./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f250833677b07ed1377ed852c7268af3b652ab26de7f7fe1fca27ae75baf167f --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-26 11:58:31,856 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-26 11:58:32,010 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-26 11:58:32,023 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-26 11:58:32,023 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-26 11:58:32,071 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-26 11:58:32,072 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-26 11:58:32,073 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-26 11:58:32,075 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-26 11:58:32,080 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-26 11:58:32,081 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-26 11:58:32,082 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-26 11:58:32,083 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-26 11:58:32,085 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-26 11:58:32,085 INFO L153 SettingsManager]: * Use SBE=true [2023-11-26 11:58:32,086 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-26 11:58:32,087 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-26 11:58:32,087 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-26 11:58:32,088 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-26 11:58:32,088 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-26 11:58:32,089 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-26 11:58:32,090 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-26 11:58:32,090 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-26 11:58:32,091 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-26 11:58:32,091 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-26 11:58:32,092 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-26 11:58:32,092 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-26 11:58:32,093 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-26 11:58:32,094 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-26 11:58:32,095 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-26 11:58:32,096 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-26 11:58:32,096 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 11:58:32,097 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-26 11:58:32,097 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-26 11:58:32,098 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-26 11:58:32,098 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-26 11:58:32,098 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-26 11:58:32,099 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-26 11:58:32,099 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-26 11:58:32,099 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-26 11:58:32,100 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-26 11:58:32,101 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-26 11:58:32,102 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f250833677b07ed1377ed852c7268af3b652ab26de7f7fe1fca27ae75baf167f [2023-11-26 11:58:32,465 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-26 11:58:32,493 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-26 11:58:32,496 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-26 11:58:32,498 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-26 11:58:32,499 INFO L274 PluginConnector]: CDTParser initialized [2023-11-26 11:58:32,500 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/../../sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c [2023-11-26 11:58:36,190 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-26 11:58:36,479 INFO L384 CDTParser]: Found 1 translation units. [2023-11-26 11:58:36,479 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c [2023-11-26 11:58:36,518 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/data/10b589052/6b69e803e4e446e983f63ff2270302cc/FLAG06e609739 [2023-11-26 11:58:36,541 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/data/10b589052/6b69e803e4e446e983f63ff2270302cc [2023-11-26 11:58:36,548 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-26 11:58:36,551 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-26 11:58:36,555 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-26 11:58:36,555 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-26 11:58:36,561 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-26 11:58:36,561 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 11:58:36" (1/1) ... [2023-11-26 11:58:36,563 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7e52f111 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:36, skipping insertion in model container [2023-11-26 11:58:36,563 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 11:58:36" (1/1) ... [2023-11-26 11:58:36,626 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-26 11:58:36,824 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c[3777,3790] [2023-11-26 11:58:36,964 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 11:58:36,978 INFO L202 MainTranslator]: Completed pre-run [2023-11-26 11:58:36,989 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2023-11-26 11:58:36,990 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [87] [2023-11-26 11:58:36,991 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [198] [2023-11-26 11:58:36,991 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [207] [2023-11-26 11:58:36,992 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [234] [2023-11-26 11:58:36,992 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [333] [2023-11-26 11:58:36,992 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [575] [2023-11-26 11:58:36,992 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [640] [2023-11-26 11:58:37,019 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c[3777,3790] [2023-11-26 11:58:37,108 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 11:58:37,130 INFO L206 MainTranslator]: Completed translation [2023-11-26 11:58:37,130 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:37 WrapperNode [2023-11-26 11:58:37,130 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-26 11:58:37,131 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-26 11:58:37,132 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-26 11:58:37,132 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-26 11:58:37,140 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:37" (1/1) ... [2023-11-26 11:58:37,155 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:37" (1/1) ... [2023-11-26 11:58:37,185 INFO L138 Inliner]: procedures = 57, calls = 104, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 215 [2023-11-26 11:58:37,185 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-26 11:58:37,186 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-26 11:58:37,186 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-26 11:58:37,187 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-26 11:58:37,198 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:37" (1/1) ... [2023-11-26 11:58:37,198 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:37" (1/1) ... [2023-11-26 11:58:37,203 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:37" (1/1) ... [2023-11-26 11:58:37,220 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-26 11:58:37,221 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:37" (1/1) ... [2023-11-26 11:58:37,221 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:37" (1/1) ... [2023-11-26 11:58:37,228 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:37" (1/1) ... [2023-11-26 11:58:37,234 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:37" (1/1) ... [2023-11-26 11:58:37,236 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:37" (1/1) ... [2023-11-26 11:58:37,238 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:37" (1/1) ... [2023-11-26 11:58:37,241 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-26 11:58:37,243 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-26 11:58:37,243 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-26 11:58:37,243 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-26 11:58:37,244 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:37" (1/1) ... [2023-11-26 11:58:37,251 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 11:58:37,301 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 11:58:37,320 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-26 11:58:37,358 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-26 11:58:37,374 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-26 11:58:37,391 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-26 11:58:37,391 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-26 11:58:37,391 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-26 11:58:37,392 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-26 11:58:37,394 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-26 11:58:37,394 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-26 11:58:37,394 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-26 11:58:37,394 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-26 11:58:37,395 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 11:58:37,395 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 11:58:37,395 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-26 11:58:37,395 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-26 11:58:37,395 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-26 11:58:37,395 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-26 11:58:37,396 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-26 11:58:37,396 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-26 11:58:37,396 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-26 11:58:37,396 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-26 11:58:37,396 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-26 11:58:37,396 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-26 11:58:37,397 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-26 11:58:37,397 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-26 11:58:37,397 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-26 11:58:37,497 INFO L241 CfgBuilder]: Building ICFG [2023-11-26 11:58:37,500 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-26 11:58:37,914 INFO L282 CfgBuilder]: Performing block encoding [2023-11-26 11:58:37,999 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-26 11:58:37,999 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-26 11:58:38,000 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:58:38 BoogieIcfgContainer [2023-11-26 11:58:38,000 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-26 11:58:38,004 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-26 11:58:38,004 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-26 11:58:38,009 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-26 11:58:38,009 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 26.11 11:58:36" (1/3) ... [2023-11-26 11:58:38,010 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6099d52 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 11:58:38, skipping insertion in model container [2023-11-26 11:58:38,010 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:37" (2/3) ... [2023-11-26 11:58:38,011 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6099d52 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 11:58:38, skipping insertion in model container [2023-11-26 11:58:38,011 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:58:38" (3/3) ... [2023-11-26 11:58:38,012 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product61.cil.c [2023-11-26 11:58:38,040 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-26 11:58:38,040 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-26 11:58:38,104 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-26 11:58:38,111 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@75cf67c0, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-26 11:58:38,111 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-26 11:58:38,115 INFO L276 IsEmpty]: Start isEmpty. Operand has 88 states, 58 states have (on average 1.5) internal successors, (87), 68 states have internal predecessors, (87), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-26 11:58:38,126 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-26 11:58:38,126 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:58:38,127 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:38,127 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:58:38,132 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:58:38,133 INFO L85 PathProgramCache]: Analyzing trace with hash 945414866, now seen corresponding path program 1 times [2023-11-26 11:58:38,142 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:58:38,143 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1968730161] [2023-11-26 11:58:38,143 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:38,144 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:58:38,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:38,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-26 11:58:38,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:38,337 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:58:38,338 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:58:38,339 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1968730161] [2023-11-26 11:58:38,339 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1968730161] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:58:38,340 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:58:38,340 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-26 11:58:38,342 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1253022929] [2023-11-26 11:58:38,343 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:58:38,348 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-26 11:58:38,349 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:58:38,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-26 11:58:38,384 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 11:58:38,387 INFO L87 Difference]: Start difference. First operand has 88 states, 58 states have (on average 1.5) internal successors, (87), 68 states have internal predecessors, (87), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:58:38,460 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:58:38,460 INFO L93 Difference]: Finished difference Result 174 states and 247 transitions. [2023-11-26 11:58:38,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-26 11:58:38,463 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 16 [2023-11-26 11:58:38,464 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:58:38,475 INFO L225 Difference]: With dead ends: 174 [2023-11-26 11:58:38,475 INFO L226 Difference]: Without dead ends: 83 [2023-11-26 11:58:38,481 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 11:58:38,485 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 103 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:58:38,487 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 103 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:58:38,509 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2023-11-26 11:58:38,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 83. [2023-11-26 11:58:38,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 55 states have (on average 1.4) internal successors, (77), 64 states have internal predecessors, (77), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2023-11-26 11:58:38,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 112 transitions. [2023-11-26 11:58:38,547 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 112 transitions. Word has length 16 [2023-11-26 11:58:38,547 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:58:38,547 INFO L495 AbstractCegarLoop]: Abstraction has 83 states and 112 transitions. [2023-11-26 11:58:38,548 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:58:38,548 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 112 transitions. [2023-11-26 11:58:38,550 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-26 11:58:38,551 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:58:38,551 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:38,551 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-26 11:58:38,552 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:58:38,553 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:58:38,553 INFO L85 PathProgramCache]: Analyzing trace with hash 1394773478, now seen corresponding path program 1 times [2023-11-26 11:58:38,553 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:58:38,554 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [550835846] [2023-11-26 11:58:38,554 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:38,554 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:58:38,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:38,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-26 11:58:38,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:38,719 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:58:38,724 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:58:38,725 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [550835846] [2023-11-26 11:58:38,725 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [550835846] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:58:38,725 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:58:38,726 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 11:58:38,726 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [382205755] [2023-11-26 11:58:38,726 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:58:38,727 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 11:58:38,731 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:58:38,732 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 11:58:38,733 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:58:38,733 INFO L87 Difference]: Start difference. First operand 83 states and 112 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:58:38,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:58:38,796 INFO L93 Difference]: Finished difference Result 139 states and 187 transitions. [2023-11-26 11:58:38,796 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 11:58:38,797 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-26 11:58:38,797 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:58:38,799 INFO L225 Difference]: With dead ends: 139 [2023-11-26 11:58:38,799 INFO L226 Difference]: Without dead ends: 75 [2023-11-26 11:58:38,801 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:58:38,802 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 11 mSDsluCounter, 75 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 164 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:58:38,803 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 164 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:58:38,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2023-11-26 11:58:38,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2023-11-26 11:58:38,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 50 states have (on average 1.42) internal successors, (71), 59 states have internal predecessors, (71), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-26 11:58:38,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 101 transitions. [2023-11-26 11:58:38,819 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 101 transitions. Word has length 17 [2023-11-26 11:58:38,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:58:38,820 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 101 transitions. [2023-11-26 11:58:38,820 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:58:38,820 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 101 transitions. [2023-11-26 11:58:38,822 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-26 11:58:38,822 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:58:38,822 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:38,823 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-26 11:58:38,823 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:58:38,824 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:58:38,824 INFO L85 PathProgramCache]: Analyzing trace with hash -567555512, now seen corresponding path program 1 times [2023-11-26 11:58:38,824 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:58:38,824 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [461121246] [2023-11-26 11:58:38,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:38,825 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:58:38,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:39,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:58:39,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:39,008 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:58:39,008 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:58:39,008 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [461121246] [2023-11-26 11:58:39,008 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [461121246] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:58:39,009 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:58:39,009 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 11:58:39,009 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1827487086] [2023-11-26 11:58:39,009 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:58:39,010 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 11:58:39,010 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:58:39,012 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 11:58:39,012 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:58:39,013 INFO L87 Difference]: Start difference. First operand 75 states and 101 transitions. Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:58:39,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:58:39,093 INFO L93 Difference]: Finished difference Result 148 states and 201 transitions. [2023-11-26 11:58:39,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 11:58:39,095 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2023-11-26 11:58:39,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:58:39,098 INFO L225 Difference]: With dead ends: 148 [2023-11-26 11:58:39,100 INFO L226 Difference]: Without dead ends: 75 [2023-11-26 11:58:39,117 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:58:39,121 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 89 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:58:39,141 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [89 Valid, 87 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:58:39,145 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2023-11-26 11:58:39,155 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2023-11-26 11:58:39,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 50 states have (on average 1.4) internal successors, (70), 59 states have internal predecessors, (70), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-26 11:58:39,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 100 transitions. [2023-11-26 11:58:39,158 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 100 transitions. Word has length 20 [2023-11-26 11:58:39,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:58:39,158 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 100 transitions. [2023-11-26 11:58:39,158 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:58:39,158 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 100 transitions. [2023-11-26 11:58:39,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-26 11:58:39,160 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:58:39,161 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:39,161 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-26 11:58:39,161 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:58:39,162 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:58:39,162 INFO L85 PathProgramCache]: Analyzing trace with hash -867220679, now seen corresponding path program 1 times [2023-11-26 11:58:39,162 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:58:39,162 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112649404] [2023-11-26 11:58:39,163 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:39,163 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:58:39,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:39,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:58:39,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:39,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:58:39,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:39,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2023-11-26 11:58:39,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:39,388 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:58:39,388 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:58:39,388 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112649404] [2023-11-26 11:58:39,389 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112649404] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:58:39,389 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:58:39,389 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-26 11:58:39,389 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [111023803] [2023-11-26 11:58:39,389 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:58:39,391 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-26 11:58:39,391 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:58:39,392 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-26 11:58:39,393 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-26 11:58:39,393 INFO L87 Difference]: Start difference. First operand 75 states and 100 transitions. Second operand has 6 states, 6 states have (on average 4.333333333333333) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-26 11:58:39,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:58:39,790 INFO L93 Difference]: Finished difference Result 227 states and 301 transitions. [2023-11-26 11:58:39,791 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-26 11:58:39,791 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.333333333333333) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 33 [2023-11-26 11:58:39,792 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:58:39,794 INFO L225 Difference]: With dead ends: 227 [2023-11-26 11:58:39,794 INFO L226 Difference]: Without dead ends: 154 [2023-11-26 11:58:39,795 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=28, Invalid=62, Unknown=0, NotChecked=0, Total=90 [2023-11-26 11:58:39,797 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 146 mSDsluCounter, 208 mSDsCounter, 0 mSdLazyCounter, 204 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 153 SdHoareTripleChecker+Valid, 276 SdHoareTripleChecker+Invalid, 257 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 204 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-26 11:58:39,798 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [153 Valid, 276 Invalid, 257 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 204 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-26 11:58:39,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2023-11-26 11:58:39,825 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 148. [2023-11-26 11:58:39,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 101 states have (on average 1.316831683168317) internal successors, (133), 110 states have internal predecessors, (133), 22 states have call successors, (22), 17 states have call predecessors, (22), 24 states have return successors, (35), 26 states have call predecessors, (35), 22 states have call successors, (35) [2023-11-26 11:58:39,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 190 transitions. [2023-11-26 11:58:39,829 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 190 transitions. Word has length 33 [2023-11-26 11:58:39,830 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:58:39,830 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 190 transitions. [2023-11-26 11:58:39,830 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.333333333333333) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-26 11:58:39,831 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 190 transitions. [2023-11-26 11:58:39,832 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2023-11-26 11:58:39,833 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:58:39,833 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:39,833 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-26 11:58:39,833 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:58:39,834 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:58:39,834 INFO L85 PathProgramCache]: Analyzing trace with hash 166717757, now seen corresponding path program 1 times [2023-11-26 11:58:39,834 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:58:39,835 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [694793367] [2023-11-26 11:58:39,835 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:39,835 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:58:39,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:40,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:58:40,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:40,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:58:40,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:40,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:58:40,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:40,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-26 11:58:40,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:40,072 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:58:40,073 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:58:40,073 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [694793367] [2023-11-26 11:58:40,073 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [694793367] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:58:40,073 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:58:40,073 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 11:58:40,074 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [165676621] [2023-11-26 11:58:40,074 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:58:40,074 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 11:58:40,075 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:58:40,075 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 11:58:40,075 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:58:40,076 INFO L87 Difference]: Start difference. First operand 148 states and 190 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-26 11:58:40,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:58:40,370 INFO L93 Difference]: Finished difference Result 156 states and 196 transitions. [2023-11-26 11:58:40,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-26 11:58:40,375 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 40 [2023-11-26 11:58:40,375 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:58:40,382 INFO L225 Difference]: With dead ends: 156 [2023-11-26 11:58:40,382 INFO L226 Difference]: Without dead ends: 154 [2023-11-26 11:58:40,383 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-26 11:58:40,387 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 120 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 163 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 204 SdHoareTripleChecker+Invalid, 203 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 163 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-26 11:58:40,388 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 204 Invalid, 203 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 163 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-26 11:58:40,391 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2023-11-26 11:58:40,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 148. [2023-11-26 11:58:40,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 101 states have (on average 1.297029702970297) internal successors, (131), 110 states have internal predecessors, (131), 22 states have call successors, (22), 17 states have call predecessors, (22), 24 states have return successors, (35), 26 states have call predecessors, (35), 22 states have call successors, (35) [2023-11-26 11:58:40,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 188 transitions. [2023-11-26 11:58:40,433 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 188 transitions. Word has length 40 [2023-11-26 11:58:40,434 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:58:40,434 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 188 transitions. [2023-11-26 11:58:40,434 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-26 11:58:40,434 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 188 transitions. [2023-11-26 11:58:40,436 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-26 11:58:40,436 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:58:40,436 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:40,436 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-26 11:58:40,437 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:58:40,437 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:58:40,437 INFO L85 PathProgramCache]: Analyzing trace with hash 1787399124, now seen corresponding path program 1 times [2023-11-26 11:58:40,437 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:58:40,438 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1462311003] [2023-11-26 11:58:40,438 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:40,438 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:58:40,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:40,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:58:40,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:40,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:58:40,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:40,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:58:40,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:40,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:58:40,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:40,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-26 11:58:40,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:40,637 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:58:40,637 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:58:40,637 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1462311003] [2023-11-26 11:58:40,637 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1462311003] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:58:40,638 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:58:40,639 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 11:58:40,639 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [324832663] [2023-11-26 11:58:40,639 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:58:40,640 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 11:58:40,640 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:58:40,641 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 11:58:40,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:58:40,642 INFO L87 Difference]: Start difference. First operand 148 states and 188 transitions. Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-26 11:58:40,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:58:40,870 INFO L93 Difference]: Finished difference Result 300 states and 395 transitions. [2023-11-26 11:58:40,871 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-26 11:58:40,871 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 47 [2023-11-26 11:58:40,872 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:58:40,876 INFO L225 Difference]: With dead ends: 300 [2023-11-26 11:58:40,876 INFO L226 Difference]: Without dead ends: 154 [2023-11-26 11:58:40,877 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-26 11:58:40,881 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 60 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 150 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 216 SdHoareTripleChecker+Invalid, 171 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 150 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-26 11:58:40,882 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 216 Invalid, 171 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 150 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-26 11:58:40,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2023-11-26 11:58:40,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 150. [2023-11-26 11:58:40,912 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 150 states, 103 states have (on average 1.2912621359223302) internal successors, (133), 112 states have internal predecessors, (133), 22 states have call successors, (22), 17 states have call predecessors, (22), 24 states have return successors, (35), 26 states have call predecessors, (35), 22 states have call successors, (35) [2023-11-26 11:58:40,914 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 150 states and 190 transitions. [2023-11-26 11:58:40,914 INFO L78 Accepts]: Start accepts. Automaton has 150 states and 190 transitions. Word has length 47 [2023-11-26 11:58:40,914 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:58:40,915 INFO L495 AbstractCegarLoop]: Abstraction has 150 states and 190 transitions. [2023-11-26 11:58:40,915 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-26 11:58:40,915 INFO L276 IsEmpty]: Start isEmpty. Operand 150 states and 190 transitions. [2023-11-26 11:58:40,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-26 11:58:40,917 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:58:40,917 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:40,918 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-26 11:58:40,918 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:58:40,918 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:58:40,918 INFO L85 PathProgramCache]: Analyzing trace with hash 1849438738, now seen corresponding path program 1 times [2023-11-26 11:58:40,919 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:58:40,919 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [29446396] [2023-11-26 11:58:40,919 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:40,919 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:58:40,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:40,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:58:40,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:41,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:58:41,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:41,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:58:41,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:41,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:58:41,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:41,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-26 11:58:41,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:41,087 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:58:41,087 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:58:41,088 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [29446396] [2023-11-26 11:58:41,088 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [29446396] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:58:41,089 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:58:41,089 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-26 11:58:41,089 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [624833537] [2023-11-26 11:58:41,089 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:58:41,090 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-26 11:58:41,090 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:58:41,091 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-26 11:58:41,091 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-26 11:58:41,091 INFO L87 Difference]: Start difference. First operand 150 states and 190 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-26 11:58:41,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:58:41,376 INFO L93 Difference]: Finished difference Result 307 states and 403 transitions. [2023-11-26 11:58:41,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-26 11:58:41,376 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 47 [2023-11-26 11:58:41,377 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:58:41,378 INFO L225 Difference]: With dead ends: 307 [2023-11-26 11:58:41,378 INFO L226 Difference]: Without dead ends: 159 [2023-11-26 11:58:41,379 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2023-11-26 11:58:41,380 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 145 mSDsluCounter, 143 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 148 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 215 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-26 11:58:41,380 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [148 Valid, 208 Invalid, 215 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-26 11:58:41,381 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159 states. [2023-11-26 11:58:41,399 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159 to 152. [2023-11-26 11:58:41,399 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 105 states have (on average 1.2857142857142858) internal successors, (135), 114 states have internal predecessors, (135), 22 states have call successors, (22), 17 states have call predecessors, (22), 24 states have return successors, (35), 26 states have call predecessors, (35), 22 states have call successors, (35) [2023-11-26 11:58:41,401 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 192 transitions. [2023-11-26 11:58:41,401 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 192 transitions. Word has length 47 [2023-11-26 11:58:41,402 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:58:41,402 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 192 transitions. [2023-11-26 11:58:41,402 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-26 11:58:41,402 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 192 transitions. [2023-11-26 11:58:41,404 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-26 11:58:41,404 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:58:41,404 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:41,404 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-26 11:58:41,404 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:58:41,405 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:58:41,405 INFO L85 PathProgramCache]: Analyzing trace with hash 1339965648, now seen corresponding path program 1 times [2023-11-26 11:58:41,405 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:58:41,405 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1061117146] [2023-11-26 11:58:41,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:41,406 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:58:41,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:41,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:58:41,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:41,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:58:41,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:41,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:58:41,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:41,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:58:41,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:41,518 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-26 11:58:41,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:41,521 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:58:41,521 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:58:41,521 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1061117146] [2023-11-26 11:58:41,522 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1061117146] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:58:41,522 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:58:41,522 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 11:58:41,522 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1131996324] [2023-11-26 11:58:41,522 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:58:41,523 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 11:58:41,523 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:58:41,523 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 11:58:41,524 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:58:41,524 INFO L87 Difference]: Start difference. First operand 152 states and 192 transitions. Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-26 11:58:41,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:58:41,939 INFO L93 Difference]: Finished difference Result 471 states and 644 transitions. [2023-11-26 11:58:41,940 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-26 11:58:41,940 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 47 [2023-11-26 11:58:41,940 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:58:41,947 INFO L225 Difference]: With dead ends: 471 [2023-11-26 11:58:41,948 INFO L226 Difference]: Without dead ends: 321 [2023-11-26 11:58:41,949 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-26 11:58:41,951 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 210 mSDsluCounter, 163 mSDsCounter, 0 mSdLazyCounter, 260 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 285 SdHoareTripleChecker+Invalid, 342 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 260 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-26 11:58:41,953 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [218 Valid, 285 Invalid, 342 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 260 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-26 11:58:41,955 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 321 states. [2023-11-26 11:58:42,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 321 to 317. [2023-11-26 11:58:42,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 317 states, 220 states have (on average 1.2863636363636364) internal successors, (283), 235 states have internal predecessors, (283), 49 states have call successors, (49), 43 states have call predecessors, (49), 47 states have return successors, (86), 50 states have call predecessors, (86), 49 states have call successors, (86) [2023-11-26 11:58:42,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 317 states to 317 states and 418 transitions. [2023-11-26 11:58:42,027 INFO L78 Accepts]: Start accepts. Automaton has 317 states and 418 transitions. Word has length 47 [2023-11-26 11:58:42,028 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:58:42,028 INFO L495 AbstractCegarLoop]: Abstraction has 317 states and 418 transitions. [2023-11-26 11:58:42,028 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-26 11:58:42,028 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 418 transitions. [2023-11-26 11:58:42,031 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-26 11:58:42,031 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:58:42,031 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:42,032 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-26 11:58:42,032 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:58:42,032 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:58:42,033 INFO L85 PathProgramCache]: Analyzing trace with hash 2129281706, now seen corresponding path program 1 times [2023-11-26 11:58:42,033 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:58:42,033 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2142683130] [2023-11-26 11:58:42,033 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:42,034 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:58:42,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:42,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:58:42,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:42,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-26 11:58:42,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:42,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:58:42,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:42,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:58:42,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:42,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:58:42,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:42,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-26 11:58:42,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:42,384 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:58:42,385 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:58:42,385 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2142683130] [2023-11-26 11:58:42,385 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2142683130] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:58:42,385 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:58:42,385 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2023-11-26 11:58:42,386 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [366512097] [2023-11-26 11:58:42,386 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:58:42,387 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2023-11-26 11:58:42,387 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:58:42,388 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2023-11-26 11:58:42,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2023-11-26 11:58:42,388 INFO L87 Difference]: Start difference. First operand 317 states and 418 transitions. Second operand has 12 states, 10 states have (on average 3.7) internal successors, (37), 7 states have internal predecessors, (37), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-26 11:58:43,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:58:43,479 INFO L93 Difference]: Finished difference Result 1015 states and 1402 transitions. [2023-11-26 11:58:43,480 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2023-11-26 11:58:43,481 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 10 states have (on average 3.7) internal successors, (37), 7 states have internal predecessors, (37), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 51 [2023-11-26 11:58:43,481 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:58:43,487 INFO L225 Difference]: With dead ends: 1015 [2023-11-26 11:58:43,487 INFO L226 Difference]: Without dead ends: 700 [2023-11-26 11:58:43,489 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 256 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2023-11-26 11:58:43,490 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 444 mSDsluCounter, 278 mSDsCounter, 0 mSdLazyCounter, 691 mSolverCounterSat, 234 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 451 SdHoareTripleChecker+Valid, 321 SdHoareTripleChecker+Invalid, 925 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 234 IncrementalHoareTripleChecker+Valid, 691 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-26 11:58:43,491 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [451 Valid, 321 Invalid, 925 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [234 Valid, 691 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-26 11:58:43,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 700 states. [2023-11-26 11:58:43,573 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 700 to 688. [2023-11-26 11:58:43,574 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 688 states, 474 states have (on average 1.2447257383966244) internal successors, (590), 510 states have internal predecessors, (590), 115 states have call successors, (115), 84 states have call predecessors, (115), 98 states have return successors, (221), 115 states have call predecessors, (221), 115 states have call successors, (221) [2023-11-26 11:58:43,582 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 688 states to 688 states and 926 transitions. [2023-11-26 11:58:43,582 INFO L78 Accepts]: Start accepts. Automaton has 688 states and 926 transitions. Word has length 51 [2023-11-26 11:58:43,583 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:58:43,583 INFO L495 AbstractCegarLoop]: Abstraction has 688 states and 926 transitions. [2023-11-26 11:58:43,583 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 10 states have (on average 3.7) internal successors, (37), 7 states have internal predecessors, (37), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-26 11:58:43,584 INFO L276 IsEmpty]: Start isEmpty. Operand 688 states and 926 transitions. [2023-11-26 11:58:43,587 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2023-11-26 11:58:43,588 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:58:43,588 INFO L195 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:43,588 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-26 11:58:43,588 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:58:43,589 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:58:43,589 INFO L85 PathProgramCache]: Analyzing trace with hash 135949448, now seen corresponding path program 1 times [2023-11-26 11:58:43,589 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:58:43,590 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1308458216] [2023-11-26 11:58:43,590 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:43,590 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:58:43,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:58:43,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:58:43,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-26 11:58:43,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:58:43,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:58:43,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:58:43,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-26 11:58:43,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2023-11-26 11:58:43,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2023-11-26 11:58:43,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:58:43,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-26 11:58:43,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:58:43,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:58:43,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2023-11-26 11:58:43,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:43,937 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 11 proven. 10 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2023-11-26 11:58:43,938 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:58:43,938 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1308458216] [2023-11-26 11:58:43,938 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1308458216] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-26 11:58:43,938 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1449996344] [2023-11-26 11:58:43,938 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:43,939 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 11:58:43,939 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 11:58:43,945 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-26 11:58:43,977 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-26 11:58:44,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:44,083 INFO L262 TraceCheckSpWp]: Trace formula consists of 347 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-26 11:58:44,093 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-26 11:58:44,308 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 33 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-26 11:58:44,308 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-26 11:58:44,308 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1449996344] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:58:44,309 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-26 11:58:44,309 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2023-11-26 11:58:44,309 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [870190875] [2023-11-26 11:58:44,309 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:58:44,311 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-26 11:58:44,312 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:58:44,312 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-26 11:58:44,313 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2023-11-26 11:58:44,313 INFO L87 Difference]: Start difference. First operand 688 states and 926 transitions. Second operand has 8 states, 6 states have (on average 11.5) internal successors, (69), 6 states have internal predecessors, (69), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-26 11:58:44,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:58:44,633 INFO L93 Difference]: Finished difference Result 1469 states and 1970 transitions. [2023-11-26 11:58:44,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-26 11:58:44,634 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 11.5) internal successors, (69), 6 states have internal predecessors, (69), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 102 [2023-11-26 11:58:44,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:58:44,638 INFO L225 Difference]: With dead ends: 1469 [2023-11-26 11:58:44,639 INFO L226 Difference]: Without dead ends: 0 [2023-11-26 11:58:44,645 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 120 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2023-11-26 11:58:44,646 INFO L413 NwaCegarLoop]: 151 mSDtfsCounter, 59 mSDsluCounter, 593 mSDsCounter, 0 mSdLazyCounter, 200 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 744 SdHoareTripleChecker+Invalid, 203 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 200 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-26 11:58:44,647 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 744 Invalid, 203 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 200 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-26 11:58:44,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-26 11:58:44,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-26 11:58:44,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 11:58:44,649 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-26 11:58:44,650 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 102 [2023-11-26 11:58:44,650 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:58:44,650 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-26 11:58:44,651 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 11.5) internal successors, (69), 6 states have internal predecessors, (69), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-26 11:58:44,651 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-26 11:58:44,651 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-26 11:58:44,654 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-26 11:58:44,690 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-26 11:58:44,861 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-26 11:58:44,863 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-26 11:58:47,691 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 473 480) no Hoare annotation was computed. [2023-11-26 11:58:47,691 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 473 480) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-26 11:58:47,691 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 363 369) no Hoare annotation was computed. [2023-11-26 11:58:47,691 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 363 369) the Hoare annotation is: true [2023-11-26 11:58:47,692 INFO L895 garLoopResultBuilder]: At program point L411(line 411) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_~tmp~3#1| 0)) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-26 11:58:47,692 INFO L895 garLoopResultBuilder]: At program point L407(line 407) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-26 11:58:47,692 INFO L899 garLoopResultBuilder]: For program point L405(lines 405 413) no Hoare annotation was computed. [2023-11-26 11:58:47,692 INFO L899 garLoopResultBuilder]: For program point L401(lines 401 418) no Hoare annotation was computed. [2023-11-26 11:58:47,692 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 397 421) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-26 11:58:47,693 INFO L895 garLoopResultBuilder]: At program point L416(line 416) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse2)) (or (not .cse2) .cse1 .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-26 11:58:47,693 INFO L899 garLoopResultBuilder]: For program point L416-1(lines 397 421) no Hoare annotation was computed. [2023-11-26 11:58:47,693 INFO L899 garLoopResultBuilder]: For program point L565(lines 565 569) no Hoare annotation was computed. [2023-11-26 11:58:47,693 INFO L899 garLoopResultBuilder]: For program point L565-2(lines 565 569) no Hoare annotation was computed. [2023-11-26 11:58:47,693 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 397 421) no Hoare annotation was computed. [2023-11-26 11:58:47,693 INFO L899 garLoopResultBuilder]: For program point L126-1(lines 122 133) no Hoare annotation was computed. [2023-11-26 11:58:47,693 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 122 133) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (<= 1 ~methaneLevelCritical~0) (not (= ~pumpRunning~0 0)) .cse0 (< |old(~methaneLevelCritical~0)| 1)) (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 0) .cse0))) [2023-11-26 11:58:47,693 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 122 133) no Hoare annotation was computed. [2023-11-26 11:58:47,694 INFO L899 garLoopResultBuilder]: For program point L221(lines 221 227) no Hoare annotation was computed. [2023-11-26 11:58:47,694 INFO L899 garLoopResultBuilder]: For program point L217(lines 217 230) no Hoare annotation was computed. [2023-11-26 11:58:47,694 INFO L899 garLoopResultBuilder]: For program point L217-1(lines 209 233) no Hoare annotation was computed. [2023-11-26 11:58:47,694 INFO L899 garLoopResultBuilder]: For program point L102(lines 102 106) no Hoare annotation was computed. [2023-11-26 11:58:47,694 INFO L899 garLoopResultBuilder]: For program point L102-2(lines 98 109) no Hoare annotation was computed. [2023-11-26 11:58:47,694 INFO L899 garLoopResultBuilder]: For program point L350-1(lines 350 356) no Hoare annotation was computed. [2023-11-26 11:58:47,694 INFO L895 garLoopResultBuilder]: At program point L437(line 437) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or (< 1 |old(~waterLevel~0)|) .cse0 (<= ~waterLevel~0 1) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-26 11:58:47,695 INFO L895 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse3 (< 1 |old(~waterLevel~0)|)) (.cse4 (<= ~waterLevel~0 1)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse4 .cse5) (or .cse1 (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~4#1|)) .cse5) (or .cse6 .cse1 .cse5) (or .cse3 .cse1 .cse4 .cse2) (or .cse6 .cse1 .cse2))) [2023-11-26 11:58:47,695 INFO L895 garLoopResultBuilder]: At program point L429(line 429) the Hoare annotation is: (let ((.cse8 (= 1 ~systemActive~0)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse3 (< 1 |old(~waterLevel~0)|)) (.cse4 (and .cse7 (<= ~waterLevel~0 1))) (.cse2 (< ~methaneLevelCritical~0 1)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse8)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse1 (and .cse7 .cse8))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 .cse2) (or .cse3 .cse4 .cse0 .cse5) (or .cse6 .cse0 .cse2) (or .cse6 .cse0 .cse5) (or .cse0 .cse5 .cse1)))) [2023-11-26 11:58:47,695 INFO L899 garLoopResultBuilder]: For program point L429-1(line 429) no Hoare annotation was computed. [2023-11-26 11:58:47,695 INFO L895 garLoopResultBuilder]: At program point L442(line 442) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 0) (= |old(~pumpRunning~0)| 0) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-26 11:58:47,695 INFO L899 garLoopResultBuilder]: For program point L442-1(lines 423 447) no Hoare annotation was computed. [2023-11-26 11:58:47,695 INFO L895 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse8 (= 1 ~systemActive~0))) (let ((.cse4 (< 1 |old(~waterLevel~0)|)) (.cse5 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not .cse8)) (.cse7 (and (= ~pumpRunning~0 0) .cse8)) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse5 .cse3) (or .cse4 .cse1 .cse5 .cse6) (or .cse0 .cse1 .cse6 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (<= 2 ~waterLevel~0) .cse6 .cse7) (or .cse1 .cse7 .cse3)))) [2023-11-26 11:58:47,696 INFO L899 garLoopResultBuilder]: For program point L343-1(lines 342 361) no Hoare annotation was computed. [2023-11-26 11:58:47,696 INFO L899 garLoopResultBuilder]: For program point L215-1(line 215) no Hoare annotation was computed. [2023-11-26 11:58:47,696 INFO L899 garLoopResultBuilder]: For program point L203(line 203) no Hoare annotation was computed. [2023-11-26 11:58:47,696 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 339 362) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-26 11:58:47,696 INFO L899 garLoopResultBuilder]: For program point L431(lines 431 439) no Hoare annotation was computed. [2023-11-26 11:58:47,696 INFO L899 garLoopResultBuilder]: For program point L427(lines 427 444) no Hoare annotation was computed. [2023-11-26 11:58:47,696 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 339 362) no Hoare annotation was computed. [2023-11-26 11:58:47,696 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 203) no Hoare annotation was computed. [2023-11-26 11:58:47,697 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 237 266) no Hoare annotation was computed. [2023-11-26 11:58:47,697 INFO L899 garLoopResultBuilder]: For program point L251(lines 251 255) no Hoare annotation was computed. [2023-11-26 11:58:47,697 INFO L902 garLoopResultBuilder]: At program point L251-1(lines 251 255) the Hoare annotation is: true [2023-11-26 11:58:47,697 INFO L902 garLoopResultBuilder]: At program point L247-2(lines 247 261) the Hoare annotation is: true [2023-11-26 11:58:47,697 INFO L902 garLoopResultBuilder]: At program point L243(line 243) the Hoare annotation is: true [2023-11-26 11:58:47,697 INFO L899 garLoopResultBuilder]: For program point L243-1(line 243) no Hoare annotation was computed. [2023-11-26 11:58:47,697 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 237 266) the Hoare annotation is: true [2023-11-26 11:58:47,697 INFO L899 garLoopResultBuilder]: For program point L262(lines 237 266) no Hoare annotation was computed. [2023-11-26 11:58:47,698 INFO L899 garLoopResultBuilder]: For program point L258(line 258) no Hoare annotation was computed. [2023-11-26 11:58:47,698 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 134 142) the Hoare annotation is: true [2023-11-26 11:58:47,698 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 134 142) no Hoare annotation was computed. [2023-11-26 11:58:47,698 INFO L899 garLoopResultBuilder]: For program point L320(lines 320 327) no Hoare annotation was computed. [2023-11-26 11:58:47,698 INFO L899 garLoopResultBuilder]: For program point L320-2(lines 320 327) no Hoare annotation was computed. [2023-11-26 11:58:47,698 INFO L899 garLoopResultBuilder]: For program point L622(lines 622 626) no Hoare annotation was computed. [2023-11-26 11:58:47,699 INFO L895 garLoopResultBuilder]: At program point L622-2(lines 616 627) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2023-11-26 11:58:47,699 INFO L899 garLoopResultBuilder]: For program point L606(lines 606 612) no Hoare annotation was computed. [2023-11-26 11:58:47,699 INFO L899 garLoopResultBuilder]: For program point L606-1(lines 606 612) no Hoare annotation was computed. [2023-11-26 11:58:47,699 INFO L899 garLoopResultBuilder]: For program point L635(lines 576 639) no Hoare annotation was computed. [2023-11-26 11:58:47,699 INFO L895 garLoopResultBuilder]: At program point L598(line 598) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2023-11-26 11:58:47,699 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-26 11:58:47,700 INFO L895 garLoopResultBuilder]: At program point L632(lines 585 633) the Hoare annotation is: false [2023-11-26 11:58:47,700 INFO L899 garLoopResultBuilder]: For program point L587(lines 586 631) no Hoare annotation was computed. [2023-11-26 11:58:47,700 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-26 11:58:47,700 INFO L899 garLoopResultBuilder]: For program point L616(lines 616 627) no Hoare annotation was computed. [2023-11-26 11:58:47,700 INFO L895 garLoopResultBuilder]: At program point L608(line 608) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2023-11-26 11:58:47,701 INFO L895 garLoopResultBuilder]: At program point L629(lines 586 631) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2023-11-26 11:58:47,701 INFO L899 garLoopResultBuilder]: For program point L596(lines 596 602) no Hoare annotation was computed. [2023-11-26 11:58:47,701 INFO L899 garLoopResultBuilder]: For program point L596-1(lines 596 602) no Hoare annotation was computed. [2023-11-26 11:58:47,701 INFO L899 garLoopResultBuilder]: For program point L463(lines 463 469) no Hoare annotation was computed. [2023-11-26 11:58:47,701 INFO L895 garLoopResultBuilder]: At program point L461(line 461) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 1 ~systemActive~0))) (let ((.cse1 (not .cse3)) (.cse2 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) .cse3 .cse0))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2)))) [2023-11-26 11:58:47,701 INFO L899 garLoopResultBuilder]: For program point L463-2(lines 456 472) no Hoare annotation was computed. [2023-11-26 11:58:47,702 INFO L899 garLoopResultBuilder]: For program point L461-1(line 461) no Hoare annotation was computed. [2023-11-26 11:58:47,702 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 371 395) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-26 11:58:47,702 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 175 188) no Hoare annotation was computed. [2023-11-26 11:58:47,702 INFO L899 garLoopResultBuilder]: For program point L546(lines 546 550) no Hoare annotation was computed. [2023-11-26 11:58:47,702 INFO L895 garLoopResultBuilder]: At program point L385(line 385) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 1 ~systemActive~0))) (let ((.cse1 (not .cse3)) (.cse2 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) .cse3 .cse0))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)))))) [2023-11-26 11:58:47,703 INFO L899 garLoopResultBuilder]: For program point L546-2(lines 546 550) no Hoare annotation was computed. [2023-11-26 11:58:47,703 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 371 395) no Hoare annotation was computed. [2023-11-26 11:58:47,703 INFO L899 garLoopResultBuilder]: For program point L379(lines 379 387) no Hoare annotation was computed. [2023-11-26 11:58:47,703 INFO L899 garLoopResultBuilder]: For program point L375(lines 375 392) no Hoare annotation was computed. [2023-11-26 11:58:47,703 INFO L899 garLoopResultBuilder]: For program point L179(lines 179 185) no Hoare annotation was computed. [2023-11-26 11:58:47,704 INFO L895 garLoopResultBuilder]: At program point L390(line 390) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-26 11:58:47,704 INFO L899 garLoopResultBuilder]: For program point L390-1(lines 371 395) no Hoare annotation was computed. [2023-11-26 11:58:47,704 INFO L899 garLoopResultBuilder]: For program point L114-1(lines 110 121) no Hoare annotation was computed. [2023-11-26 11:58:47,704 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 110 121) no Hoare annotation was computed. [2023-11-26 11:58:47,704 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 110 121) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (< ~methaneLevelCritical~0 1)))) [2023-11-26 11:58:47,704 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 481 491) no Hoare annotation was computed. [2023-11-26 11:58:47,705 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 481 491) the Hoare annotation is: true [2023-11-26 11:58:47,705 INFO L902 garLoopResultBuilder]: At program point L486(line 486) the Hoare annotation is: true [2023-11-26 11:58:47,705 INFO L899 garLoopResultBuilder]: For program point L486-1(line 486) no Hoare annotation was computed. [2023-11-26 11:58:47,707 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:47,709 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-26 11:58:47,721 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 26.11 11:58:47 BoogieIcfgContainer [2023-11-26 11:58:47,721 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-26 11:58:47,722 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-26 11:58:47,722 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-26 11:58:47,722 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-26 11:58:47,723 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:58:38" (3/4) ... [2023-11-26 11:58:47,725 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-26 11:58:47,728 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-26 11:58:47,729 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-26 11:58:47,729 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-26 11:58:47,729 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-26 11:58:47,729 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-26 11:58:47,729 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-26 11:58:47,730 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-26 11:58:47,730 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-26 11:58:47,730 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-26 11:58:47,730 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-26 11:58:47,744 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 35 nodes and edges [2023-11-26 11:58:47,745 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-26 11:58:47,746 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-26 11:58:47,746 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 11:58:47,747 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 11:58:47,895 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/witness.graphml [2023-11-26 11:58:47,896 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/witness.yml [2023-11-26 11:58:47,896 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-26 11:58:47,897 INFO L158 Benchmark]: Toolchain (without parser) took 11346.10ms. Allocated memory was 132.1MB in the beginning and 211.8MB in the end (delta: 79.7MB). Free memory was 85.2MB in the beginning and 165.5MB in the end (delta: -80.3MB). Peak memory consumption was 2.5MB. Max. memory is 16.1GB. [2023-11-26 11:58:47,897 INFO L158 Benchmark]: CDTParser took 0.39ms. Allocated memory is still 132.1MB. Free memory is still 103.8MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-26 11:58:47,897 INFO L158 Benchmark]: CACSL2BoogieTranslator took 575.86ms. Allocated memory is still 132.1MB. Free memory was 84.8MB in the beginning and 65.0MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-26 11:58:47,898 INFO L158 Benchmark]: Boogie Procedure Inliner took 54.17ms. Allocated memory is still 132.1MB. Free memory was 65.0MB in the beginning and 63.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-26 11:58:47,898 INFO L158 Benchmark]: Boogie Preprocessor took 55.45ms. Allocated memory is still 132.1MB. Free memory was 63.0MB in the beginning and 60.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-26 11:58:47,899 INFO L158 Benchmark]: RCFGBuilder took 757.90ms. Allocated memory was 132.1MB in the beginning and 176.2MB in the end (delta: 44.0MB). Free memory was 60.4MB in the beginning and 128.9MB in the end (delta: -68.4MB). Peak memory consumption was 9.9MB. Max. memory is 16.1GB. [2023-11-26 11:58:47,899 INFO L158 Benchmark]: TraceAbstraction took 9718.01ms. Allocated memory was 176.2MB in the beginning and 211.8MB in the end (delta: 35.7MB). Free memory was 128.0MB in the beginning and 173.9MB in the end (delta: -45.9MB). Peak memory consumption was 108.1MB. Max. memory is 16.1GB. [2023-11-26 11:58:47,900 INFO L158 Benchmark]: Witness Printer took 173.97ms. Allocated memory is still 211.8MB. Free memory was 173.9MB in the beginning and 165.5MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-26 11:58:47,903 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.39ms. Allocated memory is still 132.1MB. Free memory is still 103.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 575.86ms. Allocated memory is still 132.1MB. Free memory was 84.8MB in the beginning and 65.0MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 54.17ms. Allocated memory is still 132.1MB. Free memory was 65.0MB in the beginning and 63.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 55.45ms. Allocated memory is still 132.1MB. Free memory was 63.0MB in the beginning and 60.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 757.90ms. Allocated memory was 132.1MB in the beginning and 176.2MB in the end (delta: 44.0MB). Free memory was 60.4MB in the beginning and 128.9MB in the end (delta: -68.4MB). Peak memory consumption was 9.9MB. Max. memory is 16.1GB. * TraceAbstraction took 9718.01ms. Allocated memory was 176.2MB in the beginning and 211.8MB in the end (delta: 35.7MB). Free memory was 128.0MB in the beginning and 173.9MB in the end (delta: -45.9MB). Peak memory consumption was 108.1MB. Max. memory is 16.1GB. * Witness Printer took 173.97ms. Allocated memory is still 211.8MB. Free memory was 173.9MB in the beginning and 165.5MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [87] - GenericResultAtLocation [Line: 198]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [198] - GenericResultAtLocation [Line: 207]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [207] - GenericResultAtLocation [Line: 234]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [234] - GenericResultAtLocation [Line: 333]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [333] - GenericResultAtLocation [Line: 575]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [575] - GenericResultAtLocation [Line: 640]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [640] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 203]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 88 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.6s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1326 SdHoareTripleChecker+Valid, 2.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1284 mSDsluCounter, 2608 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1746 mSDsCounter, 482 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1884 IncrementalHoareTripleChecker+Invalid, 2366 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 482 mSolverCounterUnsat, 862 mSDtfsCounter, 1884 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 297 GetRequests, 210 SyntacticMatches, 0 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 312 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=688occurred in iteration=9, InterpolantAutomatonStates: 82, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 10 MinimizatonAttempts, 39 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 30 LocationsWithAnnotation, 981 PreInvPairs, 1174 NumberOfFragments, 877 HoareAnnotationTreeSize, 981 FomulaSimplifications, 2286 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 30 FomulaSimplificationsInter, 6412 FormulaSimplificationTreeSizeReductionInter, 2.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 522 NumberOfCodeBlocks, 522 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 511 ConstructedInterpolants, 0 QuantifiedInterpolants, 914 SizeOfPredicates, 3 NumberOfNonLiveVariables, 347 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 11 InterpolantComputations, 10 PerfectInterpolantSequences, 78/88 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 247]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 585]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: ((((methaneLevelCritical == 0) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0))) RESULT: Ultimate proved your program to be correct! [2023-11-26 11:58:47,941 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_99dad868-d27e-4aca-92a8-5b8d9b8a4b5b/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE