocation [Line: 271]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [271] - GenericResultAtLocation [Line: 472]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [472] - GenericResultAtLocation [Line: 537]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [537] - GenericResultAtLocation [Line: 572]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [572] - GenericResultAtLocation [Line: 598]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [598] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 63 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.2s, OverallIterations: 11, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1299 SdHoareTripleChecker+Valid, 2.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1275 mSDsluCounter, 1956 SdHoareTripleChecker+Invalid, 1.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1329 mSDsCounter, 346 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2173 IncrementalHoareTripleChecker+Invalid, 2519 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 346 mSolverCounterUnsat, 627 mSDtfsCounter, 2173 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 461 GetRequests, 349 SyntacticMatches, 8 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 598 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=481occurred in iteration=10, InterpolantAutomatonStates: 108, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 169 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 18 LocationsWithAnnotation, 400 PreInvPairs, 430 NumberOfFragments, 301 HoareAnnotationTreeSize, 400 FomulaSimplifications, 1596 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 18 FomulaSimplificationsInter, 1620 FormulaSimplificationTreeSizeReductionInter, 0.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 553 NumberOfCodeBlocks, 553 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 681 ConstructedInterpolants, 0 QuantifiedInterpolants, 1337 SizeOfPredicates, 5 NumberOfNonLiveVariables, 551 ConjunctsInSsa, 16 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 270/302 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 482]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 483]: Loop Invariant Derived loop invariant: ((((2 <= waterLevel) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= waterLevel))) RESULT: Ultimate proved your program to be correct! [2023-11-26 12:04:39,521 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_89d629d4-c1e5-49dd-9f46-c5e8f53c6890/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE