./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1f55fffdfb523946c08e4798dfd7a981dcf70594f408e958cce4b1b6e97bd924 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 03:27:32,358 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 03:27:32,422 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 03:27:32,427 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 03:27:32,427 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 03:27:32,451 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 03:27:32,452 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 03:27:32,453 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 03:27:32,453 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 03:27:32,454 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 03:27:32,454 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 03:27:32,455 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 03:27:32,456 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 03:27:32,456 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 03:27:32,457 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 03:27:32,457 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 03:27:32,458 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 03:27:32,458 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 03:27:32,459 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 03:27:32,459 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 03:27:32,460 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 03:27:32,460 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 03:27:32,461 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 03:27:32,461 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 03:27:32,462 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 03:27:32,462 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 03:27:32,462 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 03:27:32,463 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 03:27:32,463 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 03:27:32,464 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 03:27:32,464 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 03:27:32,464 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 03:27:32,465 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 03:27:32,465 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 03:27:32,465 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 03:27:32,466 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 03:27:32,466 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 03:27:32,466 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 03:27:32,466 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 03:27:32,466 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 03:27:32,467 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 03:27:32,467 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 03:27:32,467 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1f55fffdfb523946c08e4798dfd7a981dcf70594f408e958cce4b1b6e97bd924 [2023-11-29 03:27:32,684 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 03:27:32,704 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 03:27:32,706 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 03:27:32,707 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 03:27:32,707 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 03:27:32,708 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c [2023-11-29 03:27:35,402 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 03:27:35,636 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 03:27:35,636 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c [2023-11-29 03:27:35,652 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/data/bc2f7aeba/d23c94b61c954513a66604155219c2f7/FLAG72a6c1f50 [2023-11-29 03:27:35,667 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/data/bc2f7aeba/d23c94b61c954513a66604155219c2f7 [2023-11-29 03:27:35,669 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 03:27:35,671 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 03:27:35,672 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 03:27:35,673 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 03:27:35,678 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 03:27:35,679 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 03:27:35" (1/1) ... [2023-11-29 03:27:35,680 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@627ac4db and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:35, skipping insertion in model container [2023-11-29 03:27:35,680 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 03:27:35" (1/1) ... [2023-11-29 03:27:35,732 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 03:27:35,884 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c[1605,1618] [2023-11-29 03:27:35,992 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 03:27:36,003 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 03:27:36,013 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2023-11-29 03:27:36,014 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [58] [2023-11-29 03:27:36,015 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [127] [2023-11-29 03:27:36,015 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [493] [2023-11-29 03:27:36,015 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [726] [2023-11-29 03:27:36,016 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [765] [2023-11-29 03:27:36,016 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [865] [2023-11-29 03:27:36,016 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [969] [2023-11-29 03:27:36,020 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c[1605,1618] [2023-11-29 03:27:36,065 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 03:27:36,085 INFO L206 MainTranslator]: Completed translation [2023-11-29 03:27:36,085 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:36 WrapperNode [2023-11-29 03:27:36,086 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 03:27:36,087 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 03:27:36,087 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 03:27:36,087 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 03:27:36,094 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:36" (1/1) ... [2023-11-29 03:27:36,108 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:36" (1/1) ... [2023-11-29 03:27:36,134 INFO L138 Inliner]: procedures = 57, calls = 103, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 224 [2023-11-29 03:27:36,135 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 03:27:36,135 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 03:27:36,136 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 03:27:36,136 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 03:27:36,147 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:36" (1/1) ... [2023-11-29 03:27:36,147 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:36" (1/1) ... [2023-11-29 03:27:36,150 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:36" (1/1) ... [2023-11-29 03:27:36,164 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 03:27:36,165 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:36" (1/1) ... [2023-11-29 03:27:36,165 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:36" (1/1) ... [2023-11-29 03:27:36,170 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:36" (1/1) ... [2023-11-29 03:27:36,174 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:36" (1/1) ... [2023-11-29 03:27:36,176 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:36" (1/1) ... [2023-11-29 03:27:36,178 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:36" (1/1) ... [2023-11-29 03:27:36,180 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 03:27:36,181 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 03:27:36,181 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 03:27:36,181 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 03:27:36,182 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:36" (1/1) ... [2023-11-29 03:27:36,188 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 03:27:36,203 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:27:36,214 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 03:27:36,218 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 03:27:36,245 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 03:27:36,245 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-29 03:27:36,245 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-29 03:27:36,245 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-29 03:27:36,245 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-29 03:27:36,245 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 03:27:36,246 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 03:27:36,246 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 03:27:36,246 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 03:27:36,246 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 03:27:36,246 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 03:27:36,246 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 03:27:36,246 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 03:27:36,246 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 03:27:36,246 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 03:27:36,247 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-29 03:27:36,247 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-29 03:27:36,247 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 03:27:36,247 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 03:27:36,247 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 03:27:36,247 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 03:27:36,247 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 03:27:36,323 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 03:27:36,325 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 03:27:36,565 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 03:27:36,626 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 03:27:36,627 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 03:27:36,627 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 03:27:36 BoogieIcfgContainer [2023-11-29 03:27:36,627 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 03:27:36,630 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 03:27:36,630 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 03:27:36,634 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 03:27:36,634 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 03:27:35" (1/3) ... [2023-11-29 03:27:36,635 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@72dcf481 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 03:27:36, skipping insertion in model container [2023-11-29 03:27:36,635 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:27:36" (2/3) ... [2023-11-29 03:27:36,635 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@72dcf481 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 03:27:36, skipping insertion in model container [2023-11-29 03:27:36,635 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 03:27:36" (3/3) ... [2023-11-29 03:27:36,637 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product53.cil.c [2023-11-29 03:27:36,654 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 03:27:36,655 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 03:27:36,702 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 03:27:36,709 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6cf33e73, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 03:27:36,709 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 03:27:36,713 INFO L276 IsEmpty]: Start isEmpty. Operand has 81 states, 54 states have (on average 1.537037037037037) internal successors, (83), 64 states have internal predecessors, (83), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-29 03:27:36,721 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-29 03:27:36,721 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:27:36,722 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:27:36,722 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:27:36,727 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:27:36,727 INFO L85 PathProgramCache]: Analyzing trace with hash 523841794, now seen corresponding path program 1 times [2023-11-29 03:27:36,734 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:27:36,735 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1330244556] [2023-11-29 03:27:36,735 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:36,735 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:27:36,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:36,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 03:27:36,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:36,885 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:27:36,886 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:27:36,886 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1330244556] [2023-11-29 03:27:36,887 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1330244556] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:27:36,887 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:27:36,887 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 03:27:36,888 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1375359894] [2023-11-29 03:27:36,889 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:27:36,893 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 03:27:36,893 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:27:36,941 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 03:27:36,942 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 03:27:36,944 INFO L87 Difference]: Start difference. First operand has 81 states, 54 states have (on average 1.537037037037037) internal successors, (83), 64 states have internal predecessors, (83), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:27:37,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:27:37,013 INFO L93 Difference]: Finished difference Result 160 states and 231 transitions. [2023-11-29 03:27:37,014 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 03:27:37,015 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-29 03:27:37,016 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:27:37,024 INFO L225 Difference]: With dead ends: 160 [2023-11-29 03:27:37,024 INFO L226 Difference]: Without dead ends: 76 [2023-11-29 03:27:37,027 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 03:27:37,031 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:27:37,032 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 95 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:27:37,046 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2023-11-29 03:27:37,067 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2023-11-29 03:27:37,068 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 51 states have (on average 1.4313725490196079) internal successors, (73), 60 states have internal predecessors, (73), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-29 03:27:37,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 104 transitions. [2023-11-29 03:27:37,072 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 104 transitions. Word has length 17 [2023-11-29 03:27:37,073 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:27:37,073 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 104 transitions. [2023-11-29 03:27:37,073 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:27:37,074 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 104 transitions. [2023-11-29 03:27:37,076 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-29 03:27:37,076 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:27:37,076 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:27:37,077 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 03:27:37,077 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:27:37,078 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:27:37,078 INFO L85 PathProgramCache]: Analyzing trace with hash 1198796036, now seen corresponding path program 1 times [2023-11-29 03:27:37,078 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:27:37,078 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1824649265] [2023-11-29 03:27:37,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:37,079 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:27:37,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:37,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-29 03:27:37,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:37,179 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:27:37,180 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:27:37,180 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1824649265] [2023-11-29 03:27:37,180 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1824649265] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:27:37,180 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:27:37,181 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 03:27:37,181 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1760618376] [2023-11-29 03:27:37,181 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:27:37,182 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 03:27:37,182 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:27:37,183 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 03:27:37,183 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:27:37,184 INFO L87 Difference]: Start difference. First operand 76 states and 104 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:27:37,223 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:27:37,223 INFO L93 Difference]: Finished difference Result 125 states and 171 transitions. [2023-11-29 03:27:37,224 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 03:27:37,224 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-11-29 03:27:37,224 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:27:37,226 INFO L225 Difference]: With dead ends: 125 [2023-11-29 03:27:37,226 INFO L226 Difference]: Without dead ends: 68 [2023-11-29 03:27:37,227 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:27:37,228 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 11 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 148 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:27:37,229 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 148 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:27:37,230 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2023-11-29 03:27:37,239 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2023-11-29 03:27:37,239 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 46 states have (on average 1.4565217391304348) internal successors, (67), 55 states have internal predecessors, (67), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-29 03:27:37,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 93 transitions. [2023-11-29 03:27:37,241 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 93 transitions. Word has length 18 [2023-11-29 03:27:37,241 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:27:37,242 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 93 transitions. [2023-11-29 03:27:37,242 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:27:37,242 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 93 transitions. [2023-11-29 03:27:37,243 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-29 03:27:37,244 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:27:37,244 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:27:37,244 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 03:27:37,244 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:27:37,245 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:27:37,245 INFO L85 PathProgramCache]: Analyzing trace with hash -691618870, now seen corresponding path program 1 times [2023-11-29 03:27:37,245 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:27:37,245 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [65858646] [2023-11-29 03:27:37,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:37,246 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:27:37,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:37,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:27:37,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:37,363 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:27:37,363 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:27:37,363 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [65858646] [2023-11-29 03:27:37,363 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [65858646] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:27:37,364 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:27:37,364 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-29 03:27:37,364 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [518782293] [2023-11-29 03:27:37,364 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:27:37,365 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 03:27:37,365 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:27:37,365 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 03:27:37,366 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 03:27:37,366 INFO L87 Difference]: Start difference. First operand 68 states and 93 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:27:37,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:27:37,470 INFO L93 Difference]: Finished difference Result 134 states and 185 transitions. [2023-11-29 03:27:37,470 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 03:27:37,470 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2023-11-29 03:27:37,471 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:27:37,472 INFO L225 Difference]: With dead ends: 134 [2023-11-29 03:27:37,472 INFO L226 Difference]: Without dead ends: 68 [2023-11-29 03:27:37,473 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 03:27:37,475 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 92 mSDsluCounter, 42 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 118 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 03:27:37,475 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [92 Valid, 118 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 03:27:37,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2023-11-29 03:27:37,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2023-11-29 03:27:37,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 46 states have (on average 1.434782608695652) internal successors, (66), 55 states have internal predecessors, (66), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-29 03:27:37,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 92 transitions. [2023-11-29 03:27:37,487 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 92 transitions. Word has length 21 [2023-11-29 03:27:37,487 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:27:37,487 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 92 transitions. [2023-11-29 03:27:37,488 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:27:37,488 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 92 transitions. [2023-11-29 03:27:37,489 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-11-29 03:27:37,489 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:27:37,490 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:27:37,490 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 03:27:37,490 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:27:37,491 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:27:37,491 INFO L85 PathProgramCache]: Analyzing trace with hash 1202771704, now seen corresponding path program 1 times [2023-11-29 03:27:37,491 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:27:37,491 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1181364239] [2023-11-29 03:27:37,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:37,492 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:27:37,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:37,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:27:37,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:37,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 03:27:37,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:37,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-29 03:27:37,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:37,572 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 03:27:37,572 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:27:37,573 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1181364239] [2023-11-29 03:27:37,573 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1181364239] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:27:37,573 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:27:37,573 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-29 03:27:37,573 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [882331036] [2023-11-29 03:27:37,573 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:27:37,574 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 03:27:37,574 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:27:37,575 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 03:27:37,575 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 03:27:37,575 INFO L87 Difference]: Start difference. First operand 68 states and 92 transitions. Second operand has 4 states, 4 states have (on average 5.75) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-29 03:27:37,746 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:27:37,746 INFO L93 Difference]: Finished difference Result 205 states and 279 transitions. [2023-11-29 03:27:37,747 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 03:27:37,747 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.75) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 31 [2023-11-29 03:27:37,747 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:27:37,749 INFO L225 Difference]: With dead ends: 205 [2023-11-29 03:27:37,750 INFO L226 Difference]: Without dead ends: 139 [2023-11-29 03:27:37,751 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 03:27:37,752 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 134 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 98 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 98 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 03:27:37,753 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [140 Valid, 157 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 98 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 03:27:37,754 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139 states. [2023-11-29 03:27:37,774 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139 to 133. [2023-11-29 03:27:37,775 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 133 states, 93 states have (on average 1.3763440860215055) internal successors, (128), 101 states have internal predecessors, (128), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2023-11-29 03:27:37,776 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 133 states to 133 states and 177 transitions. [2023-11-29 03:27:37,777 INFO L78 Accepts]: Start accepts. Automaton has 133 states and 177 transitions. Word has length 31 [2023-11-29 03:27:37,777 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:27:37,777 INFO L495 AbstractCegarLoop]: Abstraction has 133 states and 177 transitions. [2023-11-29 03:27:37,777 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.75) internal successors, (23), 3 states have internal predecessors, (23), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-29 03:27:37,777 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 177 transitions. [2023-11-29 03:27:37,779 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-29 03:27:37,779 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:27:37,779 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:27:37,779 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 03:27:37,779 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:27:37,780 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:27:37,780 INFO L85 PathProgramCache]: Analyzing trace with hash 2128512413, now seen corresponding path program 1 times [2023-11-29 03:27:37,780 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:27:37,780 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2048005326] [2023-11-29 03:27:37,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:37,781 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:27:37,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:37,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:27:37,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:37,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:27:37,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:37,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-29 03:27:37,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:37,893 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:27:37,893 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:27:37,893 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2048005326] [2023-11-29 03:27:37,894 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2048005326] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:27:37,894 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:27:37,894 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 03:27:37,894 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1921328996] [2023-11-29 03:27:37,894 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:27:37,895 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 03:27:37,895 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:27:37,896 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 03:27:37,896 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 03:27:37,896 INFO L87 Difference]: Start difference. First operand 133 states and 177 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-29 03:27:38,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:27:38,107 INFO L93 Difference]: Finished difference Result 268 states and 362 transitions. [2023-11-29 03:27:38,107 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 03:27:38,108 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 38 [2023-11-29 03:27:38,108 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:27:38,110 INFO L225 Difference]: With dead ends: 268 [2023-11-29 03:27:38,110 INFO L226 Difference]: Without dead ends: 137 [2023-11-29 03:27:38,111 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-29 03:27:38,113 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 55 mSDsluCounter, 160 mSDsCounter, 0 mSdLazyCounter, 137 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 137 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 03:27:38,113 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 233 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 03:27:38,114 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2023-11-29 03:27:38,132 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 135. [2023-11-29 03:27:38,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 135 states, 95 states have (on average 1.368421052631579) internal successors, (130), 103 states have internal predecessors, (130), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2023-11-29 03:27:38,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135 states to 135 states and 179 transitions. [2023-11-29 03:27:38,135 INFO L78 Accepts]: Start accepts. Automaton has 135 states and 179 transitions. Word has length 38 [2023-11-29 03:27:38,135 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:27:38,135 INFO L495 AbstractCegarLoop]: Abstraction has 135 states and 179 transitions. [2023-11-29 03:27:38,136 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-29 03:27:38,136 INFO L276 IsEmpty]: Start isEmpty. Operand 135 states and 179 transitions. [2023-11-29 03:27:38,137 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-29 03:27:38,137 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:27:38,137 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:27:38,137 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-29 03:27:38,138 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:27:38,138 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:27:38,138 INFO L85 PathProgramCache]: Analyzing trace with hash 540164511, now seen corresponding path program 1 times [2023-11-29 03:27:38,138 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:27:38,138 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [438299004] [2023-11-29 03:27:38,138 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:38,139 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:27:38,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:38,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:27:38,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:38,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:27:38,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:38,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-29 03:27:38,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:38,228 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:27:38,228 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:27:38,228 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [438299004] [2023-11-29 03:27:38,228 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [438299004] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:27:38,229 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:27:38,229 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 03:27:38,229 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1526618636] [2023-11-29 03:27:38,229 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:27:38,229 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 03:27:38,230 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:27:38,230 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 03:27:38,230 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 03:27:38,231 INFO L87 Difference]: Start difference. First operand 135 states and 179 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-29 03:27:38,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:27:38,395 INFO L93 Difference]: Finished difference Result 277 states and 379 transitions. [2023-11-29 03:27:38,395 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 03:27:38,396 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 38 [2023-11-29 03:27:38,396 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:27:38,398 INFO L225 Difference]: With dead ends: 277 [2023-11-29 03:27:38,398 INFO L226 Difference]: Without dead ends: 144 [2023-11-29 03:27:38,399 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-29 03:27:38,399 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 61 mSDsluCounter, 159 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 231 SdHoareTripleChecker+Invalid, 160 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 03:27:38,400 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 231 Invalid, 160 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 03:27:38,401 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 144 states. [2023-11-29 03:27:38,418 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 144 to 137. [2023-11-29 03:27:38,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 137 states, 97 states have (on average 1.3608247422680413) internal successors, (132), 105 states have internal predecessors, (132), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2023-11-29 03:27:38,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 137 states and 181 transitions. [2023-11-29 03:27:38,420 INFO L78 Accepts]: Start accepts. Automaton has 137 states and 181 transitions. Word has length 38 [2023-11-29 03:27:38,420 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:27:38,420 INFO L495 AbstractCegarLoop]: Abstraction has 137 states and 181 transitions. [2023-11-29 03:27:38,420 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-29 03:27:38,421 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 181 transitions. [2023-11-29 03:27:38,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-29 03:27:38,422 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:27:38,422 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:27:38,423 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-29 03:27:38,423 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:27:38,423 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:27:38,423 INFO L85 PathProgramCache]: Analyzing trace with hash -1148779231, now seen corresponding path program 1 times [2023-11-29 03:27:38,423 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:27:38,424 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [712239745] [2023-11-29 03:27:38,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:38,424 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:27:38,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:38,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:27:38,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:38,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:27:38,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:38,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-29 03:27:38,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:38,520 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:27:38,520 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:27:38,520 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [712239745] [2023-11-29 03:27:38,520 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [712239745] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:27:38,521 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:27:38,521 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 03:27:38,521 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [184466652] [2023-11-29 03:27:38,521 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:27:38,521 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 03:27:38,521 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:27:38,522 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 03:27:38,522 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 03:27:38,522 INFO L87 Difference]: Start difference. First operand 137 states and 181 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-29 03:27:38,780 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:27:38,780 INFO L93 Difference]: Finished difference Result 395 states and 539 transitions. [2023-11-29 03:27:38,782 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-29 03:27:38,783 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 38 [2023-11-29 03:27:38,783 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:27:38,785 INFO L225 Difference]: With dead ends: 395 [2023-11-29 03:27:38,785 INFO L226 Difference]: Without dead ends: 260 [2023-11-29 03:27:38,786 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-29 03:27:38,787 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 199 mSDsluCounter, 134 mSDsCounter, 0 mSdLazyCounter, 185 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 206 SdHoareTripleChecker+Valid, 243 SdHoareTripleChecker+Invalid, 243 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 185 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 03:27:38,788 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [206 Valid, 243 Invalid, 243 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 185 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 03:27:38,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 260 states. [2023-11-29 03:27:38,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 260 to 252. [2023-11-29 03:27:38,818 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 252 states, 179 states have (on average 1.318435754189944) internal successors, (236), 191 states have internal predecessors, (236), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2023-11-29 03:27:38,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 252 states to 252 states and 334 transitions. [2023-11-29 03:27:38,821 INFO L78 Accepts]: Start accepts. Automaton has 252 states and 334 transitions. Word has length 38 [2023-11-29 03:27:38,821 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:27:38,821 INFO L495 AbstractCegarLoop]: Abstraction has 252 states and 334 transitions. [2023-11-29 03:27:38,821 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-29 03:27:38,822 INFO L276 IsEmpty]: Start isEmpty. Operand 252 states and 334 transitions. [2023-11-29 03:27:38,823 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-29 03:27:38,823 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:27:38,823 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:27:38,823 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-29 03:27:38,824 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:27:38,824 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:27:38,824 INFO L85 PathProgramCache]: Analyzing trace with hash 1886251438, now seen corresponding path program 1 times [2023-11-29 03:27:38,824 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:27:38,824 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [909788634] [2023-11-29 03:27:38,824 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:38,824 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:27:38,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:38,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:27:38,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:38,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:27:38,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:38,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 03:27:38,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:38,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-29 03:27:38,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:38,936 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:27:38,936 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:27:38,937 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [909788634] [2023-11-29 03:27:38,937 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [909788634] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:27:38,937 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:27:38,944 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 03:27:38,944 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [286735247] [2023-11-29 03:27:38,944 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:27:38,945 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 03:27:38,945 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:27:38,945 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 03:27:38,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 03:27:38,946 INFO L87 Difference]: Start difference. First operand 252 states and 334 transitions. Second operand has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 03:27:39,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:27:39,150 INFO L93 Difference]: Finished difference Result 506 states and 675 transitions. [2023-11-29 03:27:39,154 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-29 03:27:39,154 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 41 [2023-11-29 03:27:39,155 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:27:39,157 INFO L225 Difference]: With dead ends: 506 [2023-11-29 03:27:39,157 INFO L226 Difference]: Without dead ends: 256 [2023-11-29 03:27:39,158 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-29 03:27:39,159 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 107 mSDsluCounter, 134 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 112 SdHoareTripleChecker+Valid, 192 SdHoareTripleChecker+Invalid, 180 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 03:27:39,159 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [112 Valid, 192 Invalid, 180 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 03:27:39,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2023-11-29 03:27:39,186 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 248. [2023-11-29 03:27:39,187 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 248 states, 175 states have (on average 1.28) internal successors, (224), 187 states have internal predecessors, (224), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2023-11-29 03:27:39,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 248 states to 248 states and 322 transitions. [2023-11-29 03:27:39,190 INFO L78 Accepts]: Start accepts. Automaton has 248 states and 322 transitions. Word has length 41 [2023-11-29 03:27:39,190 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:27:39,190 INFO L495 AbstractCegarLoop]: Abstraction has 248 states and 322 transitions. [2023-11-29 03:27:39,190 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 03:27:39,190 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 322 transitions. [2023-11-29 03:27:39,191 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2023-11-29 03:27:39,192 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:27:39,192 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:27:39,192 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-29 03:27:39,192 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:27:39,192 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:27:39,193 INFO L85 PathProgramCache]: Analyzing trace with hash 1726638151, now seen corresponding path program 1 times [2023-11-29 03:27:39,193 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:27:39,193 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [618109406] [2023-11-29 03:27:39,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:39,193 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:27:39,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:27:39,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 03:27:39,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:27:39,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-29 03:27:39,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,261 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:27:39,262 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:27:39,262 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [618109406] [2023-11-29 03:27:39,262 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [618109406] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:27:39,262 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:27:39,262 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 03:27:39,262 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1837096142] [2023-11-29 03:27:39,262 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:27:39,263 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 03:27:39,263 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:27:39,263 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 03:27:39,263 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 03:27:39,264 INFO L87 Difference]: Start difference. First operand 248 states and 322 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 03:27:39,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:27:39,636 INFO L93 Difference]: Finished difference Result 510 states and 708 transitions. [2023-11-29 03:27:39,637 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-29 03:27:39,637 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 42 [2023-11-29 03:27:39,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:27:39,641 INFO L225 Difference]: With dead ends: 510 [2023-11-29 03:27:39,641 INFO L226 Difference]: Without dead ends: 508 [2023-11-29 03:27:39,642 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-29 03:27:39,642 INFO L413 NwaCegarLoop]: 47 mSDtfsCounter, 276 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 191 mSolverCounterSat, 133 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 280 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 324 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 133 IncrementalHoareTripleChecker+Valid, 191 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-29 03:27:39,643 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [280 Valid, 143 Invalid, 324 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [133 Valid, 191 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-29 03:27:39,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 508 states. [2023-11-29 03:27:39,692 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 508 to 454. [2023-11-29 03:27:39,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 454 states, 319 states have (on average 1.2884012539184952) internal successors, (411), 346 states have internal predecessors, (411), 70 states have call successors, (70), 51 states have call predecessors, (70), 64 states have return successors, (156), 70 states have call predecessors, (156), 70 states have call successors, (156) [2023-11-29 03:27:39,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 454 states to 454 states and 637 transitions. [2023-11-29 03:27:39,698 INFO L78 Accepts]: Start accepts. Automaton has 454 states and 637 transitions. Word has length 42 [2023-11-29 03:27:39,698 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:27:39,699 INFO L495 AbstractCegarLoop]: Abstraction has 454 states and 637 transitions. [2023-11-29 03:27:39,699 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 03:27:39,699 INFO L276 IsEmpty]: Start isEmpty. Operand 454 states and 637 transitions. [2023-11-29 03:27:39,701 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2023-11-29 03:27:39,701 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:27:39,702 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:27:39,702 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-29 03:27:39,702 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:27:39,702 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:27:39,702 INFO L85 PathProgramCache]: Analyzing trace with hash -1366671313, now seen corresponding path program 1 times [2023-11-29 03:27:39,702 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:27:39,703 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1244764334] [2023-11-29 03:27:39,703 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:39,703 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:27:39,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:27:39,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:27:39,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:27:39,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:27:39,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-29 03:27:39,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-29 03:27:39,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:27:39,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2023-11-29 03:27:39,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,872 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 18 proven. 5 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-29 03:27:39,872 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:27:39,872 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1244764334] [2023-11-29 03:27:39,872 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1244764334] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:27:39,872 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1386922476] [2023-11-29 03:27:39,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:39,872 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:27:39,873 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:27:39,875 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:27:39,883 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-29 03:27:39,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:39,979 INFO L262 TraceCheckSpWp]: Trace formula consists of 305 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-29 03:27:39,986 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:27:40,053 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:27:40,053 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 03:27:40,053 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1386922476] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:27:40,053 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 03:27:40,054 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 8 [2023-11-29 03:27:40,054 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [281738979] [2023-11-29 03:27:40,054 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:27:40,055 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 03:27:40,055 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:27:40,055 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 03:27:40,056 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-29 03:27:40,056 INFO L87 Difference]: Start difference. First operand 454 states and 637 transitions. Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 3 states have internal predecessors, (62), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-29 03:27:40,127 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:27:40,127 INFO L93 Difference]: Finished difference Result 775 states and 1117 transitions. [2023-11-29 03:27:40,127 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 03:27:40,128 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 3 states have internal predecessors, (62), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 79 [2023-11-29 03:27:40,128 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:27:40,131 INFO L225 Difference]: With dead ends: 775 [2023-11-29 03:27:40,131 INFO L226 Difference]: Without dead ends: 371 [2023-11-29 03:27:40,133 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 96 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-29 03:27:40,134 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 48 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 168 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:27:40,134 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 168 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:27:40,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 371 states. [2023-11-29 03:27:40,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 371 to 371. [2023-11-29 03:27:40,172 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 371 states, 260 states have (on average 1.2615384615384615) internal successors, (328), 283 states have internal predecessors, (328), 58 states have call successors, (58), 44 states have call predecessors, (58), 52 states have return successors, (90), 57 states have call predecessors, (90), 58 states have call successors, (90) [2023-11-29 03:27:40,175 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 371 states to 371 states and 476 transitions. [2023-11-29 03:27:40,176 INFO L78 Accepts]: Start accepts. Automaton has 371 states and 476 transitions. Word has length 79 [2023-11-29 03:27:40,176 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:27:40,176 INFO L495 AbstractCegarLoop]: Abstraction has 371 states and 476 transitions. [2023-11-29 03:27:40,176 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 3 states have internal predecessors, (62), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-29 03:27:40,176 INFO L276 IsEmpty]: Start isEmpty. Operand 371 states and 476 transitions. [2023-11-29 03:27:40,178 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2023-11-29 03:27:40,178 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:27:40,179 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:27:40,185 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-29 03:27:40,379 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-29 03:27:40,379 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:27:40,380 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:27:40,380 INFO L85 PathProgramCache]: Analyzing trace with hash -1190707798, now seen corresponding path program 1 times [2023-11-29 03:27:40,380 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:27:40,380 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [644097104] [2023-11-29 03:27:40,380 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:40,380 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:27:40,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:40,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:27:40,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:40,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:27:40,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:40,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:27:40,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:40,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:27:40,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:40,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-29 03:27:40,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:40,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2023-11-29 03:27:40,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:40,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2023-11-29 03:27:40,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:40,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:27:40,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:40,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:27:40,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:40,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2023-11-29 03:27:40,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:40,589 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 18 proven. 2 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-29 03:27:40,589 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:27:40,590 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [644097104] [2023-11-29 03:27:40,590 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [644097104] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:27:40,590 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [747712355] [2023-11-29 03:27:40,590 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:40,590 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:27:40,590 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:27:40,591 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:27:40,594 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-29 03:27:40,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:40,686 INFO L262 TraceCheckSpWp]: Trace formula consists of 324 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-29 03:27:40,690 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:27:40,784 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 30 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:27:40,784 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-29 03:27:41,003 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 18 proven. 4 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2023-11-29 03:27:41,003 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [747712355] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-29 03:27:41,003 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-29 03:27:41,003 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 5, 6] total 16 [2023-11-29 03:27:41,003 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1325618420] [2023-11-29 03:27:41,004 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-29 03:27:41,004 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2023-11-29 03:27:41,004 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:27:41,005 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2023-11-29 03:27:41,006 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2023-11-29 03:27:41,006 INFO L87 Difference]: Start difference. First operand 371 states and 476 transitions. Second operand has 16 states, 15 states have (on average 8.4) internal successors, (126), 12 states have internal predecessors, (126), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) [2023-11-29 03:27:44,499 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:27:44,499 INFO L93 Difference]: Finished difference Result 1841 states and 2598 transitions. [2023-11-29 03:27:44,500 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 114 states. [2023-11-29 03:27:44,500 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 15 states have (on average 8.4) internal successors, (126), 12 states have internal predecessors, (126), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) Word has length 87 [2023-11-29 03:27:44,500 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:27:44,511 INFO L225 Difference]: With dead ends: 1841 [2023-11-29 03:27:44,511 INFO L226 Difference]: Without dead ends: 1472 [2023-11-29 03:27:44,522 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 339 GetRequests, 213 SyntacticMatches, 2 SemanticMatches, 124 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6052 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=1562, Invalid=14188, Unknown=0, NotChecked=0, Total=15750 [2023-11-29 03:27:44,523 INFO L413 NwaCegarLoop]: 177 mSDtfsCounter, 1266 mSDsluCounter, 885 mSDsCounter, 0 mSdLazyCounter, 2639 mSolverCounterSat, 665 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1273 SdHoareTripleChecker+Valid, 1062 SdHoareTripleChecker+Invalid, 3304 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 665 IncrementalHoareTripleChecker+Valid, 2639 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2023-11-29 03:27:44,523 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1273 Valid, 1062 Invalid, 3304 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [665 Valid, 2639 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2023-11-29 03:27:44,526 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1472 states. [2023-11-29 03:27:44,650 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1472 to 1219. [2023-11-29 03:27:44,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1219 states, 848 states have (on average 1.179245283018868) internal successors, (1000), 913 states have internal predecessors, (1000), 192 states have call successors, (192), 149 states have call predecessors, (192), 178 states have return successors, (311), 190 states have call predecessors, (311), 192 states have call successors, (311) [2023-11-29 03:27:44,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1219 states to 1219 states and 1503 transitions. [2023-11-29 03:27:44,661 INFO L78 Accepts]: Start accepts. Automaton has 1219 states and 1503 transitions. Word has length 87 [2023-11-29 03:27:44,662 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:27:44,662 INFO L495 AbstractCegarLoop]: Abstraction has 1219 states and 1503 transitions. [2023-11-29 03:27:44,662 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 15 states have (on average 8.4) internal successors, (126), 12 states have internal predecessors, (126), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) [2023-11-29 03:27:44,662 INFO L276 IsEmpty]: Start isEmpty. Operand 1219 states and 1503 transitions. [2023-11-29 03:27:44,664 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2023-11-29 03:27:44,665 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:27:44,665 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:27:44,670 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-11-29 03:27:44,865 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:27:44,866 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:27:44,866 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:27:44,866 INFO L85 PathProgramCache]: Analyzing trace with hash -1128598104, now seen corresponding path program 1 times [2023-11-29 03:27:44,866 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:27:44,866 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1306654891] [2023-11-29 03:27:44,867 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:44,867 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:27:44,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:44,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:27:44,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:44,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 03:27:44,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:44,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 03:27:45,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:45,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:27:45,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:45,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:27:45,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:45,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-29 03:27:45,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:45,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2023-11-29 03:27:45,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:45,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2023-11-29 03:27:45,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:45,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:27:45,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:45,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:27:45,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:45,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2023-11-29 03:27:45,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:45,048 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2023-11-29 03:27:45,048 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:27:45,048 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1306654891] [2023-11-29 03:27:45,049 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1306654891] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:27:45,049 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [23393068] [2023-11-29 03:27:45,049 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:27:45,049 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:27:45,049 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:27:45,050 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:27:45,055 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-29 03:27:45,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:27:45,142 INFO L262 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 7 conjunts are in the unsatisfiable core [2023-11-29 03:27:45,146 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:27:45,267 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-29 03:27:45,267 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 03:27:45,267 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [23393068] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:27:45,267 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 03:27:45,267 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2023-11-29 03:27:45,267 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [973981150] [2023-11-29 03:27:45,267 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:27:45,268 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 03:27:45,268 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:27:45,268 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 03:27:45,269 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2023-11-29 03:27:45,269 INFO L87 Difference]: Start difference. First operand 1219 states and 1503 transitions. Second operand has 6 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2023-11-29 03:27:45,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:27:45,414 INFO L93 Difference]: Finished difference Result 2012 states and 2483 transitions. [2023-11-29 03:27:45,415 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-29 03:27:45,415 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 91 [2023-11-29 03:27:45,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:27:45,416 INFO L225 Difference]: With dead ends: 2012 [2023-11-29 03:27:45,416 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 03:27:45,420 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 105 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=200, Unknown=0, NotChecked=0, Total=240 [2023-11-29 03:27:45,421 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 24 mSDsluCounter, 372 mSDsCounter, 0 mSdLazyCounter, 111 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 505 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 111 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 03:27:45,421 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 505 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 03:27:45,422 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 03:27:45,422 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 03:27:45,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 03:27:45,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 03:27:45,422 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 91 [2023-11-29 03:27:45,422 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:27:45,422 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 03:27:45,423 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2023-11-29 03:27:45,423 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 03:27:45,423 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 03:27:45,425 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 03:27:45,430 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2023-11-29 03:27:45,630 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:27:45,632 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 03:27:49,142 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 624 631) no Hoare annotation was computed. [2023-11-29 03:27:49,143 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 624 631) the Hoare annotation is: (let ((.cse3 (< ~methaneLevelCritical~0 1)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (< ~waterLevel~0 1) .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 (not (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2))) [2023-11-29 03:27:49,143 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 531 537) no Hoare annotation was computed. [2023-11-29 03:27:49,143 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 531 537) the Hoare annotation is: true [2023-11-29 03:27:49,143 INFO L899 garLoopResultBuilder]: For program point L897-1(lines 893 904) no Hoare annotation was computed. [2023-11-29 03:27:49,143 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 893 904) the Hoare annotation is: (let ((.cse0 (< ~pumpRunning~0 1)) (.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse7 (< |old(~methaneLevelCritical~0)| 1)) (.cse1 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse6 (not (= ~pumpRunning~0 0))) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse3 .cse4) (or .cse0 .cse5 .cse7 (< ~waterLevel~0 2) .cse3) (or .cse1 .cse6 .cse2 .cse3 .cse4))) [2023-11-29 03:27:49,143 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 893 904) no Hoare annotation was computed. [2023-11-29 03:27:49,144 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 905 913) the Hoare annotation is: true [2023-11-29 03:27:49,144 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 905 913) no Hoare annotation was computed. [2023-11-29 03:27:49,144 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 767 796) no Hoare annotation was computed. [2023-11-29 03:27:49,144 INFO L899 garLoopResultBuilder]: For program point L792(lines 767 796) no Hoare annotation was computed. [2023-11-29 03:27:49,144 INFO L899 garLoopResultBuilder]: For program point L788(line 788) no Hoare annotation was computed. [2023-11-29 03:27:49,144 INFO L899 garLoopResultBuilder]: For program point L781(lines 781 785) no Hoare annotation was computed. [2023-11-29 03:27:49,144 INFO L902 garLoopResultBuilder]: At program point L781-1(lines 781 785) the Hoare annotation is: true [2023-11-29 03:27:49,144 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 767 796) the Hoare annotation is: true [2023-11-29 03:27:49,144 INFO L902 garLoopResultBuilder]: At program point L777-2(lines 777 791) the Hoare annotation is: true [2023-11-29 03:27:49,144 INFO L902 garLoopResultBuilder]: At program point L773(line 773) the Hoare annotation is: true [2023-11-29 03:27:49,145 INFO L899 garLoopResultBuilder]: For program point L773-1(line 773) no Hoare annotation was computed. [2023-11-29 03:27:49,145 INFO L895 garLoopResultBuilder]: At program point L605(line 605) the Hoare annotation is: (let ((.cse3 (< ~methaneLevelCritical~0 1)) (.cse6 (< |old(~waterLevel~0)| 2)) (.cse1 (< |old(~pumpRunning~0)| 1)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse2 .cse3) (or .cse5 (not (= |old(~waterLevel~0)| 0)) .cse1 .cse2 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) (= ~waterLevel~0 0))) (or .cse6 .cse1 .cse2 .cse3) (or .cse6 .cse5 (<= 1 ~waterLevel~0) .cse1 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse1 .cse2) (or .cse4 .cse0 .cse5 .cse2))) [2023-11-29 03:27:49,145 INFO L895 garLoopResultBuilder]: At program point L601(line 601) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 0))) (.cse4 (= ~waterLevel~0 0)) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse11 (<= 1 ~waterLevel~0)) (.cse10 (< |old(~waterLevel~0)| 2)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse3 .cse5) (or .cse7 .cse1 .cse2 .cse3 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse4)) (or (and .cse8 (= ~methAndRunningLastTime~0 0) .cse9) .cse0 .cse2 .cse3 .cse5) (or .cse10 .cse7 .cse11 .cse2 .cse3) (or .cse8 .cse7 .cse2 .cse3) (or (and .cse8 .cse9 .cse11) .cse10 .cse2 .cse3 .cse5) (or .cse6 .cse0 .cse7 .cse3))) [2023-11-29 03:27:49,146 INFO L895 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse13 (= ~pumpRunning~0 0)) (.cse15 (not .cse4)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse17 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse17)) (.cse3 (and .cse6 .cse17 .cse16)) (.cse12 (< |old(~waterLevel~0)| 2)) (.cse14 (<= 1 ~waterLevel~0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (= |old(~waterLevel~0)| 0))) (.cse11 (= ~waterLevel~0 0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (and .cse13 .cse15)) (.cse9 (< |old(~pumpRunning~0)| 1)) (.cse5 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse9 .cse4) (or .cse1 .cse10 .cse9 .cse4 .cse11 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse7 .cse4) (or .cse12 .cse9 .cse4 (and .cse13 .cse14 .cse15) .cse5) (or .cse12 .cse7 .cse14 .cse9 .cse4) (or (and .cse13 .cse11 .cse15) .cse7 .cse10 .cse9 .cse4 (and .cse16 .cse11)) (or .cse1 .cse8 .cse9 .cse4 .cse5))))) [2023-11-29 03:27:49,146 INFO L899 garLoopResultBuilder]: For program point L742-1(line 742) no Hoare annotation was computed. [2023-11-29 03:27:49,146 INFO L895 garLoopResultBuilder]: At program point L610(line 610) the Hoare annotation is: (let ((.cse1 (< |old(~pumpRunning~0)| 1)) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse2 .cse4) (or .cse5 .cse3 .cse6 .cse2 .cse4) (or (< |old(~waterLevel~0)| 2) .cse1 .cse2 .cse4) (or .cse5 .cse3 .cse6 .cse0 .cse2))) [2023-11-29 03:27:49,146 INFO L899 garLoopResultBuilder]: For program point L610-1(lines 591 615) no Hoare annotation was computed. [2023-11-29 03:27:49,146 INFO L899 garLoopResultBuilder]: For program point L511-1(lines 510 529) no Hoare annotation was computed. [2023-11-29 03:27:49,146 INFO L899 garLoopResultBuilder]: For program point L599(lines 599 607) no Hoare annotation was computed. [2023-11-29 03:27:49,147 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2023-11-29 03:27:49,147 INFO L899 garLoopResultBuilder]: For program point L595(lines 595 612) no Hoare annotation was computed. [2023-11-29 03:27:49,147 INFO L899 garLoopResultBuilder]: For program point L748(lines 748 758) no Hoare annotation was computed. [2023-11-29 03:27:49,147 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 507 530) the Hoare annotation is: (let ((.cse9 (= ~methAndRunningLastTime~0 0)) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and .cse8 .cse10 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) .cse9 .cse10)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (= 0 ~systemActive~0)) (.cse7 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse3 .cse7) (or (< |old(~waterLevel~0)| 2) .cse0 .cse2 .cse3 .cse7) (or .cse4 .cse5 .cse6 .cse1 .cse3) (or (and .cse8 .cse9 .cse10) .cse5 .cse2 .cse3 .cse7)))) [2023-11-29 03:27:49,147 INFO L899 garLoopResultBuilder]: For program point L744(lines 744 761) no Hoare annotation was computed. [2023-11-29 03:27:49,147 INFO L899 garLoopResultBuilder]: For program point L744-1(lines 736 764) no Hoare annotation was computed. [2023-11-29 03:27:49,148 INFO L895 garLoopResultBuilder]: At program point L637(line 637) the Hoare annotation is: (let ((.cse5 (< ~methaneLevelCritical~0 1)) (.cse7 (not (= |old(~waterLevel~0)| 0))) (.cse8 (= ~waterLevel~0 0)) (.cse0 (< |old(~waterLevel~0)| 2)) (.cse2 (<= 1 ~waterLevel~0)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4 .cse5) (or .cse6 (and .cse1 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse3 .cse4 .cse8 .cse5) (or .cse9 .cse6 .cse4 .cse5) (or .cse10 .cse7 .cse3 .cse4 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse8)) (or .cse0 .cse10 .cse2 .cse3 .cse4) (or .cse1 .cse10 .cse3 .cse4) (or .cse9 .cse6 .cse10 .cse4))) [2023-11-29 03:27:49,148 INFO L899 garLoopResultBuilder]: For program point L637-1(line 637) no Hoare annotation was computed. [2023-11-29 03:27:49,148 INFO L899 garLoopResultBuilder]: For program point L749(lines 749 755) no Hoare annotation was computed. [2023-11-29 03:27:49,148 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 507 530) no Hoare annotation was computed. [2023-11-29 03:27:49,148 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 877) no Hoare annotation was computed. [2023-11-29 03:27:49,148 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2023-11-29 03:27:49,148 INFO L899 garLoopResultBuilder]: For program point L873-2(lines 869 880) no Hoare annotation was computed. [2023-11-29 03:27:49,148 INFO L899 garLoopResultBuilder]: For program point L518-1(lines 518 524) no Hoare annotation was computed. [2023-11-29 03:27:49,148 INFO L899 garLoopResultBuilder]: For program point L93(lines 93 99) no Hoare annotation was computed. [2023-11-29 03:27:49,149 INFO L899 garLoopResultBuilder]: For program point L93-1(lines 93 99) no Hoare annotation was computed. [2023-11-29 03:27:49,149 INFO L899 garLoopResultBuilder]: For program point L122(lines 63 126) no Hoare annotation was computed. [2023-11-29 03:27:49,149 INFO L895 garLoopResultBuilder]: At program point L85(line 85) the Hoare annotation is: (let ((.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse7 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5))) [2023-11-29 03:27:49,149 INFO L895 garLoopResultBuilder]: At program point L119(lines 72 120) the Hoare annotation is: false [2023-11-29 03:27:49,149 INFO L899 garLoopResultBuilder]: For program point L74(lines 73 118) no Hoare annotation was computed. [2023-11-29 03:27:49,149 INFO L899 garLoopResultBuilder]: For program point L103(lines 103 114) no Hoare annotation was computed. [2023-11-29 03:27:49,149 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 03:27:49,149 INFO L895 garLoopResultBuilder]: At program point L95(line 95) the Hoare annotation is: (let ((.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse7 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5))) [2023-11-29 03:27:49,150 INFO L895 garLoopResultBuilder]: At program point L116(lines 73 118) the Hoare annotation is: (let ((.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse7 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5))) [2023-11-29 03:27:49,150 INFO L899 garLoopResultBuilder]: For program point L83(lines 83 89) no Hoare annotation was computed. [2023-11-29 03:27:49,150 INFO L899 garLoopResultBuilder]: For program point L83-1(lines 83 89) no Hoare annotation was computed. [2023-11-29 03:27:49,150 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 03:27:49,150 INFO L899 garLoopResultBuilder]: For program point L852(lines 852 859) no Hoare annotation was computed. [2023-11-29 03:27:49,150 INFO L899 garLoopResultBuilder]: For program point L852-2(lines 852 859) no Hoare annotation was computed. [2023-11-29 03:27:49,150 INFO L899 garLoopResultBuilder]: For program point L109(lines 109 113) no Hoare annotation was computed. [2023-11-29 03:27:49,150 INFO L895 garLoopResultBuilder]: At program point L109-2(lines 103 114) the Hoare annotation is: (let ((.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse7 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse3 .cse4 .cse5))) [2023-11-29 03:27:49,150 INFO L899 garLoopResultBuilder]: For program point L543(lines 543 560) no Hoare annotation was computed. [2023-11-29 03:27:49,151 INFO L899 garLoopResultBuilder]: For program point L950(lines 950 956) no Hoare annotation was computed. [2023-11-29 03:27:49,151 INFO L895 garLoopResultBuilder]: At program point L558(line 558) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 .cse3 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-29 03:27:49,151 INFO L899 garLoopResultBuilder]: For program point L558-1(lines 539 563) no Hoare annotation was computed. [2023-11-29 03:27:49,151 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 539 563) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 (< ~methaneLevelCritical~0 1)) (or .cse0 .cse1 .cse4 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-29 03:27:49,151 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 946 959) no Hoare annotation was computed. [2023-11-29 03:27:49,151 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 539 563) no Hoare annotation was computed. [2023-11-29 03:27:49,151 INFO L899 garLoopResultBuilder]: For program point L697(lines 697 701) no Hoare annotation was computed. [2023-11-29 03:27:49,151 INFO L899 garLoopResultBuilder]: For program point L697-2(lines 697 701) no Hoare annotation was computed. [2023-11-29 03:27:49,151 INFO L895 garLoopResultBuilder]: At program point L553(line 553) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0) (not .cse1))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (< |old(~pumpRunning~0)| 1) .cse1) (or .cse2 .cse3 .cse1 .cse4 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse3 .cse1 .cse4)))) [2023-11-29 03:27:49,152 INFO L899 garLoopResultBuilder]: For program point L547(lines 547 555) no Hoare annotation was computed. [2023-11-29 03:27:49,152 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 881 892) no Hoare annotation was computed. [2023-11-29 03:27:49,152 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 881 892) the Hoare annotation is: (let ((.cse0 (< ~pumpRunning~0 1)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= ~pumpRunning~0 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse5 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 (< |old(~waterLevel~0)| 2) .cse2 .cse3 .cse5) (or .cse6 .cse1 .cse2 .cse3 .cse4) (or .cse6 .cse2 .cse3 .cse4 .cse5))) [2023-11-29 03:27:49,152 INFO L899 garLoopResultBuilder]: For program point L885-1(lines 881 892) no Hoare annotation was computed. [2023-11-29 03:27:49,152 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 565 589) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 (< ~methaneLevelCritical~0 1)) (or .cse0 .cse1 .cse4 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-29 03:27:49,152 INFO L895 garLoopResultBuilder]: At program point L579(line 579) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 .cse3 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-29 03:27:49,152 INFO L895 garLoopResultBuilder]: At program point L575(line 575) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 .cse3 (< ~methaneLevelCritical~0 1)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-29 03:27:49,153 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 565 589) no Hoare annotation was computed. [2023-11-29 03:27:49,153 INFO L899 garLoopResultBuilder]: For program point L573(lines 573 581) no Hoare annotation was computed. [2023-11-29 03:27:49,153 INFO L899 garLoopResultBuilder]: For program point L569(lines 569 586) no Hoare annotation was computed. [2023-11-29 03:27:49,153 INFO L899 garLoopResultBuilder]: For program point L716(lines 716 720) no Hoare annotation was computed. [2023-11-29 03:27:49,153 INFO L899 garLoopResultBuilder]: For program point L716-2(lines 716 720) no Hoare annotation was computed. [2023-11-29 03:27:49,153 INFO L895 garLoopResultBuilder]: At program point L584(line 584) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (< ~methaneLevelCritical~0 1)) (or .cse4 (< |old(~pumpRunning~0)| 1) .cse2) (or .cse0 .cse1 .cse4 .cse2 .cse3))) [2023-11-29 03:27:49,153 INFO L899 garLoopResultBuilder]: For program point L584-1(lines 565 589) no Hoare annotation was computed. [2023-11-29 03:27:49,155 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:27:49,158 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 03:27:49,168 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 03:27:49 BoogieIcfgContainer [2023-11-29 03:27:49,169 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 03:27:49,169 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 03:27:49,169 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 03:27:49,169 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 03:27:49,170 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 03:27:36" (3/4) ... [2023-11-29 03:27:49,171 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 03:27:49,174 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-29 03:27:49,174 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-29 03:27:49,174 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 03:27:49,174 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-29 03:27:49,174 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 03:27:49,174 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 03:27:49,175 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 03:27:49,175 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 03:27:49,175 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 03:27:49,182 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 35 nodes and edges [2023-11-29 03:27:49,183 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 03:27:49,183 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 03:27:49,184 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 03:27:49,185 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 03:27:49,298 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 03:27:49,299 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 03:27:49,299 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 03:27:49,300 INFO L158 Benchmark]: Toolchain (without parser) took 13629.25ms. Allocated memory was 159.4MB in the beginning and 232.8MB in the end (delta: 73.4MB). Free memory was 124.9MB in the beginning and 165.0MB in the end (delta: -40.1MB). Peak memory consumption was 33.9MB. Max. memory is 16.1GB. [2023-11-29 03:27:49,300 INFO L158 Benchmark]: CDTParser took 0.14ms. Allocated memory is still 159.4MB. Free memory is still 131.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 03:27:49,301 INFO L158 Benchmark]: CACSL2BoogieTranslator took 413.65ms. Allocated memory is still 159.4MB. Free memory was 124.9MB in the beginning and 105.5MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-29 03:27:49,301 INFO L158 Benchmark]: Boogie Procedure Inliner took 48.22ms. Allocated memory is still 159.4MB. Free memory was 105.5MB in the beginning and 102.8MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 03:27:49,302 INFO L158 Benchmark]: Boogie Preprocessor took 44.94ms. Allocated memory is still 159.4MB. Free memory was 102.8MB in the beginning and 100.7MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 03:27:49,302 INFO L158 Benchmark]: RCFGBuilder took 446.42ms. Allocated memory is still 159.4MB. Free memory was 100.7MB in the beginning and 77.4MB in the end (delta: 23.2MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2023-11-29 03:27:49,303 INFO L158 Benchmark]: TraceAbstraction took 12538.30ms. Allocated memory was 159.4MB in the beginning and 232.8MB in the end (delta: 73.4MB). Free memory was 76.7MB in the beginning and 172.3MB in the end (delta: -95.6MB). Peak memory consumption was 94.9MB. Max. memory is 16.1GB. [2023-11-29 03:27:49,303 INFO L158 Benchmark]: Witness Printer took 130.22ms. Allocated memory is still 232.8MB. Free memory was 172.3MB in the beginning and 165.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-29 03:27:49,305 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14ms. Allocated memory is still 159.4MB. Free memory is still 131.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 413.65ms. Allocated memory is still 159.4MB. Free memory was 124.9MB in the beginning and 105.5MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 48.22ms. Allocated memory is still 159.4MB. Free memory was 105.5MB in the beginning and 102.8MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 44.94ms. Allocated memory is still 159.4MB. Free memory was 102.8MB in the beginning and 100.7MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 446.42ms. Allocated memory is still 159.4MB. Free memory was 100.7MB in the beginning and 77.4MB in the end (delta: 23.2MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * TraceAbstraction took 12538.30ms. Allocated memory was 159.4MB in the beginning and 232.8MB in the end (delta: 73.4MB). Free memory was 76.7MB in the beginning and 172.3MB in the end (delta: -95.6MB). Peak memory consumption was 94.9MB. Max. memory is 16.1GB. * Witness Printer took 130.22ms. Allocated memory is still 232.8MB. Free memory was 172.3MB in the beginning and 165.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [58] - GenericResultAtLocation [Line: 127]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [127] - GenericResultAtLocation [Line: 493]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [493] - GenericResultAtLocation [Line: 726]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [726] - GenericResultAtLocation [Line: 765]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [765] - GenericResultAtLocation [Line: 865]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [865] - GenericResultAtLocation [Line: 969]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [969] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 81 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 12.5s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 5.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2313 SdHoareTripleChecker+Valid, 3.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2273 mSDsluCounter, 3295 SdHoareTripleChecker+Invalid, 2.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2186 mSDsCounter, 978 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3765 IncrementalHoareTripleChecker+Invalid, 4743 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 978 mSolverCounterUnsat, 1109 mSDtfsCounter, 3765 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 669 GetRequests, 486 SyntacticMatches, 3 SemanticMatches, 180 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6089 ImplicationChecksByTransitivity, 1.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1219occurred in iteration=11, InterpolantAutomatonStates: 172, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 338 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 27 LocationsWithAnnotation, 1270 PreInvPairs, 1435 NumberOfFragments, 1735 HoareAnnotationTreeSize, 1270 FomulaSimplifications, 1857 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 27 FomulaSimplificationsInter, 12471 FormulaSimplificationTreeSizeReductionInter, 3.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.7s InterpolantComputationTime, 798 NumberOfCodeBlocks, 798 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 869 ConstructedInterpolants, 0 QuantifiedInterpolants, 1631 SizeOfPredicates, 6 NumberOfNonLiveVariables, 964 ConjunctsInSsa, 20 ConjunctsInUnsatCore, 16 InterpolantComputations, 11 PerfectInterpolantSequences, 217/232 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 777]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= methaneLevelCritical)) && (tmp == systemActive)) && (splverifierCounter == 0)) && !((0 == systemActive))) || ((((((1 <= pumpRunning) && (1 <= methaneLevelCritical)) && (2 <= waterLevel)) && (tmp == systemActive)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (tmp == systemActive)) && (splverifierCounter == 0)) && !((0 == systemActive)))) || ((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (tmp == systemActive)) && (splverifierCounter == 0)) && !((0 == systemActive)))) RESULT: Ultimate proved your program to be correct! [2023-11-29 03:27:49,322 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3be82491-6979-49ad-8095-d19ada203e61/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE