./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 03:10:18,770 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 03:10:18,831 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 03:10:18,835 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 03:10:18,836 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 03:10:18,862 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 03:10:18,863 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 03:10:18,863 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 03:10:18,864 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 03:10:18,864 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 03:10:18,865 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 03:10:18,865 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 03:10:18,866 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 03:10:18,867 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 03:10:18,867 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 03:10:18,868 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 03:10:18,868 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 03:10:18,869 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 03:10:18,869 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 03:10:18,870 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 03:10:18,870 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 03:10:18,870 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 03:10:18,871 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 03:10:18,871 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 03:10:18,871 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 03:10:18,872 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 03:10:18,872 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 03:10:18,873 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 03:10:18,873 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 03:10:18,874 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 03:10:18,874 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 03:10:18,874 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 03:10:18,875 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 03:10:18,875 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 03:10:18,876 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 03:10:18,876 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 03:10:18,876 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 03:10:18,877 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 03:10:18,877 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 03:10:18,877 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 03:10:18,877 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 03:10:18,878 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 03:10:18,878 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e [2023-11-29 03:10:19,094 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 03:10:19,115 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 03:10:19,118 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 03:10:19,119 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 03:10:19,120 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 03:10:19,121 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2023-11-29 03:10:21,827 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 03:10:22,035 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 03:10:22,035 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2023-11-29 03:10:22,051 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/data/2c32eafe9/fea6dba57795429188ebc9dbb0c37aa7/FLAG8a63bc1cf [2023-11-29 03:10:22,065 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/data/2c32eafe9/fea6dba57795429188ebc9dbb0c37aa7 [2023-11-29 03:10:22,067 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 03:10:22,069 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 03:10:22,070 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 03:10:22,070 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 03:10:22,075 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 03:10:22,075 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 03:10:22" (1/1) ... [2023-11-29 03:10:22,076 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7413c5a2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22, skipping insertion in model container [2023-11-29 03:10:22,076 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 03:10:22" (1/1) ... [2023-11-29 03:10:22,126 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 03:10:22,357 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2023-11-29 03:10:22,361 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 03:10:22,372 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 03:10:22,382 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] [2023-11-29 03:10:22,384 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [124] [2023-11-29 03:10:22,384 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [354] [2023-11-29 03:10:22,384 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [455] [2023-11-29 03:10:22,385 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [495] [2023-11-29 03:10:22,385 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [530] [2023-11-29 03:10:22,385 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [634] [2023-11-29 03:10:22,386 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1000] [2023-11-29 03:10:22,442 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2023-11-29 03:10:22,443 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 03:10:22,464 INFO L206 MainTranslator]: Completed translation [2023-11-29 03:10:22,464 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22 WrapperNode [2023-11-29 03:10:22,464 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 03:10:22,465 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 03:10:22,465 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 03:10:22,466 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 03:10:22,473 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22" (1/1) ... [2023-11-29 03:10:22,487 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22" (1/1) ... [2023-11-29 03:10:22,509 INFO L138 Inliner]: procedures = 58, calls = 102, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 212 [2023-11-29 03:10:22,509 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 03:10:22,510 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 03:10:22,510 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 03:10:22,510 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 03:10:22,519 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22" (1/1) ... [2023-11-29 03:10:22,519 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22" (1/1) ... [2023-11-29 03:10:22,521 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22" (1/1) ... [2023-11-29 03:10:22,533 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 03:10:22,534 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22" (1/1) ... [2023-11-29 03:10:22,534 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22" (1/1) ... [2023-11-29 03:10:22,539 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22" (1/1) ... [2023-11-29 03:10:22,543 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22" (1/1) ... [2023-11-29 03:10:22,545 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22" (1/1) ... [2023-11-29 03:10:22,546 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22" (1/1) ... [2023-11-29 03:10:22,547 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 03:10:22,548 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 03:10:22,548 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 03:10:22,548 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 03:10:22,549 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22" (1/1) ... [2023-11-29 03:10:22,555 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 03:10:22,564 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:10:22,592 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 03:10:22,594 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 03:10:22,621 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 03:10:22,621 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-29 03:10:22,621 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-29 03:10:22,621 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-29 03:10:22,622 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-29 03:10:22,622 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 03:10:22,622 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 03:10:22,622 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 03:10:22,622 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 03:10:22,622 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 03:10:22,622 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 03:10:22,623 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 03:10:22,623 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 03:10:22,623 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-29 03:10:22,623 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-29 03:10:22,623 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 03:10:22,623 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 03:10:22,624 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 03:10:22,624 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 03:10:22,624 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 03:10:22,699 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 03:10:22,701 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 03:10:22,928 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 03:10:22,994 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 03:10:22,995 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 03:10:22,995 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 03:10:22 BoogieIcfgContainer [2023-11-29 03:10:22,995 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 03:10:22,997 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 03:10:22,997 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 03:10:23,000 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 03:10:23,001 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 03:10:22" (1/3) ... [2023-11-29 03:10:23,001 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@63626439 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 03:10:23, skipping insertion in model container [2023-11-29 03:10:23,001 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:10:22" (2/3) ... [2023-11-29 03:10:23,002 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@63626439 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 03:10:23, skipping insertion in model container [2023-11-29 03:10:23,002 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 03:10:22" (3/3) ... [2023-11-29 03:10:23,003 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product52.cil.c [2023-11-29 03:10:23,021 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 03:10:23,022 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 03:10:23,065 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 03:10:23,071 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6b630fc3, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 03:10:23,071 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 03:10:23,075 INFO L276 IsEmpty]: Start isEmpty. Operand has 74 states, 51 states have (on average 1.5490196078431373) internal successors, (79), 60 states have internal predecessors, (79), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-29 03:10:23,082 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-29 03:10:23,082 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:10:23,082 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:10:23,083 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:10:23,086 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:10:23,087 INFO L85 PathProgramCache]: Analyzing trace with hash 149002175, now seen corresponding path program 1 times [2023-11-29 03:10:23,093 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:10:23,093 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [848351055] [2023-11-29 03:10:23,093 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:23,094 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:10:23,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:23,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 03:10:23,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:23,249 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:10:23,249 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:10:23,249 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [848351055] [2023-11-29 03:10:23,250 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [848351055] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:10:23,250 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:10:23,250 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 03:10:23,252 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [727086013] [2023-11-29 03:10:23,253 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:10:23,256 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 03:10:23,256 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:10:23,281 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 03:10:23,281 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 03:10:23,283 INFO L87 Difference]: Start difference. First operand has 74 states, 51 states have (on average 1.5490196078431373) internal successors, (79), 60 states have internal predecessors, (79), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:10:23,339 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:10:23,339 INFO L93 Difference]: Finished difference Result 146 states and 211 transitions. [2023-11-29 03:10:23,340 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 03:10:23,341 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-29 03:10:23,342 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:10:23,351 INFO L225 Difference]: With dead ends: 146 [2023-11-29 03:10:23,351 INFO L226 Difference]: Without dead ends: 69 [2023-11-29 03:10:23,354 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 03:10:23,357 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 84 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:10:23,358 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 84 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:10:23,370 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2023-11-29 03:10:23,391 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2023-11-29 03:10:23,393 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 48 states have (on average 1.4375) internal successors, (69), 56 states have internal predecessors, (69), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-29 03:10:23,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 94 transitions. [2023-11-29 03:10:23,396 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 94 transitions. Word has length 17 [2023-11-29 03:10:23,397 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:10:23,397 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 94 transitions. [2023-11-29 03:10:23,397 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:10:23,397 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 94 transitions. [2023-11-29 03:10:23,399 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-29 03:10:23,399 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:10:23,400 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:10:23,400 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 03:10:23,400 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:10:23,401 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:10:23,401 INFO L85 PathProgramCache]: Analyzing trace with hash 1711369592, now seen corresponding path program 1 times [2023-11-29 03:10:23,401 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:10:23,401 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1113281720] [2023-11-29 03:10:23,401 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:23,402 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:10:23,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:23,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-29 03:10:23,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:23,494 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:10:23,495 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:10:23,495 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1113281720] [2023-11-29 03:10:23,495 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1113281720] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:10:23,495 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:10:23,495 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 03:10:23,495 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1115096604] [2023-11-29 03:10:23,496 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:10:23,497 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 03:10:23,497 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:10:23,498 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 03:10:23,498 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:10:23,498 INFO L87 Difference]: Start difference. First operand 69 states and 94 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:10:23,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:10:23,536 INFO L93 Difference]: Finished difference Result 108 states and 146 transitions. [2023-11-29 03:10:23,536 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 03:10:23,536 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-11-29 03:10:23,536 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:10:23,538 INFO L225 Difference]: With dead ends: 108 [2023-11-29 03:10:23,538 INFO L226 Difference]: Without dead ends: 61 [2023-11-29 03:10:23,539 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:10:23,540 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 14 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:10:23,541 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 124 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:10:23,542 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2023-11-29 03:10:23,549 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2023-11-29 03:10:23,550 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 43 states have (on average 1.4651162790697674) internal successors, (63), 51 states have internal predecessors, (63), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-29 03:10:23,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 83 transitions. [2023-11-29 03:10:23,551 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 83 transitions. Word has length 18 [2023-11-29 03:10:23,552 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:10:23,552 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 83 transitions. [2023-11-29 03:10:23,552 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:10:23,552 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 83 transitions. [2023-11-29 03:10:23,553 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-29 03:10:23,553 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:10:23,554 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:10:23,554 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 03:10:23,554 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:10:23,555 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:10:23,555 INFO L85 PathProgramCache]: Analyzing trace with hash -212216258, now seen corresponding path program 1 times [2023-11-29 03:10:23,555 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:10:23,555 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [574151493] [2023-11-29 03:10:23,555 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:23,556 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:10:23,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:23,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:10:23,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:23,630 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:10:23,631 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:10:23,631 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [574151493] [2023-11-29 03:10:23,631 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [574151493] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:10:23,631 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:10:23,631 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 03:10:23,632 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1629736845] [2023-11-29 03:10:23,632 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:10:23,632 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 03:10:23,632 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:10:23,633 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 03:10:23,633 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:10:23,633 INFO L87 Difference]: Start difference. First operand 61 states and 83 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:10:23,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:10:23,689 INFO L93 Difference]: Finished difference Result 179 states and 246 transitions. [2023-11-29 03:10:23,689 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 03:10:23,689 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2023-11-29 03:10:23,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:10:23,691 INFO L225 Difference]: With dead ends: 179 [2023-11-29 03:10:23,692 INFO L226 Difference]: Without dead ends: 120 [2023-11-29 03:10:23,693 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:10:23,694 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 77 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 149 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:10:23,695 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 149 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:10:23,696 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2023-11-29 03:10:23,711 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 117. [2023-11-29 03:10:23,712 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 82 states have (on average 1.475609756097561) internal successors, (121), 97 states have internal predecessors, (121), 20 states have call successors, (20), 14 states have call predecessors, (20), 14 states have return successors, (20), 13 states have call predecessors, (20), 20 states have call successors, (20) [2023-11-29 03:10:23,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 161 transitions. [2023-11-29 03:10:23,714 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 161 transitions. Word has length 21 [2023-11-29 03:10:23,714 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:10:23,715 INFO L495 AbstractCegarLoop]: Abstraction has 117 states and 161 transitions. [2023-11-29 03:10:23,715 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:10:23,715 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 161 transitions. [2023-11-29 03:10:23,717 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-29 03:10:23,717 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:10:23,717 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:10:23,717 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 03:10:23,717 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:10:23,718 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:10:23,718 INFO L85 PathProgramCache]: Analyzing trace with hash 1449497159, now seen corresponding path program 1 times [2023-11-29 03:10:23,718 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:10:23,718 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1786857763] [2023-11-29 03:10:23,718 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:23,719 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:10:23,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:23,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-29 03:10:23,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:23,819 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:10:23,819 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:10:23,819 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1786857763] [2023-11-29 03:10:23,819 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1786857763] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:10:23,820 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:10:23,820 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-29 03:10:23,820 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1499614548] [2023-11-29 03:10:23,820 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:10:23,820 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 03:10:23,820 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:10:23,821 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 03:10:23,821 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 03:10:23,821 INFO L87 Difference]: Start difference. First operand 117 states and 161 transitions. Second operand has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:10:23,908 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:10:23,908 INFO L93 Difference]: Finished difference Result 310 states and 433 transitions. [2023-11-29 03:10:23,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 03:10:23,909 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2023-11-29 03:10:23,909 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:10:23,911 INFO L225 Difference]: With dead ends: 310 [2023-11-29 03:10:23,912 INFO L226 Difference]: Without dead ends: 195 [2023-11-29 03:10:23,914 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 03:10:23,915 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 56 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 03:10:23,916 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 188 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 03:10:23,917 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2023-11-29 03:10:23,940 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 190. [2023-11-29 03:10:23,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 190 states, 135 states have (on average 1.4) internal successors, (189), 150 states have internal predecessors, (189), 28 states have call successors, (28), 26 states have call predecessors, (28), 26 states have return successors, (36), 25 states have call predecessors, (36), 28 states have call successors, (36) [2023-11-29 03:10:23,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 190 states to 190 states and 253 transitions. [2023-11-29 03:10:23,943 INFO L78 Accepts]: Start accepts. Automaton has 190 states and 253 transitions. Word has length 24 [2023-11-29 03:10:23,943 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:10:23,944 INFO L495 AbstractCegarLoop]: Abstraction has 190 states and 253 transitions. [2023-11-29 03:10:23,944 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:10:23,944 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 253 transitions. [2023-11-29 03:10:23,946 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-29 03:10:23,946 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:10:23,946 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:10:23,946 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 03:10:23,946 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:10:23,947 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:10:23,947 INFO L85 PathProgramCache]: Analyzing trace with hash -1581538435, now seen corresponding path program 1 times [2023-11-29 03:10:23,947 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:10:23,947 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1115553146] [2023-11-29 03:10:23,947 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:23,947 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:10:23,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:24,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:10:24,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:24,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-29 03:10:24,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:24,034 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:10:24,034 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:10:24,034 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1115553146] [2023-11-29 03:10:24,034 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1115553146] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:10:24,034 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:10:24,035 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 03:10:24,035 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [383331203] [2023-11-29 03:10:24,035 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:10:24,035 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 03:10:24,035 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:10:24,036 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 03:10:24,036 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 03:10:24,036 INFO L87 Difference]: Start difference. First operand 190 states and 253 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 03:10:24,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:10:24,195 INFO L93 Difference]: Finished difference Result 422 states and 569 transitions. [2023-11-29 03:10:24,196 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 03:10:24,196 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 33 [2023-11-29 03:10:24,197 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:10:24,199 INFO L225 Difference]: With dead ends: 422 [2023-11-29 03:10:24,199 INFO L226 Difference]: Without dead ends: 234 [2023-11-29 03:10:24,200 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-29 03:10:24,202 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 49 mSDsluCounter, 132 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 133 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 03:10:24,202 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 191 Invalid, 133 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 03:10:24,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 234 states. [2023-11-29 03:10:24,225 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 234 to 232. [2023-11-29 03:10:24,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 232 states, 167 states have (on average 1.3712574850299402) internal successors, (229), 182 states have internal predecessors, (229), 32 states have call successors, (32), 26 states have call predecessors, (32), 32 states have return successors, (46), 33 states have call predecessors, (46), 32 states have call successors, (46) [2023-11-29 03:10:24,228 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 307 transitions. [2023-11-29 03:10:24,228 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 307 transitions. Word has length 33 [2023-11-29 03:10:24,229 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:10:24,229 INFO L495 AbstractCegarLoop]: Abstraction has 232 states and 307 transitions. [2023-11-29 03:10:24,229 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 03:10:24,229 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 307 transitions. [2023-11-29 03:10:24,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-29 03:10:24,231 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:10:24,231 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:10:24,232 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-29 03:10:24,232 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:10:24,232 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:10:24,232 INFO L85 PathProgramCache]: Analyzing trace with hash 1433565183, now seen corresponding path program 1 times [2023-11-29 03:10:24,232 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:10:24,233 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [402498336] [2023-11-29 03:10:24,233 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:24,233 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:10:24,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:24,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:10:24,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:24,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-29 03:10:24,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:24,316 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:10:24,316 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:10:24,316 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [402498336] [2023-11-29 03:10:24,316 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [402498336] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:10:24,316 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:10:24,317 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 03:10:24,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1833170491] [2023-11-29 03:10:24,317 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:10:24,317 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 03:10:24,317 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:10:24,318 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 03:10:24,318 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 03:10:24,318 INFO L87 Difference]: Start difference. First operand 232 states and 307 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 03:10:24,483 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:10:24,483 INFO L93 Difference]: Finished difference Result 478 states and 649 transitions. [2023-11-29 03:10:24,485 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 03:10:24,485 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 33 [2023-11-29 03:10:24,485 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:10:24,488 INFO L225 Difference]: With dead ends: 478 [2023-11-29 03:10:24,488 INFO L226 Difference]: Without dead ends: 248 [2023-11-29 03:10:24,489 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-29 03:10:24,490 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 55 mSDsluCounter, 131 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 03:10:24,491 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 189 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 03:10:24,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248 states. [2023-11-29 03:10:24,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248 to 236. [2023-11-29 03:10:24,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 236 states, 171 states have (on average 1.3625730994152048) internal successors, (233), 186 states have internal predecessors, (233), 32 states have call successors, (32), 26 states have call predecessors, (32), 32 states have return successors, (46), 33 states have call predecessors, (46), 32 states have call successors, (46) [2023-11-29 03:10:24,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 311 transitions. [2023-11-29 03:10:24,531 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 311 transitions. Word has length 33 [2023-11-29 03:10:24,531 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:10:24,531 INFO L495 AbstractCegarLoop]: Abstraction has 236 states and 311 transitions. [2023-11-29 03:10:24,531 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 03:10:24,531 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 311 transitions. [2023-11-29 03:10:24,533 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-29 03:10:24,533 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:10:24,533 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:10:24,534 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-29 03:10:24,534 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:10:24,534 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:10:24,535 INFO L85 PathProgramCache]: Analyzing trace with hash -154782719, now seen corresponding path program 1 times [2023-11-29 03:10:24,535 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:10:24,535 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2028269519] [2023-11-29 03:10:24,535 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:24,535 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:10:24,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:24,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:10:24,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:24,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-29 03:10:24,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:24,624 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:10:24,625 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:10:24,625 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2028269519] [2023-11-29 03:10:24,625 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2028269519] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:10:24,625 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:10:24,625 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 03:10:24,625 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2024839968] [2023-11-29 03:10:24,626 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:10:24,626 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 03:10:24,626 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:10:24,627 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 03:10:24,627 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 03:10:24,627 INFO L87 Difference]: Start difference. First operand 236 states and 311 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 03:10:24,955 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:10:24,955 INFO L93 Difference]: Finished difference Result 775 states and 1093 transitions. [2023-11-29 03:10:24,955 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-29 03:10:24,955 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 33 [2023-11-29 03:10:24,956 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:10:24,960 INFO L225 Difference]: With dead ends: 775 [2023-11-29 03:10:24,960 INFO L226 Difference]: Without dead ends: 541 [2023-11-29 03:10:24,962 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-29 03:10:24,962 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 182 mSDsluCounter, 161 mSDsCounter, 0 mSdLazyCounter, 230 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 188 SdHoareTripleChecker+Valid, 278 SdHoareTripleChecker+Invalid, 283 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 230 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 03:10:24,963 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [188 Valid, 278 Invalid, 283 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 230 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 03:10:24,964 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 541 states. [2023-11-29 03:10:25,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 541 to 533. [2023-11-29 03:10:25,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 533 states, 384 states have (on average 1.3463541666666667) internal successors, (517), 413 states have internal predecessors, (517), 78 states have call successors, (78), 71 states have call predecessors, (78), 70 states have return successors, (128), 72 states have call predecessors, (128), 78 states have call successors, (128) [2023-11-29 03:10:25,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 533 states to 533 states and 723 transitions. [2023-11-29 03:10:25,014 INFO L78 Accepts]: Start accepts. Automaton has 533 states and 723 transitions. Word has length 33 [2023-11-29 03:10:25,014 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:10:25,014 INFO L495 AbstractCegarLoop]: Abstraction has 533 states and 723 transitions. [2023-11-29 03:10:25,014 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 03:10:25,015 INFO L276 IsEmpty]: Start isEmpty. Operand 533 states and 723 transitions. [2023-11-29 03:10:25,016 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2023-11-29 03:10:25,016 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:10:25,017 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:10:25,017 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-29 03:10:25,017 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:10:25,017 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:10:25,018 INFO L85 PathProgramCache]: Analyzing trace with hash 1327300251, now seen corresponding path program 1 times [2023-11-29 03:10:25,018 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:10:25,018 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2134599814] [2023-11-29 03:10:25,018 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:25,018 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:10:25,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:25,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:10:25,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:25,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 03:10:25,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:25,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-29 03:10:25,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:25,087 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:10:25,087 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:10:25,087 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2134599814] [2023-11-29 03:10:25,087 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2134599814] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:10:25,087 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:10:25,088 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 03:10:25,088 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [31209609] [2023-11-29 03:10:25,088 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:10:25,088 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 03:10:25,088 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:10:25,089 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 03:10:25,089 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 03:10:25,089 INFO L87 Difference]: Start difference. First operand 533 states and 723 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-29 03:10:25,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:10:25,466 INFO L93 Difference]: Finished difference Result 1147 states and 1649 transitions. [2023-11-29 03:10:25,467 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-29 03:10:25,468 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 37 [2023-11-29 03:10:25,468 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:10:25,477 INFO L225 Difference]: With dead ends: 1147 [2023-11-29 03:10:25,477 INFO L226 Difference]: Without dead ends: 1145 [2023-11-29 03:10:25,478 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-29 03:10:25,479 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 257 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 109 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 261 SdHoareTripleChecker+Valid, 147 SdHoareTripleChecker+Invalid, 266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 109 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-29 03:10:25,479 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [261 Valid, 147 Invalid, 266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [109 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-29 03:10:25,481 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1145 states. [2023-11-29 03:10:25,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1145 to 1038. [2023-11-29 03:10:25,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1038 states, 746 states have (on average 1.3471849865951742) internal successors, (1005), 814 states have internal predecessors, (1005), 162 states have call successors, (162), 121 states have call predecessors, (162), 129 states have return successors, (343), 139 states have call predecessors, (343), 162 states have call successors, (343) [2023-11-29 03:10:25,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1038 states to 1038 states and 1510 transitions. [2023-11-29 03:10:25,588 INFO L78 Accepts]: Start accepts. Automaton has 1038 states and 1510 transitions. Word has length 37 [2023-11-29 03:10:25,588 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:10:25,589 INFO L495 AbstractCegarLoop]: Abstraction has 1038 states and 1510 transitions. [2023-11-29 03:10:25,589 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-29 03:10:25,589 INFO L276 IsEmpty]: Start isEmpty. Operand 1038 states and 1510 transitions. [2023-11-29 03:10:25,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-11-29 03:10:25,593 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:10:25,594 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:10:25,594 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-29 03:10:25,594 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:10:25,594 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:10:25,594 INFO L85 PathProgramCache]: Analyzing trace with hash 1694581556, now seen corresponding path program 1 times [2023-11-29 03:10:25,595 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:10:25,595 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1471373962] [2023-11-29 03:10:25,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:25,595 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:10:25,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:25,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:10:25,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:25,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-29 03:10:25,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:25,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:10:25,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:25,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 03:10:25,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:25,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-29 03:10:25,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:25,684 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 03:10:25,684 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:10:25,684 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1471373962] [2023-11-29 03:10:25,684 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1471373962] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:10:25,684 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:10:25,684 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-29 03:10:25,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [850573519] [2023-11-29 03:10:25,684 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:10:25,685 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-29 03:10:25,685 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:10:25,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-29 03:10:25,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-29 03:10:25,686 INFO L87 Difference]: Start difference. First operand 1038 states and 1510 transitions. Second operand has 7 states, 6 states have (on average 8.5) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-29 03:10:26,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:10:26,088 INFO L93 Difference]: Finished difference Result 1662 states and 2401 transitions. [2023-11-29 03:10:26,089 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-29 03:10:26,089 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 8.5) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 63 [2023-11-29 03:10:26,089 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:10:26,094 INFO L225 Difference]: With dead ends: 1662 [2023-11-29 03:10:26,094 INFO L226 Difference]: Without dead ends: 626 [2023-11-29 03:10:26,098 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2023-11-29 03:10:26,099 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 239 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 238 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 247 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 305 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 238 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 03:10:26,099 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [247 Valid, 203 Invalid, 305 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 238 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 03:10:26,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 626 states. [2023-11-29 03:10:26,156 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 626 to 587. [2023-11-29 03:10:26,157 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 587 states, 427 states have (on average 1.3278688524590163) internal successors, (567), 461 states have internal predecessors, (567), 86 states have call successors, (86), 69 states have call predecessors, (86), 73 states have return successors, (173), 80 states have call predecessors, (173), 86 states have call successors, (173) [2023-11-29 03:10:26,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 587 states to 587 states and 826 transitions. [2023-11-29 03:10:26,163 INFO L78 Accepts]: Start accepts. Automaton has 587 states and 826 transitions. Word has length 63 [2023-11-29 03:10:26,163 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:10:26,163 INFO L495 AbstractCegarLoop]: Abstraction has 587 states and 826 transitions. [2023-11-29 03:10:26,163 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 8.5) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-29 03:10:26,163 INFO L276 IsEmpty]: Start isEmpty. Operand 587 states and 826 transitions. [2023-11-29 03:10:26,166 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2023-11-29 03:10:26,166 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:10:26,166 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:10:26,166 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-29 03:10:26,166 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:10:26,166 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:10:26,167 INFO L85 PathProgramCache]: Analyzing trace with hash -1098289702, now seen corresponding path program 1 times [2023-11-29 03:10:26,167 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:10:26,167 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [651481062] [2023-11-29 03:10:26,167 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:26,167 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:10:26,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:10:26,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:10:26,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:10:26,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 03:10:26,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,295 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2023-11-29 03:10:26,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2023-11-29 03:10:26,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,302 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 17 proven. 4 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-29 03:10:26,302 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:10:26,302 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [651481062] [2023-11-29 03:10:26,302 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [651481062] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:10:26,302 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1174084904] [2023-11-29 03:10:26,302 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:26,303 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:10:26,303 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:10:26,304 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:10:26,307 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-29 03:10:26,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,397 INFO L262 TraceCheckSpWp]: Trace formula consists of 289 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-29 03:10:26,404 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:10:26,462 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:10:26,463 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 03:10:26,463 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1174084904] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:10:26,463 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 03:10:26,463 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 8 [2023-11-29 03:10:26,464 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1368335274] [2023-11-29 03:10:26,464 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:10:26,464 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 03:10:26,464 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:10:26,464 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 03:10:26,465 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-29 03:10:26,465 INFO L87 Difference]: Start difference. First operand 587 states and 826 transitions. Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-29 03:10:26,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:10:26,537 INFO L93 Difference]: Finished difference Result 1085 states and 1539 transitions. [2023-11-29 03:10:26,538 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 03:10:26,538 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 69 [2023-11-29 03:10:26,539 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:10:26,542 INFO L225 Difference]: With dead ends: 1085 [2023-11-29 03:10:26,542 INFO L226 Difference]: Without dead ends: 500 [2023-11-29 03:10:26,544 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 87 GetRequests, 81 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-29 03:10:26,545 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 40 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 35 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 35 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:10:26,545 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 150 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 35 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:10:26,546 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 500 states. [2023-11-29 03:10:26,597 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 500 to 500. [2023-11-29 03:10:26,598 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 500 states, 364 states have (on average 1.2967032967032968) internal successors, (472), 392 states have internal predecessors, (472), 72 states have call successors, (72), 63 states have call predecessors, (72), 63 states have return successors, (108), 68 states have call predecessors, (108), 72 states have call successors, (108) [2023-11-29 03:10:26,601 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 500 states to 500 states and 652 transitions. [2023-11-29 03:10:26,601 INFO L78 Accepts]: Start accepts. Automaton has 500 states and 652 transitions. Word has length 69 [2023-11-29 03:10:26,601 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:10:26,602 INFO L495 AbstractCegarLoop]: Abstraction has 500 states and 652 transitions. [2023-11-29 03:10:26,602 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-29 03:10:26,602 INFO L276 IsEmpty]: Start isEmpty. Operand 500 states and 652 transitions. [2023-11-29 03:10:26,603 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2023-11-29 03:10:26,603 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:10:26,603 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:10:26,609 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-29 03:10:26,804 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-29 03:10:26,804 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:10:26,805 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:10:26,805 INFO L85 PathProgramCache]: Analyzing trace with hash 914529793, now seen corresponding path program 1 times [2023-11-29 03:10:26,805 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:10:26,805 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1382198867] [2023-11-29 03:10:26,805 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:26,805 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:10:26,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:10:26,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:10:26,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:10:26,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 03:10:26,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-29 03:10:26,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:10:26,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-29 03:10:26,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,907 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2023-11-29 03:10:26,908 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:10:26,908 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1382198867] [2023-11-29 03:10:26,908 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1382198867] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:10:26,908 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [585267320] [2023-11-29 03:10:26,908 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:26,908 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:10:26,908 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:10:26,909 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:10:26,911 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-29 03:10:26,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:26,998 INFO L262 TraceCheckSpWp]: Trace formula consists of 291 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-29 03:10:27,001 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:10:27,019 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-11-29 03:10:27,020 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 03:10:27,020 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [585267320] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:10:27,020 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 03:10:27,020 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [7] total 8 [2023-11-29 03:10:27,020 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [808245917] [2023-11-29 03:10:27,020 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:10:27,021 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 03:10:27,021 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:10:27,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 03:10:27,021 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-29 03:10:27,022 INFO L87 Difference]: Start difference. First operand 500 states and 652 transitions. Second operand has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-29 03:10:27,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:10:27,122 INFO L93 Difference]: Finished difference Result 1016 states and 1349 transitions. [2023-11-29 03:10:27,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 03:10:27,123 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 72 [2023-11-29 03:10:27,123 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:10:27,127 INFO L225 Difference]: With dead ends: 1016 [2023-11-29 03:10:27,127 INFO L226 Difference]: Without dead ends: 518 [2023-11-29 03:10:27,129 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 89 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-29 03:10:27,129 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 1 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:10:27,130 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 206 Invalid, 47 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:10:27,131 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 518 states. [2023-11-29 03:10:27,172 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 518 to 506. [2023-11-29 03:10:27,173 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 506 states, 370 states have (on average 1.2918918918918918) internal successors, (478), 398 states have internal predecessors, (478), 72 states have call successors, (72), 63 states have call predecessors, (72), 63 states have return successors, (108), 68 states have call predecessors, (108), 72 states have call successors, (108) [2023-11-29 03:10:27,177 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 506 states to 506 states and 658 transitions. [2023-11-29 03:10:27,177 INFO L78 Accepts]: Start accepts. Automaton has 506 states and 658 transitions. Word has length 72 [2023-11-29 03:10:27,177 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:10:27,177 INFO L495 AbstractCegarLoop]: Abstraction has 506 states and 658 transitions. [2023-11-29 03:10:27,178 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-29 03:10:27,178 INFO L276 IsEmpty]: Start isEmpty. Operand 506 states and 658 transitions. [2023-11-29 03:10:27,179 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2023-11-29 03:10:27,179 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:10:27,180 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:10:27,185 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-29 03:10:27,380 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-29 03:10:27,380 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:10:27,381 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:10:27,381 INFO L85 PathProgramCache]: Analyzing trace with hash 491827967, now seen corresponding path program 1 times [2023-11-29 03:10:27,381 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:10:27,381 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [995958638] [2023-11-29 03:10:27,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:27,381 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:10:27,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:27,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:10:27,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:27,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:10:27,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:27,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:10:27,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:27,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 03:10:27,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:27,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-29 03:10:27,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:27,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:10:27,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:27,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-29 03:10:27,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:27,589 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 18 proven. 1 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-29 03:10:27,589 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:10:27,590 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [995958638] [2023-11-29 03:10:27,590 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [995958638] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:10:27,590 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [96715267] [2023-11-29 03:10:27,590 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:10:27,590 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:10:27,590 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:10:27,591 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:10:27,598 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-29 03:10:27,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:10:27,690 INFO L262 TraceCheckSpWp]: Trace formula consists of 290 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-29 03:10:27,694 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:10:27,787 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:10:27,787 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 03:10:27,787 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [96715267] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:10:27,787 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 03:10:27,788 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2023-11-29 03:10:27,788 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [431850158] [2023-11-29 03:10:27,788 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:10:27,788 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 03:10:27,788 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:10:27,789 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 03:10:27,789 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=130, Unknown=0, NotChecked=0, Total=156 [2023-11-29 03:10:27,790 INFO L87 Difference]: Start difference. First operand 506 states and 658 transitions. Second operand has 5 states, 5 states have (on average 11.4) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-29 03:10:27,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:10:27,917 INFO L93 Difference]: Finished difference Result 829 states and 1075 transitions. [2023-11-29 03:10:27,918 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 03:10:27,918 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 72 [2023-11-29 03:10:27,918 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:10:27,919 INFO L225 Difference]: With dead ends: 829 [2023-11-29 03:10:27,919 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 03:10:27,921 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 79 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=152, Unknown=0, NotChecked=0, Total=182 [2023-11-29 03:10:27,922 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 96 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 79 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 88 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 79 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 03:10:27,922 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 224 Invalid, 88 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 79 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 03:10:27,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 03:10:27,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 03:10:27,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 03:10:27,923 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 03:10:27,923 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 72 [2023-11-29 03:10:27,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:10:27,924 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 03:10:27,924 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-29 03:10:27,924 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 03:10:27,924 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 03:10:27,927 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 03:10:27,932 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2023-11-29 03:10:28,133 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2023-11-29 03:10:28,135 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 03:10:29,705 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 229 236) no Hoare annotation was computed. [2023-11-29 03:10:29,705 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 229 236) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1))) (and (or .cse0 (< ~waterLevel~0 1) (not (= 1 ~systemActive~0)) .cse1) (or .cse0 .cse1 (< ~waterLevel~0 2) (= 0 ~systemActive~0)))) [2023-11-29 03:10:29,706 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 162 168) no Hoare annotation was computed. [2023-11-29 03:10:29,706 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 162 168) the Hoare annotation is: true [2023-11-29 03:10:29,706 INFO L899 garLoopResultBuilder]: For program point L562-1(lines 558 569) no Hoare annotation was computed. [2023-11-29 03:10:29,706 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 558 569) the Hoare annotation is: true [2023-11-29 03:10:29,706 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 558 569) no Hoare annotation was computed. [2023-11-29 03:10:29,706 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 570 578) the Hoare annotation is: true [2023-11-29 03:10:29,706 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 570 578) no Hoare annotation was computed. [2023-11-29 03:10:29,706 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 356 385) no Hoare annotation was computed. [2023-11-29 03:10:29,706 INFO L899 garLoopResultBuilder]: For program point L381(lines 356 385) no Hoare annotation was computed. [2023-11-29 03:10:29,706 INFO L899 garLoopResultBuilder]: For program point L377(line 377) no Hoare annotation was computed. [2023-11-29 03:10:29,706 INFO L899 garLoopResultBuilder]: For program point L370(lines 370 374) no Hoare annotation was computed. [2023-11-29 03:10:29,707 INFO L902 garLoopResultBuilder]: At program point L370-1(lines 370 374) the Hoare annotation is: true [2023-11-29 03:10:29,707 INFO L902 garLoopResultBuilder]: At program point L366-2(lines 366 380) the Hoare annotation is: true [2023-11-29 03:10:29,707 INFO L902 garLoopResultBuilder]: At program point L362(line 362) the Hoare annotation is: true [2023-11-29 03:10:29,707 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 356 385) the Hoare annotation is: true [2023-11-29 03:10:29,707 INFO L899 garLoopResultBuilder]: For program point L362-1(line 362) no Hoare annotation was computed. [2023-11-29 03:10:29,707 INFO L899 garLoopResultBuilder]: For program point L321(lines 321 325) no Hoare annotation was computed. [2023-11-29 03:10:29,707 INFO L899 garLoopResultBuilder]: For program point L321-2(lines 321 325) no Hoare annotation was computed. [2023-11-29 03:10:29,707 INFO L899 garLoopResultBuilder]: For program point L478(lines 478 488) no Hoare annotation was computed. [2023-11-29 03:10:29,707 INFO L899 garLoopResultBuilder]: For program point L474(lines 474 491) no Hoare annotation was computed. [2023-11-29 03:10:29,707 INFO L899 garLoopResultBuilder]: For program point L474-1(lines 466 494) no Hoare annotation was computed. [2023-11-29 03:10:29,708 INFO L895 garLoopResultBuilder]: At program point L210(line 210) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< |old(~waterLevel~0)| 1)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (< |old(~pumpRunning~0)| 1)) (or .cse1 .cse2 (not (= 0 ~systemActive~0))) (or .cse1 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse2 .cse0))) [2023-11-29 03:10:29,708 INFO L895 garLoopResultBuilder]: At program point L206(line 206) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< |old(~waterLevel~0)| 1)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (< |old(~pumpRunning~0)| 1)) (or .cse1 .cse2 (not (= 0 ~systemActive~0))) (or .cse1 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse2 .cse0))) [2023-11-29 03:10:29,708 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2023-11-29 03:10:29,708 INFO L895 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< |old(~waterLevel~0)| 1))) (and (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse1 .cse2 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 (< |old(~waterLevel~0)| 2) (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 (not (= 0 ~systemActive~0))))) [2023-11-29 03:10:29,708 INFO L899 garLoopResultBuilder]: For program point L215-1(lines 196 220) no Hoare annotation was computed. [2023-11-29 03:10:29,708 INFO L899 garLoopResultBuilder]: For program point L149-1(lines 149 155) no Hoare annotation was computed. [2023-11-29 03:10:29,709 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 138 161) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse3 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (< |old(~waterLevel~0)| 1)) (.cse7 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse3) (< |old(~pumpRunning~0)| 1)) (or .cse4 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse5 .cse0 (and .cse6 (= ~methAndRunningLastTime~0 0) .cse2)) (or .cse4 .cse1 (and .cse6 .cse2 .cse3) .cse7) (or (< 1 |old(~waterLevel~0)|) (and .cse6 .cse3 (= ~waterLevel~0 1)) .cse4 .cse5 .cse7))) [2023-11-29 03:10:29,709 INFO L899 garLoopResultBuilder]: For program point L538(lines 538 542) no Hoare annotation was computed. [2023-11-29 03:10:29,709 INFO L899 garLoopResultBuilder]: For program point L538-2(lines 534 545) no Hoare annotation was computed. [2023-11-29 03:10:29,709 INFO L895 garLoopResultBuilder]: At program point L472(line 472) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< |old(~waterLevel~0)| 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (< |old(~pumpRunning~0)| 1) (and .cse1 (<= 1 ~waterLevel~0))) (or .cse2 .cse3 (and .cse1 .cse4 .cse5) (not (= 0 ~systemActive~0))) (or .cse2 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse3 .cse0 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse4) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse5)))) [2023-11-29 03:10:29,709 INFO L899 garLoopResultBuilder]: For program point L472-1(line 472) no Hoare annotation was computed. [2023-11-29 03:10:29,709 INFO L899 garLoopResultBuilder]: For program point L142-1(lines 141 160) no Hoare annotation was computed. [2023-11-29 03:10:29,710 INFO L899 garLoopResultBuilder]: For program point L1005(line 1005) no Hoare annotation was computed. [2023-11-29 03:10:29,710 INFO L899 garLoopResultBuilder]: For program point L204(lines 204 212) no Hoare annotation was computed. [2023-11-29 03:10:29,710 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 138 161) no Hoare annotation was computed. [2023-11-29 03:10:29,710 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1005) no Hoare annotation was computed. [2023-11-29 03:10:29,710 INFO L899 garLoopResultBuilder]: For program point L200(lines 200 217) no Hoare annotation was computed. [2023-11-29 03:10:29,710 INFO L895 garLoopResultBuilder]: At program point L337(line 337) the Hoare annotation is: (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-29 03:10:29,710 INFO L899 garLoopResultBuilder]: For program point L119(lines 56 123) no Hoare annotation was computed. [2023-11-29 03:10:29,710 INFO L899 garLoopResultBuilder]: For program point L86(lines 86 92) no Hoare annotation was computed. [2023-11-29 03:10:29,710 INFO L899 garLoopResultBuilder]: For program point L86-1(lines 86 92) no Hoare annotation was computed. [2023-11-29 03:10:29,711 INFO L895 garLoopResultBuilder]: At program point L78(line 78) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~waterLevel~0))) (or (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse3 .cse0 .cse1 .cse4) (and .cse2 .cse3 .cse1 .cse4 (= 0 ~systemActive~0)))) [2023-11-29 03:10:29,711 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 03:10:29,711 INFO L899 garLoopResultBuilder]: For program point L442(lines 442 449) no Hoare annotation was computed. [2023-11-29 03:10:29,711 INFO L899 garLoopResultBuilder]: For program point L442-2(lines 442 449) no Hoare annotation was computed. [2023-11-29 03:10:29,711 INFO L895 garLoopResultBuilder]: At program point L116(lines 65 117) the Hoare annotation is: false [2023-11-29 03:10:29,711 INFO L899 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2023-11-29 03:10:29,711 INFO L899 garLoopResultBuilder]: For program point L335-1(lines 335 341) no Hoare annotation was computed. [2023-11-29 03:10:29,711 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 03:10:29,711 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 110) no Hoare annotation was computed. [2023-11-29 03:10:29,712 INFO L895 garLoopResultBuilder]: At program point L104-2(lines 96 111) the Hoare annotation is: (let ((.cse1 (= 1 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (<= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= 0 ~systemActive~0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2) (and .cse3 .cse2 .cse4 (= ~waterLevel~0 1)) (and .cse3 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse3 .cse0 .cse2 .cse4))) [2023-11-29 03:10:29,712 INFO L899 garLoopResultBuilder]: For program point L67(lines 66 115) no Hoare annotation was computed. [2023-11-29 03:10:29,712 INFO L899 garLoopResultBuilder]: For program point L96(lines 96 111) no Hoare annotation was computed. [2023-11-29 03:10:29,712 INFO L895 garLoopResultBuilder]: At program point L88(line 88) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~waterLevel~0))) (or (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse3 .cse0 .cse1 .cse4) (and .cse2 .cse3 .cse1 .cse4 (= 0 ~systemActive~0)))) [2023-11-29 03:10:29,712 INFO L895 garLoopResultBuilder]: At program point L113(lines 66 115) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~waterLevel~0))) (or (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse3 .cse0 .cse1 .cse4) (and .cse2 .cse3 .cse1 .cse4 (= 0 ~systemActive~0)))) [2023-11-29 03:10:29,712 INFO L899 garLoopResultBuilder]: For program point L76(lines 76 82) no Hoare annotation was computed. [2023-11-29 03:10:29,712 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2023-11-29 03:10:29,712 INFO L895 garLoopResultBuilder]: At program point L184(line 184) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (not (= 1 ~systemActive~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)) (not (= ~methAndRunningLastTime~0 0))) [2023-11-29 03:10:29,713 INFO L899 garLoopResultBuilder]: For program point L178(lines 178 186) no Hoare annotation was computed. [2023-11-29 03:10:29,713 INFO L899 garLoopResultBuilder]: For program point L174(lines 174 191) no Hoare annotation was computed. [2023-11-29 03:10:29,713 INFO L899 garLoopResultBuilder]: For program point L302(lines 302 306) no Hoare annotation was computed. [2023-11-29 03:10:29,713 INFO L899 garLoopResultBuilder]: For program point L302-2(lines 302 306) no Hoare annotation was computed. [2023-11-29 03:10:29,713 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 170 194) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (< ~waterLevel~0 1) (not (= 1 ~systemActive~0)) (not (= ~methAndRunningLastTime~0 0))) [2023-11-29 03:10:29,713 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 611 624) no Hoare annotation was computed. [2023-11-29 03:10:29,713 INFO L895 garLoopResultBuilder]: At program point L189(line 189) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (not (= 1 ~systemActive~0)) (not (= ~methAndRunningLastTime~0 0))) [2023-11-29 03:10:29,713 INFO L899 garLoopResultBuilder]: For program point L189-1(lines 170 194) no Hoare annotation was computed. [2023-11-29 03:10:29,713 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 170 194) no Hoare annotation was computed. [2023-11-29 03:10:29,714 INFO L899 garLoopResultBuilder]: For program point L615(lines 615 621) no Hoare annotation was computed. [2023-11-29 03:10:29,714 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 546 557) no Hoare annotation was computed. [2023-11-29 03:10:29,714 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 546 557) the Hoare annotation is: (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse5 (< |old(~waterLevel~0)| 1)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (< 1 |old(~waterLevel~0)|) .cse5 .cse0 (= ~waterLevel~0 1) .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse2 .cse3) (or (< ~pumpRunning~0 1) .cse6 .cse1 .cse2))) [2023-11-29 03:10:29,714 INFO L899 garLoopResultBuilder]: For program point L550-1(lines 546 557) no Hoare annotation was computed. [2023-11-29 03:10:29,716 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:10:29,718 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 03:10:29,728 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 03:10:29 BoogieIcfgContainer [2023-11-29 03:10:29,728 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 03:10:29,729 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 03:10:29,729 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 03:10:29,729 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 03:10:29,729 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 03:10:22" (3/4) ... [2023-11-29 03:10:29,731 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 03:10:29,733 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-29 03:10:29,733 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-29 03:10:29,734 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 03:10:29,734 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-29 03:10:29,734 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 03:10:29,734 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 03:10:29,734 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 03:10:29,734 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 03:10:29,741 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 33 nodes and edges [2023-11-29 03:10:29,742 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 03:10:29,743 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 03:10:29,743 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 03:10:29,744 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 03:10:29,836 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 03:10:29,837 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 03:10:29,837 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 03:10:29,838 INFO L158 Benchmark]: Toolchain (without parser) took 7769.12ms. Allocated memory was 161.5MB in the beginning and 239.1MB in the end (delta: 77.6MB). Free memory was 121.7MB in the beginning and 139.5MB in the end (delta: -17.7MB). Peak memory consumption was 60.3MB. Max. memory is 16.1GB. [2023-11-29 03:10:29,838 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 107.0MB. Free memory is still 57.9MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 03:10:29,839 INFO L158 Benchmark]: CACSL2BoogieTranslator took 394.63ms. Allocated memory is still 161.5MB. Free memory was 121.7MB in the beginning and 101.8MB in the end (delta: 19.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-29 03:10:29,839 INFO L158 Benchmark]: Boogie Procedure Inliner took 44.14ms. Allocated memory is still 161.5MB. Free memory was 101.8MB in the beginning and 99.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 03:10:29,839 INFO L158 Benchmark]: Boogie Preprocessor took 37.74ms. Allocated memory is still 161.5MB. Free memory was 99.4MB in the beginning and 97.4MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 03:10:29,840 INFO L158 Benchmark]: RCFGBuilder took 447.06ms. Allocated memory is still 161.5MB. Free memory was 97.0MB in the beginning and 125.9MB in the end (delta: -28.9MB). Peak memory consumption was 24.2MB. Max. memory is 16.1GB. [2023-11-29 03:10:29,840 INFO L158 Benchmark]: TraceAbstraction took 6730.93ms. Allocated memory was 161.5MB in the beginning and 239.1MB in the end (delta: 77.6MB). Free memory was 125.3MB in the beginning and 146.8MB in the end (delta: -21.5MB). Peak memory consumption was 137.7MB. Max. memory is 16.1GB. [2023-11-29 03:10:29,841 INFO L158 Benchmark]: Witness Printer took 108.75ms. Allocated memory is still 239.1MB. Free memory was 146.8MB in the beginning and 139.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-29 03:10:29,843 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 107.0MB. Free memory is still 57.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 394.63ms. Allocated memory is still 161.5MB. Free memory was 121.7MB in the beginning and 101.8MB in the end (delta: 19.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 44.14ms. Allocated memory is still 161.5MB. Free memory was 101.8MB in the beginning and 99.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 37.74ms. Allocated memory is still 161.5MB. Free memory was 99.4MB in the beginning and 97.4MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 447.06ms. Allocated memory is still 161.5MB. Free memory was 97.0MB in the beginning and 125.9MB in the end (delta: -28.9MB). Peak memory consumption was 24.2MB. Max. memory is 16.1GB. * TraceAbstraction took 6730.93ms. Allocated memory was 161.5MB in the beginning and 239.1MB in the end (delta: 77.6MB). Free memory was 125.3MB in the beginning and 146.8MB in the end (delta: -21.5MB). Peak memory consumption was 137.7MB. Max. memory is 16.1GB. * Witness Printer took 108.75ms. Allocated memory is still 239.1MB. Free memory was 146.8MB in the beginning and 139.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] - GenericResultAtLocation [Line: 124]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [124] - GenericResultAtLocation [Line: 354]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [354] - GenericResultAtLocation [Line: 455]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [455] - GenericResultAtLocation [Line: 495]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [495] - GenericResultAtLocation [Line: 530]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [530] - GenericResultAtLocation [Line: 634]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [634] - GenericResultAtLocation [Line: 1000]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1000] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1005]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 74 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.7s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1094 SdHoareTripleChecker+Valid, 1.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1066 mSDsluCounter, 2133 SdHoareTripleChecker+Invalid, 1.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1197 mSDsCounter, 283 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1144 IncrementalHoareTripleChecker+Invalid, 1427 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 283 mSolverCounterUnsat, 936 mSDtfsCounter, 1144 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 365 GetRequests, 302 SyntacticMatches, 0 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1038occurred in iteration=8, InterpolantAutomatonStates: 62, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 188 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 23 LocationsWithAnnotation, 1125 PreInvPairs, 1189 NumberOfFragments, 689 HoareAnnotationTreeSize, 1125 FomulaSimplifications, 675 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 23 FomulaSimplificationsInter, 3312 FormulaSimplificationTreeSizeReductionInter, 1.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 705 NumberOfCodeBlocks, 705 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 690 ConstructedInterpolants, 0 QuantifiedInterpolants, 1104 SizeOfPredicates, 5 NumberOfNonLiveVariables, 870 ConjunctsInSsa, 17 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 169/175 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning) && (2 <= waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= waterLevel))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (splverifierCounter == 0)) && (1 <= waterLevel)) && (0 == systemActive))) - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2023-11-29 03:10:29,858 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2a2ccfd9-36b4-4c57-b74a-355d2716b84b/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE