./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5a0a9a5f1521df25ea0ff390c35c7186e45318cd30c225704d83030e156744fb --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-26 11:54:56,166 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-26 11:54:56,251 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-26 11:54:56,256 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-26 11:54:56,257 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-26 11:54:56,285 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-26 11:54:56,286 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-26 11:54:56,286 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-26 11:54:56,287 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-26 11:54:56,288 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-26 11:54:56,289 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-26 11:54:56,289 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-26 11:54:56,290 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-26 11:54:56,291 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-26 11:54:56,291 INFO L153 SettingsManager]: * Use SBE=true [2023-11-26 11:54:56,292 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-26 11:54:56,292 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-26 11:54:56,293 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-26 11:54:56,294 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-26 11:54:56,294 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-26 11:54:56,295 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-26 11:54:56,296 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-26 11:54:56,296 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-26 11:54:56,297 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-26 11:54:56,297 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-26 11:54:56,298 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-26 11:54:56,298 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-26 11:54:56,299 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-26 11:54:56,299 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-26 11:54:56,300 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-26 11:54:56,300 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-26 11:54:56,301 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 11:54:56,301 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-26 11:54:56,302 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-26 11:54:56,302 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-26 11:54:56,303 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-26 11:54:56,303 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-26 11:54:56,304 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-26 11:54:56,304 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-26 11:54:56,305 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-26 11:54:56,305 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-26 11:54:56,306 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-26 11:54:56,306 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5a0a9a5f1521df25ea0ff390c35c7186e45318cd30c225704d83030e156744fb [2023-11-26 11:54:56,626 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-26 11:54:56,655 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-26 11:54:56,658 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-26 11:54:56,659 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-26 11:54:56,660 INFO L274 PluginConnector]: CDTParser initialized [2023-11-26 11:54:56,661 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/../../sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c [2023-11-26 11:54:59,851 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-26 11:55:00,140 INFO L384 CDTParser]: Found 1 translation units. [2023-11-26 11:55:00,141 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c [2023-11-26 11:55:00,167 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/data/65fd220c5/e560af24d3f549f7aee2be534814d7b5/FLAG0235e1f58 [2023-11-26 11:55:00,183 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/data/65fd220c5/e560af24d3f549f7aee2be534814d7b5 [2023-11-26 11:55:00,186 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-26 11:55:00,188 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-26 11:55:00,189 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-26 11:55:00,190 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-26 11:55:00,195 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-26 11:55:00,195 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 11:55:00" (1/1) ... [2023-11-26 11:55:00,196 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@22ac7eab and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00, skipping insertion in model container [2023-11-26 11:55:00,197 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 11:55:00" (1/1) ... [2023-11-26 11:55:00,249 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-26 11:55:00,509 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c[3645,3658] [2023-11-26 11:55:00,642 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 11:55:00,657 INFO L202 MainTranslator]: Completed pre-run [2023-11-26 11:55:00,666 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-26 11:55:00,667 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [160] [2023-11-26 11:55:00,667 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [188] [2023-11-26 11:55:00,667 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [197] [2023-11-26 11:55:00,668 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [267] [2023-11-26 11:55:00,668 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [500] [2023-11-26 11:55:00,668 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [866] [2023-11-26 11:55:00,668 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [904] [2023-11-26 11:55:00,679 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c[3645,3658] [2023-11-26 11:55:00,733 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 11:55:00,754 INFO L206 MainTranslator]: Completed translation [2023-11-26 11:55:00,755 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00 WrapperNode [2023-11-26 11:55:00,755 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-26 11:55:00,756 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-26 11:55:00,756 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-26 11:55:00,756 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-26 11:55:00,764 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00" (1/1) ... [2023-11-26 11:55:00,779 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00" (1/1) ... [2023-11-26 11:55:00,809 INFO L138 Inliner]: procedures = 57, calls = 102, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 218 [2023-11-26 11:55:00,810 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-26 11:55:00,811 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-26 11:55:00,811 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-26 11:55:00,811 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-26 11:55:00,822 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00" (1/1) ... [2023-11-26 11:55:00,823 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00" (1/1) ... [2023-11-26 11:55:00,826 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00" (1/1) ... [2023-11-26 11:55:00,842 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-26 11:55:00,843 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00" (1/1) ... [2023-11-26 11:55:00,843 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00" (1/1) ... [2023-11-26 11:55:00,853 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00" (1/1) ... [2023-11-26 11:55:00,869 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00" (1/1) ... [2023-11-26 11:55:00,871 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00" (1/1) ... [2023-11-26 11:55:00,873 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00" (1/1) ... [2023-11-26 11:55:00,876 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-26 11:55:00,885 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-26 11:55:00,885 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-26 11:55:00,886 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-26 11:55:00,887 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00" (1/1) ... [2023-11-26 11:55:00,894 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 11:55:00,907 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 11:55:00,923 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-26 11:55:00,941 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-26 11:55:00,977 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-26 11:55:00,977 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-26 11:55:00,978 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-26 11:55:00,978 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-26 11:55:00,978 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-26 11:55:00,978 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-26 11:55:00,979 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-26 11:55:00,979 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-26 11:55:00,979 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-26 11:55:00,979 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 11:55:00,980 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 11:55:00,980 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-26 11:55:00,980 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-26 11:55:00,981 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-26 11:55:00,981 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-26 11:55:00,981 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-26 11:55:00,981 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-26 11:55:00,982 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-26 11:55:00,983 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-26 11:55:00,983 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-26 11:55:01,115 INFO L241 CfgBuilder]: Building ICFG [2023-11-26 11:55:01,120 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-26 11:55:01,520 INFO L282 CfgBuilder]: Performing block encoding [2023-11-26 11:55:01,594 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-26 11:55:01,595 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-26 11:55:01,595 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:55:01 BoogieIcfgContainer [2023-11-26 11:55:01,595 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-26 11:55:01,599 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-26 11:55:01,599 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-26 11:55:01,602 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-26 11:55:01,603 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 26.11 11:55:00" (1/3) ... [2023-11-26 11:55:01,603 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@c7b84be and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 11:55:01, skipping insertion in model container [2023-11-26 11:55:01,604 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:55:00" (2/3) ... [2023-11-26 11:55:01,604 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@c7b84be and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 11:55:01, skipping insertion in model container [2023-11-26 11:55:01,604 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:55:01" (3/3) ... [2023-11-26 11:55:01,605 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product59.cil.c [2023-11-26 11:55:01,626 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-26 11:55:01,627 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-26 11:55:01,678 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-26 11:55:01,685 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1c2b07e7, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-26 11:55:01,685 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-26 11:55:01,690 INFO L276 IsEmpty]: Start isEmpty. Operand has 77 states, 53 states have (on average 1.528301886792453) internal successors, (81), 62 states have internal predecessors, (81), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-26 11:55:01,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-26 11:55:01,701 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:55:01,701 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:55:01,702 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:55:01,708 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:55:01,708 INFO L85 PathProgramCache]: Analyzing trace with hash -1169849773, now seen corresponding path program 1 times [2023-11-26 11:55:01,720 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:55:01,720 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [42844607] [2023-11-26 11:55:01,720 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:01,721 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:55:01,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:01,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-26 11:55:01,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:01,982 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:55:01,983 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:55:01,983 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [42844607] [2023-11-26 11:55:01,984 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [42844607] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:55:01,984 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:55:01,985 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-26 11:55:01,989 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [917501724] [2023-11-26 11:55:01,990 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:55:01,996 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-26 11:55:01,997 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:55:02,039 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-26 11:55:02,040 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 11:55:02,042 INFO L87 Difference]: Start difference. First operand has 77 states, 53 states have (on average 1.528301886792453) internal successors, (81), 62 states have internal predecessors, (81), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:55:02,125 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:55:02,125 INFO L93 Difference]: Finished difference Result 152 states and 219 transitions. [2023-11-26 11:55:02,126 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-26 11:55:02,128 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 16 [2023-11-26 11:55:02,128 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:55:02,143 INFO L225 Difference]: With dead ends: 152 [2023-11-26 11:55:02,143 INFO L226 Difference]: Without dead ends: 72 [2023-11-26 11:55:02,149 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 11:55:02,155 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 88 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:55:02,158 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 88 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:55:02,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2023-11-26 11:55:02,226 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 72. [2023-11-26 11:55:02,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 50 states have (on average 1.42) internal successors, (71), 58 states have internal predecessors, (71), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-26 11:55:02,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 98 transitions. [2023-11-26 11:55:02,241 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 98 transitions. Word has length 16 [2023-11-26 11:55:02,241 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:55:02,241 INFO L495 AbstractCegarLoop]: Abstraction has 72 states and 98 transitions. [2023-11-26 11:55:02,242 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:55:02,242 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 98 transitions. [2023-11-26 11:55:02,247 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-26 11:55:02,247 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:55:02,247 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:55:02,248 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-26 11:55:02,248 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:55:02,249 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:55:02,249 INFO L85 PathProgramCache]: Analyzing trace with hash -817813740, now seen corresponding path program 1 times [2023-11-26 11:55:02,250 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:55:02,250 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1913551961] [2023-11-26 11:55:02,251 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:02,251 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:55:02,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:02,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-26 11:55:02,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:02,377 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:55:02,378 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:55:02,378 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1913551961] [2023-11-26 11:55:02,378 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1913551961] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:55:02,379 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:55:02,379 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 11:55:02,379 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1351058737] [2023-11-26 11:55:02,379 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:55:02,381 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 11:55:02,381 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:55:02,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 11:55:02,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:55:02,383 INFO L87 Difference]: Start difference. First operand 72 states and 98 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:55:02,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:55:02,430 INFO L93 Difference]: Finished difference Result 114 states and 154 transitions. [2023-11-26 11:55:02,431 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 11:55:02,431 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-26 11:55:02,432 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:55:02,433 INFO L225 Difference]: With dead ends: 114 [2023-11-26 11:55:02,433 INFO L226 Difference]: Without dead ends: 64 [2023-11-26 11:55:02,434 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:55:02,436 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 14 mSDsluCounter, 57 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:55:02,437 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 131 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:55:02,438 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2023-11-26 11:55:02,451 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2023-11-26 11:55:02,451 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 45 states have (on average 1.4444444444444444) internal successors, (65), 53 states have internal predecessors, (65), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-26 11:55:02,452 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 87 transitions. [2023-11-26 11:55:02,453 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 87 transitions. Word has length 17 [2023-11-26 11:55:02,453 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:55:02,453 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 87 transitions. [2023-11-26 11:55:02,453 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:55:02,454 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 87 transitions. [2023-11-26 11:55:02,455 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-26 11:55:02,455 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:55:02,455 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:55:02,455 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-26 11:55:02,456 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:55:02,458 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:55:02,459 INFO L85 PathProgramCache]: Analyzing trace with hash -1026887263, now seen corresponding path program 1 times [2023-11-26 11:55:02,462 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:55:02,463 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1727646880] [2023-11-26 11:55:02,464 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:02,464 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:55:02,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:02,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:55:02,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:02,571 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:55:02,572 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:55:02,572 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1727646880] [2023-11-26 11:55:02,572 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1727646880] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:55:02,572 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:55:02,573 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 11:55:02,573 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1762484726] [2023-11-26 11:55:02,573 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:55:02,574 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 11:55:02,574 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:55:02,575 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 11:55:02,575 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:55:02,576 INFO L87 Difference]: Start difference. First operand 64 states and 87 transitions. Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:55:02,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:55:02,670 INFO L93 Difference]: Finished difference Result 188 states and 258 transitions. [2023-11-26 11:55:02,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 11:55:02,671 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2023-11-26 11:55:02,671 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:55:02,673 INFO L225 Difference]: With dead ends: 188 [2023-11-26 11:55:02,673 INFO L226 Difference]: Without dead ends: 126 [2023-11-26 11:55:02,675 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:55:02,676 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 74 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 155 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:55:02,677 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 155 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 11:55:02,678 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2023-11-26 11:55:02,699 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 123. [2023-11-26 11:55:02,700 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 123 states, 86 states have (on average 1.4534883720930232) internal successors, (125), 101 states have internal predecessors, (125), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2023-11-26 11:55:02,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 169 transitions. [2023-11-26 11:55:02,702 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 169 transitions. Word has length 20 [2023-11-26 11:55:02,703 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:55:02,703 INFO L495 AbstractCegarLoop]: Abstraction has 123 states and 169 transitions. [2023-11-26 11:55:02,703 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:55:02,704 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 169 transitions. [2023-11-26 11:55:02,705 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-26 11:55:02,706 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:55:02,706 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:55:02,706 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-26 11:55:02,706 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:55:02,707 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:55:02,707 INFO L85 PathProgramCache]: Analyzing trace with hash 1574540819, now seen corresponding path program 1 times [2023-11-26 11:55:02,707 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:55:02,708 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1264459764] [2023-11-26 11:55:02,708 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:02,708 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:55:02,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:02,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-26 11:55:02,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:02,869 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:55:02,869 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:55:02,870 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1264459764] [2023-11-26 11:55:02,870 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1264459764] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:55:02,870 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:55:02,870 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-26 11:55:02,871 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1199085562] [2023-11-26 11:55:02,871 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:55:02,871 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-26 11:55:02,872 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:55:02,872 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-26 11:55:02,873 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-26 11:55:02,873 INFO L87 Difference]: Start difference. First operand 123 states and 169 transitions. Second operand has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:55:03,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:55:03,035 INFO L93 Difference]: Finished difference Result 324 states and 451 transitions. [2023-11-26 11:55:03,036 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-26 11:55:03,036 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-26 11:55:03,037 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:55:03,044 INFO L225 Difference]: With dead ends: 324 [2023-11-26 11:55:03,044 INFO L226 Difference]: Without dead ends: 203 [2023-11-26 11:55:03,054 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:55:03,057 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 62 mSDsluCounter, 120 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:55:03,061 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 190 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 11:55:03,063 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 203 states. [2023-11-26 11:55:03,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 203 to 198. [2023-11-26 11:55:03,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 141 states have (on average 1.3829787234042554) internal successors, (195), 158 states have internal predecessors, (195), 30 states have call successors, (30), 26 states have call predecessors, (30), 26 states have return successors, (38), 27 states have call predecessors, (38), 30 states have call successors, (38) [2023-11-26 11:55:03,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 263 transitions. [2023-11-26 11:55:03,113 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 263 transitions. Word has length 23 [2023-11-26 11:55:03,113 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:55:03,113 INFO L495 AbstractCegarLoop]: Abstraction has 198 states and 263 transitions. [2023-11-26 11:55:03,114 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:55:03,114 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 263 transitions. [2023-11-26 11:55:03,124 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-26 11:55:03,124 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:55:03,124 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:55:03,125 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-26 11:55:03,125 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:55:03,126 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:55:03,126 INFO L85 PathProgramCache]: Analyzing trace with hash -1881546442, now seen corresponding path program 1 times [2023-11-26 11:55:03,127 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:55:03,127 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1298240238] [2023-11-26 11:55:03,127 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:03,127 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:55:03,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:03,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:55:03,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:03,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:55:03,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:03,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-26 11:55:03,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:03,360 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:55:03,360 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:55:03,361 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1298240238] [2023-11-26 11:55:03,361 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1298240238] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:55:03,361 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:55:03,361 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 11:55:03,361 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [934031398] [2023-11-26 11:55:03,361 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:55:03,362 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 11:55:03,362 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:55:03,363 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 11:55:03,363 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:55:03,363 INFO L87 Difference]: Start difference. First operand 198 states and 263 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-26 11:55:03,584 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:55:03,584 INFO L93 Difference]: Finished difference Result 440 states and 599 transitions. [2023-11-26 11:55:03,585 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-26 11:55:03,585 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 38 [2023-11-26 11:55:03,585 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:55:03,592 INFO L225 Difference]: With dead ends: 440 [2023-11-26 11:55:03,592 INFO L226 Difference]: Without dead ends: 244 [2023-11-26 11:55:03,594 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-26 11:55:03,595 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 51 mSDsluCounter, 127 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:55:03,596 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 184 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 11:55:03,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 244 states. [2023-11-26 11:55:03,628 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 244 to 238. [2023-11-26 11:55:03,629 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 238 states, 171 states have (on average 1.3508771929824561) internal successors, (231), 188 states have internal predecessors, (231), 34 states have call successors, (34), 26 states have call predecessors, (34), 32 states have return successors, (48), 35 states have call predecessors, (48), 34 states have call successors, (48) [2023-11-26 11:55:03,631 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 238 states to 238 states and 313 transitions. [2023-11-26 11:55:03,632 INFO L78 Accepts]: Start accepts. Automaton has 238 states and 313 transitions. Word has length 38 [2023-11-26 11:55:03,632 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:55:03,632 INFO L495 AbstractCegarLoop]: Abstraction has 238 states and 313 transitions. [2023-11-26 11:55:03,633 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-26 11:55:03,633 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 313 transitions. [2023-11-26 11:55:03,634 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-26 11:55:03,635 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:55:03,635 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:55:03,635 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-26 11:55:03,636 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:55:03,636 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:55:03,636 INFO L85 PathProgramCache]: Analyzing trace with hash 1595772404, now seen corresponding path program 1 times [2023-11-26 11:55:03,637 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:55:03,637 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1643886576] [2023-11-26 11:55:03,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:03,637 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:55:03,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:03,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:55:03,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:03,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:55:03,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:03,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-26 11:55:03,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:03,751 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:55:03,752 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:55:03,752 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1643886576] [2023-11-26 11:55:03,752 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1643886576] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:55:03,752 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:55:03,753 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 11:55:03,753 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [982347381] [2023-11-26 11:55:03,753 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:55:03,753 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 11:55:03,754 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:55:03,754 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 11:55:03,755 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:55:03,755 INFO L87 Difference]: Start difference. First operand 238 states and 313 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-26 11:55:03,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:55:03,957 INFO L93 Difference]: Finished difference Result 490 states and 661 transitions. [2023-11-26 11:55:03,958 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-26 11:55:03,958 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 38 [2023-11-26 11:55:03,959 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:55:03,967 INFO L225 Difference]: With dead ends: 490 [2023-11-26 11:55:03,967 INFO L226 Difference]: Without dead ends: 254 [2023-11-26 11:55:03,969 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-26 11:55:03,970 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 57 mSDsluCounter, 127 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 61 SdHoareTripleChecker+Valid, 183 SdHoareTripleChecker+Invalid, 141 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:55:03,973 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [61 Valid, 183 Invalid, 141 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 11:55:03,975 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2023-11-26 11:55:04,023 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 242. [2023-11-26 11:55:04,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 175 states have (on average 1.3428571428571427) internal successors, (235), 192 states have internal predecessors, (235), 34 states have call successors, (34), 26 states have call predecessors, (34), 32 states have return successors, (48), 35 states have call predecessors, (48), 34 states have call successors, (48) [2023-11-26 11:55:04,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 317 transitions. [2023-11-26 11:55:04,027 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 317 transitions. Word has length 38 [2023-11-26 11:55:04,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:55:04,028 INFO L495 AbstractCegarLoop]: Abstraction has 242 states and 317 transitions. [2023-11-26 11:55:04,028 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-26 11:55:04,028 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 317 transitions. [2023-11-26 11:55:04,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-26 11:55:04,029 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:55:04,030 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:55:04,030 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-26 11:55:04,030 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:55:04,030 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:55:04,031 INFO L85 PathProgramCache]: Analyzing trace with hash 1814627122, now seen corresponding path program 1 times [2023-11-26 11:55:04,031 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:55:04,031 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1858572679] [2023-11-26 11:55:04,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:04,031 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:55:04,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:04,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:55:04,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:04,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:55:04,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:04,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-26 11:55:04,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:04,195 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:55:04,195 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:55:04,195 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1858572679] [2023-11-26 11:55:04,196 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1858572679] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:55:04,196 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:55:04,196 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 11:55:04,196 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1724682012] [2023-11-26 11:55:04,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:55:04,197 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 11:55:04,197 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:55:04,199 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 11:55:04,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:55:04,199 INFO L87 Difference]: Start difference. First operand 242 states and 317 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-26 11:55:04,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:55:04,620 INFO L93 Difference]: Finished difference Result 785 states and 1101 transitions. [2023-11-26 11:55:04,621 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-26 11:55:04,621 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 38 [2023-11-26 11:55:04,621 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:55:04,626 INFO L225 Difference]: With dead ends: 785 [2023-11-26 11:55:04,626 INFO L226 Difference]: Without dead ends: 545 [2023-11-26 11:55:04,628 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-26 11:55:04,629 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 183 mSDsluCounter, 157 mSDsCounter, 0 mSdLazyCounter, 223 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 189 SdHoareTripleChecker+Valid, 268 SdHoareTripleChecker+Invalid, 282 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 223 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-26 11:55:04,629 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [189 Valid, 268 Invalid, 282 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 223 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-26 11:55:04,631 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 545 states. [2023-11-26 11:55:04,691 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 545 to 537. [2023-11-26 11:55:04,693 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 537 states, 386 states have (on average 1.33419689119171) internal successors, (515), 417 states have internal predecessors, (515), 80 states have call successors, (80), 71 states have call predecessors, (80), 70 states have return successors, (130), 74 states have call predecessors, (130), 80 states have call successors, (130) [2023-11-26 11:55:04,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 537 states to 537 states and 725 transitions. [2023-11-26 11:55:04,700 INFO L78 Accepts]: Start accepts. Automaton has 537 states and 725 transitions. Word has length 38 [2023-11-26 11:55:04,700 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:55:04,700 INFO L495 AbstractCegarLoop]: Abstraction has 537 states and 725 transitions. [2023-11-26 11:55:04,700 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-26 11:55:04,701 INFO L276 IsEmpty]: Start isEmpty. Operand 537 states and 725 transitions. [2023-11-26 11:55:04,703 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2023-11-26 11:55:04,703 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:55:04,703 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:55:04,703 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-26 11:55:04,704 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:55:04,704 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:55:04,704 INFO L85 PathProgramCache]: Analyzing trace with hash -410233768, now seen corresponding path program 1 times [2023-11-26 11:55:04,704 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:55:04,705 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1745494626] [2023-11-26 11:55:04,705 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:04,705 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:55:04,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:04,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:55:04,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:04,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-26 11:55:04,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:04,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:55:04,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:04,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2023-11-26 11:55:04,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:04,917 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-26 11:55:04,917 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:55:04,918 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1745494626] [2023-11-26 11:55:04,918 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1745494626] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:55:04,918 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:55:04,918 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-26 11:55:04,918 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1011338640] [2023-11-26 11:55:04,918 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:55:04,919 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-26 11:55:04,919 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:55:04,925 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-26 11:55:04,925 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2023-11-26 11:55:04,926 INFO L87 Difference]: Start difference. First operand 537 states and 725 transitions. Second operand has 8 states, 7 states have (on average 4.714285714285714) internal successors, (33), 5 states have internal predecessors, (33), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-26 11:55:05,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:55:05,593 INFO L93 Difference]: Finished difference Result 1811 states and 2533 transitions. [2023-11-26 11:55:05,594 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-11-26 11:55:05,594 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 4.714285714285714) internal successors, (33), 5 states have internal predecessors, (33), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 42 [2023-11-26 11:55:05,595 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:55:05,605 INFO L225 Difference]: With dead ends: 1811 [2023-11-26 11:55:05,606 INFO L226 Difference]: Without dead ends: 1276 [2023-11-26 11:55:05,609 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 130 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=133, Invalid=467, Unknown=0, NotChecked=0, Total=600 [2023-11-26 11:55:05,610 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 276 mSDsluCounter, 211 mSDsCounter, 0 mSdLazyCounter, 353 mSolverCounterSat, 115 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 283 SdHoareTripleChecker+Valid, 261 SdHoareTripleChecker+Invalid, 468 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 115 IncrementalHoareTripleChecker+Valid, 353 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-26 11:55:05,611 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [283 Valid, 261 Invalid, 468 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [115 Valid, 353 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-26 11:55:05,613 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1276 states. [2023-11-26 11:55:05,763 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1276 to 1245. [2023-11-26 11:55:05,766 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1245 states, 888 states have (on average 1.28490990990991) internal successors, (1141), 965 states have internal predecessors, (1141), 196 states have call successors, (196), 142 states have call predecessors, (196), 160 states have return successors, (352), 188 states have call predecessors, (352), 196 states have call successors, (352) [2023-11-26 11:55:05,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1245 states to 1245 states and 1689 transitions. [2023-11-26 11:55:05,780 INFO L78 Accepts]: Start accepts. Automaton has 1245 states and 1689 transitions. Word has length 42 [2023-11-26 11:55:05,781 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:55:05,781 INFO L495 AbstractCegarLoop]: Abstraction has 1245 states and 1689 transitions. [2023-11-26 11:55:05,781 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 4.714285714285714) internal successors, (33), 5 states have internal predecessors, (33), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-26 11:55:05,782 INFO L276 IsEmpty]: Start isEmpty. Operand 1245 states and 1689 transitions. [2023-11-26 11:55:05,785 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-26 11:55:05,786 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:55:05,786 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:55:05,786 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-26 11:55:05,786 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:55:05,787 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:55:05,787 INFO L85 PathProgramCache]: Analyzing trace with hash -1069580100, now seen corresponding path program 1 times [2023-11-26 11:55:05,787 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:55:05,787 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1389685026] [2023-11-26 11:55:05,787 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:05,787 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:55:05,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:05,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:55:05,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:05,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-26 11:55:05,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:05,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-26 11:55:05,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:06,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:55:06,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:06,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-26 11:55:06,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:06,076 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-26 11:55:06,076 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:55:06,076 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1389685026] [2023-11-26 11:55:06,076 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1389685026] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-26 11:55:06,076 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [286143450] [2023-11-26 11:55:06,076 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:06,077 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 11:55:06,077 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 11:55:06,084 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-26 11:55:06,124 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-26 11:55:06,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:06,196 INFO L262 TraceCheckSpWp]: Trace formula consists of 214 conjuncts, 7 conjunts are in the unsatisfiable core [2023-11-26 11:55:06,202 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-26 11:55:06,355 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:55:06,356 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-26 11:55:06,356 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [286143450] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:55:06,356 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-26 11:55:06,356 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2023-11-26 11:55:06,357 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [167077775] [2023-11-26 11:55:06,357 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:55:06,357 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-26 11:55:06,358 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:55:06,358 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-26 11:55:06,359 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2023-11-26 11:55:06,359 INFO L87 Difference]: Start difference. First operand 1245 states and 1689 transitions. Second operand has 6 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-26 11:55:06,615 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:55:06,615 INFO L93 Difference]: Finished difference Result 2436 states and 3316 transitions. [2023-11-26 11:55:06,615 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-26 11:55:06,616 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 46 [2023-11-26 11:55:06,616 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:55:06,625 INFO L225 Difference]: With dead ends: 2436 [2023-11-26 11:55:06,625 INFO L226 Difference]: Without dead ends: 1193 [2023-11-26 11:55:06,630 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 49 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2023-11-26 11:55:06,631 INFO L413 NwaCegarLoop]: 140 mSDtfsCounter, 62 mSDsluCounter, 280 mSDsCounter, 0 mSdLazyCounter, 152 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 420 SdHoareTripleChecker+Invalid, 153 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 152 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:55:06,631 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 420 Invalid, 153 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 152 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 11:55:06,633 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1193 states. [2023-11-26 11:55:06,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1193 to 1193. [2023-11-26 11:55:06,781 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1193 states, 850 states have (on average 1.2694117647058825) internal successors, (1079), 925 states have internal predecessors, (1079), 190 states have call successors, (190), 138 states have call predecessors, (190), 152 states have return successors, (314), 178 states have call predecessors, (314), 190 states have call successors, (314) [2023-11-26 11:55:06,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1193 states to 1193 states and 1583 transitions. [2023-11-26 11:55:06,792 INFO L78 Accepts]: Start accepts. Automaton has 1193 states and 1583 transitions. Word has length 46 [2023-11-26 11:55:06,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:55:06,792 INFO L495 AbstractCegarLoop]: Abstraction has 1193 states and 1583 transitions. [2023-11-26 11:55:06,792 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-26 11:55:06,792 INFO L276 IsEmpty]: Start isEmpty. Operand 1193 states and 1583 transitions. [2023-11-26 11:55:06,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2023-11-26 11:55:06,797 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:55:06,797 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:55:06,812 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-11-26 11:55:07,002 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 11:55:07,002 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:55:07,003 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:55:07,003 INFO L85 PathProgramCache]: Analyzing trace with hash -791575094, now seen corresponding path program 1 times [2023-11-26 11:55:07,003 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:55:07,003 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1656031264] [2023-11-26 11:55:07,003 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:07,003 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:55:07,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:07,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:55:07,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:07,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-26 11:55:07,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:07,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-26 11:55:07,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:07,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:55:07,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:07,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-26 11:55:07,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:07,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2023-11-26 11:55:07,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:07,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2023-11-26 11:55:07,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:07,141 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-26 11:55:07,142 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:55:07,142 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1656031264] [2023-11-26 11:55:07,142 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1656031264] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:55:07,142 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:55:07,142 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-26 11:55:07,142 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1613306282] [2023-11-26 11:55:07,143 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:55:07,143 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-26 11:55:07,143 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:55:07,144 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-26 11:55:07,144 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2023-11-26 11:55:07,146 INFO L87 Difference]: Start difference. First operand 1193 states and 1583 transitions. Second operand has 8 states, 7 states have (on average 7.428571428571429) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-26 11:55:07,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:55:07,688 INFO L93 Difference]: Finished difference Result 1390 states and 1829 transitions. [2023-11-26 11:55:07,688 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2023-11-26 11:55:07,688 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 7.428571428571429) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 69 [2023-11-26 11:55:07,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:55:07,695 INFO L225 Difference]: With dead ends: 1390 [2023-11-26 11:55:07,695 INFO L226 Difference]: Without dead ends: 576 [2023-11-26 11:55:07,699 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=172, Unknown=0, NotChecked=0, Total=240 [2023-11-26 11:55:07,700 INFO L413 NwaCegarLoop]: 41 mSDtfsCounter, 360 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 321 mSolverCounterSat, 125 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 369 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 446 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 125 IncrementalHoareTripleChecker+Valid, 321 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-26 11:55:07,701 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [369 Valid, 138 Invalid, 446 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [125 Valid, 321 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-26 11:55:07,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 576 states. [2023-11-26 11:55:07,767 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 576 to 574. [2023-11-26 11:55:07,768 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 574 states, 410 states have (on average 1.221951219512195) internal successors, (501), 442 states have internal predecessors, (501), 89 states have call successors, (89), 68 states have call predecessors, (89), 74 states have return successors, (149), 85 states have call predecessors, (149), 89 states have call successors, (149) [2023-11-26 11:55:07,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 739 transitions. [2023-11-26 11:55:07,774 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 739 transitions. Word has length 69 [2023-11-26 11:55:07,775 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:55:07,775 INFO L495 AbstractCegarLoop]: Abstraction has 574 states and 739 transitions. [2023-11-26 11:55:07,775 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 7.428571428571429) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-26 11:55:07,775 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 739 transitions. [2023-11-26 11:55:07,778 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2023-11-26 11:55:07,778 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:55:07,779 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:55:07,779 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-26 11:55:07,779 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:55:07,780 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:55:07,780 INFO L85 PathProgramCache]: Analyzing trace with hash -393565629, now seen corresponding path program 1 times [2023-11-26 11:55:07,780 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:55:07,780 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [990549957] [2023-11-26 11:55:07,781 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:07,781 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:55:07,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:55:08,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:55:08,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-26 11:55:08,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:55:08,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-26 11:55:08,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-26 11:55:08,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2023-11-26 11:55:08,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:55:08,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2023-11-26 11:55:08,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,091 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 15 proven. 3 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-26 11:55:08,092 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:55:08,092 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [990549957] [2023-11-26 11:55:08,092 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [990549957] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-26 11:55:08,092 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1627721234] [2023-11-26 11:55:08,092 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:08,093 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 11:55:08,093 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 11:55:08,094 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-26 11:55:08,123 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-26 11:55:08,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,203 INFO L262 TraceCheckSpWp]: Trace formula consists of 293 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-26 11:55:08,207 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-26 11:55:08,297 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:55:08,297 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-26 11:55:08,298 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1627721234] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:55:08,298 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-26 11:55:08,298 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 9 [2023-11-26 11:55:08,298 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1092755456] [2023-11-26 11:55:08,298 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:55:08,299 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 11:55:08,299 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:55:08,300 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 11:55:08,300 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2023-11-26 11:55:08,300 INFO L87 Difference]: Start difference. First operand 574 states and 739 transitions. Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2023-11-26 11:55:08,518 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:55:08,518 INFO L93 Difference]: Finished difference Result 1468 states and 1940 transitions. [2023-11-26 11:55:08,519 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-26 11:55:08,519 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 79 [2023-11-26 11:55:08,521 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:55:08,527 INFO L225 Difference]: With dead ends: 1468 [2023-11-26 11:55:08,528 INFO L226 Difference]: Without dead ends: 896 [2023-11-26 11:55:08,531 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 105 GetRequests, 95 SyntacticMatches, 2 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=68, Unknown=0, NotChecked=0, Total=90 [2023-11-26 11:55:08,532 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 91 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 88 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 298 SdHoareTripleChecker+Invalid, 100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 88 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:55:08,532 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 298 Invalid, 100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 88 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 11:55:08,534 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 896 states. [2023-11-26 11:55:08,625 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 896 to 830. [2023-11-26 11:55:08,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 830 states, 592 states have (on average 1.2162162162162162) internal successors, (720), 636 states have internal predecessors, (720), 129 states have call successors, (129), 104 states have call predecessors, (129), 108 states have return successors, (219), 117 states have call predecessors, (219), 129 states have call successors, (219) [2023-11-26 11:55:08,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 830 states to 830 states and 1068 transitions. [2023-11-26 11:55:08,635 INFO L78 Accepts]: Start accepts. Automaton has 830 states and 1068 transitions. Word has length 79 [2023-11-26 11:55:08,635 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:55:08,636 INFO L495 AbstractCegarLoop]: Abstraction has 830 states and 1068 transitions. [2023-11-26 11:55:08,636 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2023-11-26 11:55:08,636 INFO L276 IsEmpty]: Start isEmpty. Operand 830 states and 1068 transitions. [2023-11-26 11:55:08,638 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2023-11-26 11:55:08,638 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:55:08,639 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:55:08,650 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-26 11:55:08,845 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-26 11:55:08,845 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:55:08,845 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:55:08,846 INFO L85 PathProgramCache]: Analyzing trace with hash -1211214079, now seen corresponding path program 1 times [2023-11-26 11:55:08,846 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:55:08,846 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [55830724] [2023-11-26 11:55:08,846 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:08,846 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:55:08,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:55:08,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:55:08,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-26 11:55:08,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:55:08,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-26 11:55:08,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-26 11:55:08,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2023-11-26 11:55:08,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:55:08,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2023-11-26 11:55:08,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:08,999 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2023-11-26 11:55:08,999 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:55:08,999 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [55830724] [2023-11-26 11:55:09,000 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [55830724] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-26 11:55:09,000 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1024721835] [2023-11-26 11:55:09,000 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:55:09,000 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 11:55:09,000 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 11:55:09,001 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-26 11:55:09,020 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-26 11:55:09,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:55:09,117 INFO L262 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-26 11:55:09,121 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-26 11:55:09,171 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-26 11:55:09,172 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-26 11:55:09,172 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1024721835] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:55:09,172 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-26 11:55:09,173 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [8] total 10 [2023-11-26 11:55:09,173 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1010616756] [2023-11-26 11:55:09,173 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:55:09,174 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-26 11:55:09,174 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:55:09,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-26 11:55:09,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2023-11-26 11:55:09,175 INFO L87 Difference]: Start difference. First operand 830 states and 1068 transitions. Second operand has 4 states, 4 states have (on average 13.25) internal successors, (53), 4 states have internal predecessors, (53), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2023-11-26 11:55:09,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:55:09,272 INFO L93 Difference]: Finished difference Result 1169 states and 1485 transitions. [2023-11-26 11:55:09,272 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-26 11:55:09,273 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.25) internal successors, (53), 4 states have internal predecessors, (53), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 79 [2023-11-26 11:55:09,273 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:55:09,274 INFO L225 Difference]: With dead ends: 1169 [2023-11-26 11:55:09,274 INFO L226 Difference]: Without dead ends: 0 [2023-11-26 11:55:09,278 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 100 GetRequests, 92 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2023-11-26 11:55:09,279 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 1 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 169 SdHoareTripleChecker+Invalid, 40 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:55:09,279 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 169 Invalid, 40 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:55:09,280 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-26 11:55:09,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-26 11:55:09,280 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 11:55:09,281 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-26 11:55:09,281 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 79 [2023-11-26 11:55:09,281 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:55:09,281 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-26 11:55:09,282 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 13.25) internal successors, (53), 4 states have internal predecessors, (53), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2023-11-26 11:55:09,282 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-26 11:55:09,282 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-26 11:55:09,285 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-26 11:55:09,296 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-26 11:55:09,491 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2023-11-26 11:55:09,494 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-26 11:55:12,952 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 383 390) no Hoare annotation was computed. [2023-11-26 11:55:12,952 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 383 390) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (< ~waterLevel~0 2)) (.cse4 (= 0 ~systemActive~0)) (.cse5 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5) (or .cse0 .cse3 .cse4 .cse5))) [2023-11-26 11:55:12,952 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 298 304) no Hoare annotation was computed. [2023-11-26 11:55:12,953 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 298 304) the Hoare annotation is: true [2023-11-26 11:55:12,953 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 84 95) the Hoare annotation is: (let ((.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse4 (< |old(~methaneLevelCritical~0)| 1)) (.cse7 (not (= 0 ~systemActive~0))) (.cse5 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (< ~waterLevel~0 1)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse7) (or .cse0 .cse3 .cse4 .cse7) (or .cse5 .cse6 .cse2 (< ~waterLevel~0 2)) (or .cse5 .cse0 .cse1 .cse6 .cse2))) [2023-11-26 11:55:12,953 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2023-11-26 11:55:12,953 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2023-11-26 11:55:12,953 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 906 935) no Hoare annotation was computed. [2023-11-26 11:55:12,953 INFO L899 garLoopResultBuilder]: For program point L927(line 927) no Hoare annotation was computed. [2023-11-26 11:55:12,953 INFO L899 garLoopResultBuilder]: For program point L920(lines 920 924) no Hoare annotation was computed. [2023-11-26 11:55:12,953 INFO L902 garLoopResultBuilder]: At program point L920-1(lines 920 924) the Hoare annotation is: true [2023-11-26 11:55:12,954 INFO L902 garLoopResultBuilder]: At program point L916-2(lines 916 930) the Hoare annotation is: true [2023-11-26 11:55:12,954 INFO L902 garLoopResultBuilder]: At program point L912(line 912) the Hoare annotation is: true [2023-11-26 11:55:12,954 INFO L899 garLoopResultBuilder]: For program point L912-1(line 912) no Hoare annotation was computed. [2023-11-26 11:55:12,954 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 906 935) the Hoare annotation is: true [2023-11-26 11:55:12,954 INFO L899 garLoopResultBuilder]: For program point L931(lines 906 935) no Hoare annotation was computed. [2023-11-26 11:55:12,954 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2023-11-26 11:55:12,954 INFO L899 garLoopResultBuilder]: For program point L64-2(lines 60 71) no Hoare annotation was computed. [2023-11-26 11:55:12,954 INFO L899 garLoopResultBuilder]: For program point L193(line 193) no Hoare annotation was computed. [2023-11-26 11:55:12,955 INFO L895 garLoopResultBuilder]: At program point L346(line 346) the Hoare annotation is: (let ((.cse1 (< |old(~waterLevel~0)| 1)) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (< |old(~waterLevel~0)| 2)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse4) (or .cse2 .cse6 .cse3) (or .cse2 .cse6 .cse4) (or .cse0 .cse3 .cse5))) [2023-11-26 11:55:12,955 INFO L895 garLoopResultBuilder]: At program point L342(line 342) the Hoare annotation is: (let ((.cse1 (< |old(~waterLevel~0)| 1)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (< |old(~waterLevel~0)| 2)) (.cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 ~waterLevel~0))) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5) (or .cse2 .cse6 .cse4 .cse7) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse3 .cse5) (or .cse2 .cse6 .cse7 .cse3))) [2023-11-26 11:55:12,959 INFO L895 garLoopResultBuilder]: At program point L169(line 169) the Hoare annotation is: (let ((.cse11 (<= 2 ~waterLevel~0)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= ~pumpRunning~0 0))) (let ((.cse1 (< |old(~waterLevel~0)| 1)) (.cse3 (and .cse12 (= |old(~waterLevel~0)| 1) (= ~waterLevel~0 1))) (.cse4 (and .cse11 .cse13)) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (< |old(~waterLevel~0)| 2)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse10 (and .cse12 (<= 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and .cse12 .cse13)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse8 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse7 .cse4) (or .cse2 .cse9 .cse5 .cse10) (or .cse2 .cse11 .cse9 .cse7 .cse10) (or .cse0 .cse6 .cse5 .cse8)))) [2023-11-26 11:55:12,959 INFO L899 garLoopResultBuilder]: For program point L169-1(line 169) no Hoare annotation was computed. [2023-11-26 11:55:12,959 INFO L895 garLoopResultBuilder]: At program point L351(line 351) the Hoare annotation is: (let ((.cse7 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (< |old(~waterLevel~0)| 1)) (.cse4 (not (= 1 ~systemActive~0))) (.cse6 (< |old(~waterLevel~0)| 2)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not .cse7)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse9 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4 .cse5) (or .cse4 .cse6 .cse7 .cse5) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 .cse4 .cse8 (and .cse2 (= ~waterLevel~0 1))) (or .cse0 .cse8 .cse9) (or .cse4 .cse6 (and .cse2 .cse7 .cse3) .cse8) (or .cse0 .cse5 .cse9)))) [2023-11-26 11:55:12,959 INFO L899 garLoopResultBuilder]: For program point L351-1(lines 332 356) no Hoare annotation was computed. [2023-11-26 11:55:12,959 INFO L899 garLoopResultBuilder]: For program point L285-1(lines 285 291) no Hoare annotation was computed. [2023-11-26 11:55:12,960 INFO L899 garLoopResultBuilder]: For program point L475(lines 475 479) no Hoare annotation was computed. [2023-11-26 11:55:12,960 INFO L899 garLoopResultBuilder]: For program point L475-2(lines 475 479) no Hoare annotation was computed. [2023-11-26 11:55:12,960 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 274 297) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (< |old(~waterLevel~0)| 1)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse7 (< |old(~waterLevel~0)| 2)) (.cse8 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse10)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and .cse9 .cse10)) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse6 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse5 .cse6) (or .cse3 .cse7 .cse5 .cse8) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 .cse3 .cse5 (and .cse9 (= ~waterLevel~0 1))) (or .cse3 .cse7 .cse8 .cse4) (or .cse0 .cse2 .cse4 .cse6)))) [2023-11-26 11:55:12,960 INFO L899 garLoopResultBuilder]: For program point L278-1(lines 277 296) no Hoare annotation was computed. [2023-11-26 11:55:12,960 INFO L899 garLoopResultBuilder]: For program point L340(lines 340 348) no Hoare annotation was computed. [2023-11-26 11:55:12,960 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 353) no Hoare annotation was computed. [2023-11-26 11:55:12,960 INFO L899 garLoopResultBuilder]: For program point L175(lines 175 181) no Hoare annotation was computed. [2023-11-26 11:55:12,960 INFO L899 garLoopResultBuilder]: For program point L171(lines 171 184) no Hoare annotation was computed. [2023-11-26 11:55:12,961 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 274 297) no Hoare annotation was computed. [2023-11-26 11:55:12,961 INFO L899 garLoopResultBuilder]: For program point L171-1(lines 163 187) no Hoare annotation was computed. [2023-11-26 11:55:12,961 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 193) no Hoare annotation was computed. [2023-11-26 11:55:12,961 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 96 104) the Hoare annotation is: true [2023-11-26 11:55:12,961 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 96 104) no Hoare annotation was computed. [2023-11-26 11:55:12,961 INFO L899 garLoopResultBuilder]: For program point L221(lines 221 227) no Hoare annotation was computed. [2023-11-26 11:55:12,961 INFO L899 garLoopResultBuilder]: For program point L221-1(lines 221 227) no Hoare annotation was computed. [2023-11-26 11:55:12,961 INFO L895 garLoopResultBuilder]: At program point L259(lines 210 260) the Hoare annotation is: false [2023-11-26 11:55:12,961 INFO L899 garLoopResultBuilder]: For program point L247(lines 247 253) no Hoare annotation was computed. [2023-11-26 11:55:12,962 INFO L895 garLoopResultBuilder]: At program point L247-2(lines 241 254) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 ~waterLevel~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse0 .cse3 .cse5) (and .cse4 .cse6 .cse2 .cse3 .cse7) (and .cse4 .cse6 .cse3 .cse5) (and .cse4 .cse0 .cse2 .cse3 .cse7) (and .cse6 .cse1 .cse2 .cse3))) [2023-11-26 11:55:12,962 INFO L895 garLoopResultBuilder]: At program point L491(line 491) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2) (and .cse3 .cse4 .cse2 .cse5) (and .cse3 .cse1 .cse2) (and .cse0 .cse4 .cse2 .cse5))) [2023-11-26 11:55:12,962 INFO L899 garLoopResultBuilder]: For program point L231(lines 231 237) no Hoare annotation was computed. [2023-11-26 11:55:12,962 INFO L899 garLoopResultBuilder]: For program point L231-1(lines 231 237) no Hoare annotation was computed. [2023-11-26 11:55:12,962 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-26 11:55:12,962 INFO L895 garLoopResultBuilder]: At program point L256(lines 211 258) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= 1 ~waterLevel~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse6) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse2 .cse6) (and .cse4 (<= 2 ~waterLevel~0) .cse5 .cse2))) [2023-11-26 11:55:12,962 INFO L895 garLoopResultBuilder]: At program point L223(line 223) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= 1 ~waterLevel~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse6) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse2 .cse6) (and .cse4 (<= 2 ~waterLevel~0) .cse5 .cse2))) [2023-11-26 11:55:12,963 INFO L899 garLoopResultBuilder]: For program point L987(lines 987 994) no Hoare annotation was computed. [2023-11-26 11:55:12,963 INFO L899 garLoopResultBuilder]: For program point L987-2(lines 987 994) no Hoare annotation was computed. [2023-11-26 11:55:12,963 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-26 11:55:12,963 INFO L899 garLoopResultBuilder]: For program point L212(lines 211 258) no Hoare annotation was computed. [2023-11-26 11:55:12,963 INFO L899 garLoopResultBuilder]: For program point L241(lines 241 254) no Hoare annotation was computed. [2023-11-26 11:55:12,963 INFO L895 garLoopResultBuilder]: At program point L233(line 233) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= 1 ~waterLevel~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse6) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse2 .cse6) (and .cse4 (<= 2 ~waterLevel~0) .cse5 .cse2))) [2023-11-26 11:55:12,963 INFO L899 garLoopResultBuilder]: For program point L489(lines 489 495) no Hoare annotation was computed. [2023-11-26 11:55:12,963 INFO L899 garLoopResultBuilder]: For program point L489-1(lines 489 495) no Hoare annotation was computed. [2023-11-26 11:55:12,963 INFO L899 garLoopResultBuilder]: For program point L262(lines 201 266) no Hoare annotation was computed. [2023-11-26 11:55:12,964 INFO L895 garLoopResultBuilder]: At program point L320(line 320) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0)) (.cse5 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse5)) (.cse1 (< ~waterLevel~0 1)) (.cse2 (not .cse4)) (.cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) .cse4 .cse5))) (and (or .cse0 .cse1 .cse2 .cse3 (< ~methaneLevelCritical~0 1)) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0)))))) [2023-11-26 11:55:12,964 INFO L899 garLoopResultBuilder]: For program point L314(lines 314 322) no Hoare annotation was computed. [2023-11-26 11:55:12,964 INFO L899 garLoopResultBuilder]: For program point L310(lines 310 327) no Hoare annotation was computed. [2023-11-26 11:55:12,964 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2023-11-26 11:55:12,964 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 306 330) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (< ~waterLevel~0 1)) (.cse3 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 .cse3 (< ~methaneLevelCritical~0 1)))) [2023-11-26 11:55:12,964 INFO L895 garLoopResultBuilder]: At program point L325(line 325) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< ~waterLevel~0 1)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 (< ~methaneLevelCritical~0 1)))) [2023-11-26 11:55:12,964 INFO L899 garLoopResultBuilder]: For program point L325-1(lines 306 330) no Hoare annotation was computed. [2023-11-26 11:55:12,964 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 137 150) no Hoare annotation was computed. [2023-11-26 11:55:12,965 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 306 330) no Hoare annotation was computed. [2023-11-26 11:55:12,965 INFO L899 garLoopResultBuilder]: For program point L373(lines 373 379) no Hoare annotation was computed. [2023-11-26 11:55:12,965 INFO L899 garLoopResultBuilder]: For program point L373-2(lines 366 382) no Hoare annotation was computed. [2023-11-26 11:55:12,965 INFO L895 garLoopResultBuilder]: At program point L396(line 396) the Hoare annotation is: (let ((.cse5 (= 1 ~systemActive~0)) (.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse3 (< ~methaneLevelCritical~0 1)) (.cse0 (not .cse6)) (.cse1 (< ~waterLevel~0 1)) (.cse2 (not .cse5)) (.cse4 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) .cse5 .cse6))) (and (or .cse0 .cse1 .cse2 (< 1 ~waterLevel~0) .cse3) (or .cse0 .cse2 (< ~waterLevel~0 2) .cse4 .cse3) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse4)))) [2023-11-26 11:55:12,965 INFO L899 garLoopResultBuilder]: For program point L396-1(line 396) no Hoare annotation was computed. [2023-11-26 11:55:12,965 INFO L899 garLoopResultBuilder]: For program point L456(lines 456 460) no Hoare annotation was computed. [2023-11-26 11:55:12,965 INFO L899 garLoopResultBuilder]: For program point L456-2(lines 456 460) no Hoare annotation was computed. [2023-11-26 11:55:12,965 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2023-11-26 11:55:12,965 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2023-11-26 11:55:12,966 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 72 83) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 1)) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (< |old(~waterLevel~0)| 2)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse7 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse5 .cse4 .cse6) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse6) (or .cse2 .cse5 .cse3 .cse4) (or .cse1 .cse3 .cse4 .cse7) (or .cse1 .cse4 .cse6 .cse7))) [2023-11-26 11:55:12,968 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:55:12,971 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-26 11:55:12,988 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 26.11 11:55:12 BoogieIcfgContainer [2023-11-26 11:55:12,988 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-26 11:55:12,989 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-26 11:55:12,989 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-26 11:55:12,989 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-26 11:55:12,990 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:55:01" (3/4) ... [2023-11-26 11:55:12,992 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-26 11:55:12,997 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-26 11:55:12,997 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-26 11:55:12,997 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-26 11:55:12,998 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-26 11:55:12,998 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-26 11:55:12,998 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-26 11:55:12,999 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 11:55:12,999 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-26 11:55:13,017 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 33 nodes and edges [2023-11-26 11:55:13,018 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-26 11:55:13,019 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-26 11:55:13,019 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 11:55:13,020 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 11:55:13,171 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/witness.graphml [2023-11-26 11:55:13,171 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/witness.yml [2023-11-26 11:55:13,172 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-26 11:55:13,172 INFO L158 Benchmark]: Toolchain (without parser) took 12984.81ms. Allocated memory was 184.5MB in the beginning and 299.9MB in the end (delta: 115.3MB). Free memory was 141.4MB in the beginning and 140.6MB in the end (delta: 833.7kB). Peak memory consumption was 117.9MB. Max. memory is 16.1GB. [2023-11-26 11:55:13,173 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 117.4MB. Free memory is still 65.7MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-26 11:55:13,173 INFO L158 Benchmark]: CACSL2BoogieTranslator took 565.96ms. Allocated memory is still 184.5MB. Free memory was 141.1MB in the beginning and 121.4MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-26 11:55:13,173 INFO L158 Benchmark]: Boogie Procedure Inliner took 54.00ms. Allocated memory is still 184.5MB. Free memory was 121.4MB in the beginning and 119.1MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-26 11:55:13,174 INFO L158 Benchmark]: Boogie Preprocessor took 65.47ms. Allocated memory is still 184.5MB. Free memory was 119.1MB in the beginning and 116.6MB in the end (delta: 2.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-26 11:55:13,174 INFO L158 Benchmark]: RCFGBuilder took 710.56ms. Allocated memory is still 184.5MB. Free memory was 116.6MB in the beginning and 149.0MB in the end (delta: -32.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-26 11:55:13,175 INFO L158 Benchmark]: TraceAbstraction took 11389.66ms. Allocated memory was 184.5MB in the beginning and 299.9MB in the end (delta: 115.3MB). Free memory was 148.3MB in the beginning and 149.0MB in the end (delta: -676.9kB). Peak memory consumption was 170.9MB. Max. memory is 16.1GB. [2023-11-26 11:55:13,175 INFO L158 Benchmark]: Witness Printer took 182.96ms. Allocated memory is still 299.9MB. Free memory was 149.0MB in the beginning and 140.6MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-26 11:55:13,177 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 117.4MB. Free memory is still 65.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 565.96ms. Allocated memory is still 184.5MB. Free memory was 141.1MB in the beginning and 121.4MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 54.00ms. Allocated memory is still 184.5MB. Free memory was 121.4MB in the beginning and 119.1MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 65.47ms. Allocated memory is still 184.5MB. Free memory was 119.1MB in the beginning and 116.6MB in the end (delta: 2.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 710.56ms. Allocated memory is still 184.5MB. Free memory was 116.6MB in the beginning and 149.0MB in the end (delta: -32.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 11389.66ms. Allocated memory was 184.5MB in the beginning and 299.9MB in the end (delta: 115.3MB). Free memory was 148.3MB in the beginning and 149.0MB in the end (delta: -676.9kB). Peak memory consumption was 170.9MB. Max. memory is 16.1GB. * Witness Printer took 182.96ms. Allocated memory is still 299.9MB. Free memory was 149.0MB in the beginning and 140.6MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 160]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [160] - GenericResultAtLocation [Line: 188]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [188] - GenericResultAtLocation [Line: 197]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [197] - GenericResultAtLocation [Line: 267]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [267] - GenericResultAtLocation [Line: 500]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [500] - GenericResultAtLocation [Line: 866]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [866] - GenericResultAtLocation [Line: 904]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [904] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 193]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 77 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.3s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1266 SdHoareTripleChecker+Valid, 1.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1231 mSDsluCounter, 2485 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1553 mSDsCounter, 356 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1541 IncrementalHoareTripleChecker+Invalid, 1897 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 356 mSolverCounterUnsat, 932 mSDtfsCounter, 1541 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 391 GetRequests, 304 SyntacticMatches, 2 SemanticMatches, 85 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 193 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1245occurred in iteration=8, InterpolantAutomatonStates: 81, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 12 MinimizatonAttempts, 133 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 24 LocationsWithAnnotation, 1670 PreInvPairs, 1785 NumberOfFragments, 1361 HoareAnnotationTreeSize, 1670 FomulaSimplifications, 820 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 24 FomulaSimplificationsInter, 4189 FormulaSimplificationTreeSizeReductionInter, 3.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 709 NumberOfCodeBlocks, 709 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 694 ConstructedInterpolants, 0 QuantifiedInterpolants, 1157 SizeOfPredicates, 7 NumberOfNonLiveVariables, 801 ConjunctsInSsa, 20 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 131/136 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 210]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (splverifierCounter == 0)) && (0 == systemActive)) || (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= waterLevel))) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (0 == systemActive))) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= waterLevel))) || ((((methaneLevelCritical == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-26 11:55:13,196 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ff6dbbc-db65-4d23-952e-bb7d388cc06c/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE