./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product52.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product52.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e4fc698cb41b54b4c4983dda7de32b2f9c78701d9e96fbbf9a36472a5bdbde25 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 06:18:22,448 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 06:18:22,511 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 06:18:22,517 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 06:18:22,518 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 06:18:22,552 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 06:18:22,553 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 06:18:22,553 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 06:18:22,554 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 06:18:22,554 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 06:18:22,555 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 06:18:22,556 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 06:18:22,556 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 06:18:22,557 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 06:18:22,557 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 06:18:22,558 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 06:18:22,558 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 06:18:22,559 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 06:18:22,559 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 06:18:22,560 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 06:18:22,560 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 06:18:22,561 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 06:18:22,561 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 06:18:22,562 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 06:18:22,562 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 06:18:22,563 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 06:18:22,563 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 06:18:22,574 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 06:18:22,575 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 06:18:22,575 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 06:18:22,576 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 06:18:22,576 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 06:18:22,577 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 06:18:22,577 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 06:18:22,577 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 06:18:22,577 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 06:18:22,577 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 06:18:22,578 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 06:18:22,578 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 06:18:22,578 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 06:18:22,578 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 06:18:22,578 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 06:18:22,579 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e4fc698cb41b54b4c4983dda7de32b2f9c78701d9e96fbbf9a36472a5bdbde25 [2023-11-29 06:18:22,807 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 06:18:22,827 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 06:18:22,830 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 06:18:22,831 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 06:18:22,831 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 06:18:22,833 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec4_product52.cil.c [2023-11-29 06:18:25,569 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 06:18:25,798 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 06:18:25,799 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/sv-benchmarks/c/product-lines/minepump_spec4_product52.cil.c [2023-11-29 06:18:25,815 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/data/d2544537d/3512f0f7c41b498f8f253c6a6ef471a8/FLAG0b33f06b8 [2023-11-29 06:18:25,829 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/data/d2544537d/3512f0f7c41b498f8f253c6a6ef471a8 [2023-11-29 06:18:25,831 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 06:18:25,833 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 06:18:25,834 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 06:18:25,834 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 06:18:25,838 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 06:18:25,839 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 06:18:25" (1/1) ... [2023-11-29 06:18:25,840 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4d867a5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:25, skipping insertion in model container [2023-11-29 06:18:25,840 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 06:18:25" (1/1) ... [2023-11-29 06:18:25,887 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 06:18:26,114 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/sv-benchmarks/c/product-lines/minepump_spec4_product52.cil.c[18431,18444] [2023-11-29 06:18:26,119 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 06:18:26,130 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 06:18:26,137 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-29 06:18:26,139 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [160] [2023-11-29 06:18:26,139 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [388] [2023-11-29 06:18:26,139 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [458] [2023-11-29 06:18:26,139 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [824] [2023-11-29 06:18:26,140 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [923] [2023-11-29 06:18:26,140 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [958] [2023-11-29 06:18:26,140 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [967] [2023-11-29 06:18:26,199 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/sv-benchmarks/c/product-lines/minepump_spec4_product52.cil.c[18431,18444] [2023-11-29 06:18:26,200 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 06:18:26,219 INFO L206 MainTranslator]: Completed translation [2023-11-29 06:18:26,219 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:26 WrapperNode [2023-11-29 06:18:26,220 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 06:18:26,221 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 06:18:26,221 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 06:18:26,221 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 06:18:26,226 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:26" (1/1) ... [2023-11-29 06:18:26,240 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:26" (1/1) ... [2023-11-29 06:18:26,266 INFO L138 Inliner]: procedures = 57, calls = 101, calls flagged for inlining = 25, calls inlined = 21, statements flattened = 210 [2023-11-29 06:18:26,267 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 06:18:26,267 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 06:18:26,268 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 06:18:26,268 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 06:18:26,277 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:26" (1/1) ... [2023-11-29 06:18:26,277 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:26" (1/1) ... [2023-11-29 06:18:26,279 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:26" (1/1) ... [2023-11-29 06:18:26,292 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 06:18:26,292 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:26" (1/1) ... [2023-11-29 06:18:26,293 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:26" (1/1) ... [2023-11-29 06:18:26,298 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:26" (1/1) ... [2023-11-29 06:18:26,303 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:26" (1/1) ... [2023-11-29 06:18:26,304 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:26" (1/1) ... [2023-11-29 06:18:26,305 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:26" (1/1) ... [2023-11-29 06:18:26,307 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 06:18:26,308 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 06:18:26,308 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 06:18:26,308 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 06:18:26,309 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:26" (1/1) ... [2023-11-29 06:18:26,316 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 06:18:26,341 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 06:18:26,359 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 06:18:26,382 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 06:18:26,414 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 06:18:26,414 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-29 06:18:26,414 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-29 06:18:26,414 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 06:18:26,414 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 06:18:26,414 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 06:18:26,414 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 06:18:26,415 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 06:18:26,415 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 06:18:26,415 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 06:18:26,415 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 06:18:26,415 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-29 06:18:26,415 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-29 06:18:26,416 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 06:18:26,416 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 06:18:26,416 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 06:18:26,416 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 06:18:26,416 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 06:18:26,493 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 06:18:26,495 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 06:18:26,721 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 06:18:26,771 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 06:18:26,771 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 06:18:26,772 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 06:18:26 BoogieIcfgContainer [2023-11-29 06:18:26,772 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 06:18:26,774 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 06:18:26,774 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 06:18:26,778 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 06:18:26,778 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 06:18:25" (1/3) ... [2023-11-29 06:18:26,779 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2148895c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 06:18:26, skipping insertion in model container [2023-11-29 06:18:26,779 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 06:18:26" (2/3) ... [2023-11-29 06:18:26,779 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2148895c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 06:18:26, skipping insertion in model container [2023-11-29 06:18:26,780 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 06:18:26" (3/3) ... [2023-11-29 06:18:26,781 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product52.cil.c [2023-11-29 06:18:26,796 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 06:18:26,796 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 06:18:26,837 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 06:18:26,843 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@317bee7b, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 06:18:26,844 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 06:18:26,848 INFO L276 IsEmpty]: Start isEmpty. Operand has 69 states, 48 states have (on average 1.5625) internal successors, (75), 57 states have internal predecessors, (75), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-29 06:18:26,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-11-29 06:18:26,856 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:18:26,857 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:18:26,858 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:18:26,863 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:18:26,863 INFO L85 PathProgramCache]: Analyzing trace with hash 84840355, now seen corresponding path program 1 times [2023-11-29 06:18:26,873 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:18:26,873 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [164554210] [2023-11-29 06:18:26,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:26,874 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:18:26,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:27,022 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:18:27,022 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:18:27,023 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [164554210] [2023-11-29 06:18:27,024 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [164554210] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:18:27,024 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:18:27,024 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 06:18:27,026 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1204014248] [2023-11-29 06:18:27,026 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:18:27,031 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 06:18:27,031 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:18:27,062 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 06:18:27,062 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 06:18:27,065 INFO L87 Difference]: Start difference. First operand has 69 states, 48 states have (on average 1.5625) internal successors, (75), 57 states have internal predecessors, (75), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 06:18:27,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:18:27,129 INFO L93 Difference]: Finished difference Result 136 states and 199 transitions. [2023-11-29 06:18:27,130 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 06:18:27,132 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-11-29 06:18:27,132 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:18:27,141 INFO L225 Difference]: With dead ends: 136 [2023-11-29 06:18:27,142 INFO L226 Difference]: Without dead ends: 64 [2023-11-29 06:18:27,145 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 06:18:27,149 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 78 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 06:18:27,151 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 78 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 06:18:27,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2023-11-29 06:18:27,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2023-11-29 06:18:27,190 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 45 states have (on average 1.4444444444444444) internal successors, (65), 53 states have internal predecessors, (65), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-29 06:18:27,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 88 transitions. [2023-11-29 06:18:27,194 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 88 transitions. Word has length 12 [2023-11-29 06:18:27,195 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:18:27,195 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 88 transitions. [2023-11-29 06:18:27,195 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 06:18:27,195 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 88 transitions. [2023-11-29 06:18:27,197 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-11-29 06:18:27,197 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:18:27,198 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:18:27,198 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 06:18:27,198 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:18:27,199 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:18:27,199 INFO L85 PathProgramCache]: Analyzing trace with hash 1383562372, now seen corresponding path program 1 times [2023-11-29 06:18:27,200 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:18:27,200 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1687277588] [2023-11-29 06:18:27,200 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:27,200 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:18:27,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:27,297 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:18:27,298 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:18:27,298 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1687277588] [2023-11-29 06:18:27,298 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1687277588] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:18:27,299 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:18:27,299 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 06:18:27,299 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [38195396] [2023-11-29 06:18:27,299 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:18:27,300 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 06:18:27,301 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:18:27,301 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 06:18:27,302 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 06:18:27,302 INFO L87 Difference]: Start difference. First operand 64 states and 88 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 06:18:27,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:18:27,342 INFO L93 Difference]: Finished difference Result 98 states and 134 transitions. [2023-11-29 06:18:27,343 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 06:18:27,343 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-11-29 06:18:27,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:18:27,345 INFO L225 Difference]: With dead ends: 98 [2023-11-29 06:18:27,345 INFO L226 Difference]: Without dead ends: 56 [2023-11-29 06:18:27,346 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 06:18:27,348 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 14 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 112 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 06:18:27,348 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 112 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 06:18:27,350 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2023-11-29 06:18:27,357 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 56. [2023-11-29 06:18:27,357 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 40 states have (on average 1.475) internal successors, (59), 48 states have internal predecessors, (59), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 6 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-29 06:18:27,359 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 77 transitions. [2023-11-29 06:18:27,359 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 77 transitions. Word has length 13 [2023-11-29 06:18:27,359 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:18:27,360 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 77 transitions. [2023-11-29 06:18:27,360 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 06:18:27,360 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 77 transitions. [2023-11-29 06:18:27,361 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-29 06:18:27,361 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:18:27,361 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:18:27,362 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 06:18:27,362 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:18:27,362 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:18:27,363 INFO L85 PathProgramCache]: Analyzing trace with hash -181124471, now seen corresponding path program 1 times [2023-11-29 06:18:27,363 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:18:27,363 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [941233067] [2023-11-29 06:18:27,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:27,364 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:18:27,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:27,440 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:18:27,441 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:18:27,441 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [941233067] [2023-11-29 06:18:27,441 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [941233067] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:18:27,441 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:18:27,441 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 06:18:27,442 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1074716161] [2023-11-29 06:18:27,442 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:18:27,442 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 06:18:27,442 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:18:27,443 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 06:18:27,443 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 06:18:27,443 INFO L87 Difference]: Start difference. First operand 56 states and 77 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 06:18:27,503 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:18:27,503 INFO L93 Difference]: Finished difference Result 164 states and 228 transitions. [2023-11-29 06:18:27,504 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 06:18:27,504 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-11-29 06:18:27,504 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:18:27,506 INFO L225 Difference]: With dead ends: 164 [2023-11-29 06:18:27,506 INFO L226 Difference]: Without dead ends: 110 [2023-11-29 06:18:27,506 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 06:18:27,507 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 71 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 06:18:27,508 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [71 Valid, 131 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 06:18:27,509 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 110 states. [2023-11-29 06:18:27,526 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 110 to 107. [2023-11-29 06:18:27,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 107 states, 76 states have (on average 1.486842105263158) internal successors, (113), 91 states have internal predecessors, (113), 18 states have call successors, (18), 12 states have call predecessors, (18), 12 states have return successors, (18), 11 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-29 06:18:27,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 107 states to 107 states and 149 transitions. [2023-11-29 06:18:27,528 INFO L78 Accepts]: Start accepts. Automaton has 107 states and 149 transitions. Word has length 16 [2023-11-29 06:18:27,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:18:27,529 INFO L495 AbstractCegarLoop]: Abstraction has 107 states and 149 transitions. [2023-11-29 06:18:27,529 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 06:18:27,529 INFO L276 IsEmpty]: Start isEmpty. Operand 107 states and 149 transitions. [2023-11-29 06:18:27,530 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-29 06:18:27,531 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:18:27,531 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:18:27,531 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 06:18:27,531 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:18:27,532 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:18:27,532 INFO L85 PathProgramCache]: Analyzing trace with hash 1836119556, now seen corresponding path program 1 times [2023-11-29 06:18:27,532 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:18:27,532 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1261213141] [2023-11-29 06:18:27,532 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:27,532 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:18:27,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:27,675 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:18:27,675 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:18:27,676 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1261213141] [2023-11-29 06:18:27,676 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1261213141] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:18:27,676 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:18:27,676 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 06:18:27,676 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1741233523] [2023-11-29 06:18:27,677 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:18:27,677 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 06:18:27,677 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:18:27,678 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 06:18:27,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 06:18:27,678 INFO L87 Difference]: Start difference. First operand 107 states and 149 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 06:18:27,778 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:18:27,779 INFO L93 Difference]: Finished difference Result 307 states and 444 transitions. [2023-11-29 06:18:27,779 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 06:18:27,779 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-29 06:18:27,780 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:18:27,783 INFO L225 Difference]: With dead ends: 307 [2023-11-29 06:18:27,783 INFO L226 Difference]: Without dead ends: 202 [2023-11-29 06:18:27,785 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 06:18:27,786 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 51 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 178 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 06:18:27,787 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 178 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 06:18:27,788 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 202 states. [2023-11-29 06:18:27,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 202 to 202. [2023-11-29 06:18:27,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 202 states, 143 states have (on average 1.4475524475524475) internal successors, (207), 170 states have internal predecessors, (207), 36 states have call successors, (36), 24 states have call predecessors, (36), 22 states have return successors, (38), 20 states have call predecessors, (38), 36 states have call successors, (38) [2023-11-29 06:18:27,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 202 states to 202 states and 281 transitions. [2023-11-29 06:18:27,820 INFO L78 Accepts]: Start accepts. Automaton has 202 states and 281 transitions. Word has length 19 [2023-11-29 06:18:27,820 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:18:27,820 INFO L495 AbstractCegarLoop]: Abstraction has 202 states and 281 transitions. [2023-11-29 06:18:27,820 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 06:18:27,821 INFO L276 IsEmpty]: Start isEmpty. Operand 202 states and 281 transitions. [2023-11-29 06:18:27,823 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-29 06:18:27,823 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:18:27,823 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:18:27,823 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 06:18:27,824 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:18:27,824 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:18:27,824 INFO L85 PathProgramCache]: Analyzing trace with hash -813651959, now seen corresponding path program 1 times [2023-11-29 06:18:27,825 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:18:27,825 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [870910330] [2023-11-29 06:18:27,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:27,825 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:18:27,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:27,972 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:18:27,972 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:18:27,973 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [870910330] [2023-11-29 06:18:27,973 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [870910330] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:18:27,973 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:18:27,973 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 06:18:27,974 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1848434602] [2023-11-29 06:18:27,974 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:18:27,974 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 06:18:27,974 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:18:27,975 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 06:18:27,975 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 06:18:27,975 INFO L87 Difference]: Start difference. First operand 202 states and 281 transitions. Second operand has 4 states, 4 states have (on average 5.0) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 06:18:28,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:18:28,077 INFO L93 Difference]: Finished difference Result 508 states and 723 transitions. [2023-11-29 06:18:28,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 06:18:28,078 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2023-11-29 06:18:28,078 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:18:28,081 INFO L225 Difference]: With dead ends: 508 [2023-11-29 06:18:28,081 INFO L226 Difference]: Without dead ends: 308 [2023-11-29 06:18:28,084 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 06:18:28,086 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 43 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 06:18:28,086 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 171 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 06:18:28,087 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2023-11-29 06:18:28,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 298. [2023-11-29 06:18:28,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 219 states have (on average 1.365296803652968) internal successors, (299), 239 states have internal predecessors, (299), 41 states have call successors, (41), 39 states have call predecessors, (41), 37 states have return successors, (59), 36 states have call predecessors, (59), 41 states have call successors, (59) [2023-11-29 06:18:28,120 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 399 transitions. [2023-11-29 06:18:28,120 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 399 transitions. Word has length 21 [2023-11-29 06:18:28,121 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:18:28,121 INFO L495 AbstractCegarLoop]: Abstraction has 298 states and 399 transitions. [2023-11-29 06:18:28,121 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 06:18:28,121 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 399 transitions. [2023-11-29 06:18:28,123 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-29 06:18:28,124 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:18:28,124 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:18:28,124 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-29 06:18:28,124 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:18:28,125 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:18:28,125 INFO L85 PathProgramCache]: Analyzing trace with hash 1324679984, now seen corresponding path program 1 times [2023-11-29 06:18:28,125 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:18:28,125 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1675335338] [2023-11-29 06:18:28,125 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:28,126 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:18:28,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:28,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 06:18:28,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:28,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 06:18:28,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:28,277 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:18:28,277 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:18:28,277 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1675335338] [2023-11-29 06:18:28,278 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1675335338] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:18:28,278 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:18:28,278 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-29 06:18:28,278 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1533077476] [2023-11-29 06:18:28,278 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:18:28,279 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-29 06:18:28,279 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:18:28,280 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-29 06:18:28,280 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2023-11-29 06:18:28,281 INFO L87 Difference]: Start difference. First operand 298 states and 399 transitions. Second operand has 8 states, 8 states have (on average 3.375) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 06:18:28,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:18:28,883 INFO L93 Difference]: Finished difference Result 734 states and 1051 transitions. [2023-11-29 06:18:28,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2023-11-29 06:18:28,884 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 3.375) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 32 [2023-11-29 06:18:28,884 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:18:28,889 INFO L225 Difference]: With dead ends: 734 [2023-11-29 06:18:28,889 INFO L226 Difference]: Without dead ends: 564 [2023-11-29 06:18:28,890 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 65 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=86, Invalid=294, Unknown=0, NotChecked=0, Total=380 [2023-11-29 06:18:28,891 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 284 mSDsluCounter, 253 mSDsCounter, 0 mSdLazyCounter, 495 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 288 SdHoareTripleChecker+Valid, 320 SdHoareTripleChecker+Invalid, 574 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 495 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-29 06:18:28,894 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [288 Valid, 320 Invalid, 574 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 495 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-29 06:18:28,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 564 states. [2023-11-29 06:18:28,951 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 564 to 528. [2023-11-29 06:18:28,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 528 states, 389 states have (on average 1.326478149100257) internal successors, (516), 428 states have internal predecessors, (516), 64 states have call successors, (64), 56 states have call predecessors, (64), 74 states have return successors, (148), 67 states have call predecessors, (148), 64 states have call successors, (148) [2023-11-29 06:18:28,958 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 528 states to 528 states and 728 transitions. [2023-11-29 06:18:28,958 INFO L78 Accepts]: Start accepts. Automaton has 528 states and 728 transitions. Word has length 32 [2023-11-29 06:18:28,959 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:18:28,959 INFO L495 AbstractCegarLoop]: Abstraction has 528 states and 728 transitions. [2023-11-29 06:18:28,959 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 3.375) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 06:18:28,959 INFO L276 IsEmpty]: Start isEmpty. Operand 528 states and 728 transitions. [2023-11-29 06:18:28,962 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2023-11-29 06:18:28,962 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:18:28,962 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:18:28,963 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-29 06:18:28,963 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:18:28,963 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:18:28,963 INFO L85 PathProgramCache]: Analyzing trace with hash 223751662, now seen corresponding path program 1 times [2023-11-29 06:18:28,964 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:18:28,964 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1316012215] [2023-11-29 06:18:28,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:28,964 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:18:28,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:29,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-29 06:18:29,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:29,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 06:18:29,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:29,044 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:18:29,044 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:18:29,044 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1316012215] [2023-11-29 06:18:29,045 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1316012215] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:18:29,045 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:18:29,045 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 06:18:29,045 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [706205121] [2023-11-29 06:18:29,045 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:18:29,045 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 06:18:29,046 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:18:29,046 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 06:18:29,046 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-29 06:18:29,047 INFO L87 Difference]: Start difference. First operand 528 states and 728 transitions. Second operand has 6 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 06:18:29,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:18:29,314 INFO L93 Difference]: Finished difference Result 891 states and 1223 transitions. [2023-11-29 06:18:29,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-29 06:18:29,315 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 48 [2023-11-29 06:18:29,315 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:18:29,318 INFO L225 Difference]: With dead ends: 891 [2023-11-29 06:18:29,318 INFO L226 Difference]: Without dead ends: 365 [2023-11-29 06:18:29,320 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2023-11-29 06:18:29,321 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 192 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 201 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 197 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 245 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 201 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 06:18:29,322 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [197 Valid, 158 Invalid, 245 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 201 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 06:18:29,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 365 states. [2023-11-29 06:18:29,355 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 365 to 343. [2023-11-29 06:18:29,356 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 253 states have (on average 1.3122529644268774) internal successors, (332), 280 states have internal predecessors, (332), 42 states have call successors, (42), 38 states have call predecessors, (42), 47 states have return successors, (85), 43 states have call predecessors, (85), 42 states have call successors, (85) [2023-11-29 06:18:29,359 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 459 transitions. [2023-11-29 06:18:29,359 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 459 transitions. Word has length 48 [2023-11-29 06:18:29,360 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:18:29,360 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 459 transitions. [2023-11-29 06:18:29,360 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 06:18:29,360 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 459 transitions. [2023-11-29 06:18:29,362 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2023-11-29 06:18:29,363 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:18:29,363 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:18:29,363 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-29 06:18:29,363 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:18:29,364 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:18:29,364 INFO L85 PathProgramCache]: Analyzing trace with hash -1964733360, now seen corresponding path program 1 times [2023-11-29 06:18:29,364 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:18:29,364 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [806584244] [2023-11-29 06:18:29,364 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:29,364 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:18:29,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:29,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 06:18:29,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:29,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 06:18:29,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:29,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-29 06:18:29,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:29,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2023-11-29 06:18:29,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:29,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 06:18:29,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:29,604 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-29 06:18:29,604 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:18:29,604 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [806584244] [2023-11-29 06:18:29,604 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [806584244] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 06:18:29,605 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [28498460] [2023-11-29 06:18:29,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:29,605 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 06:18:29,605 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 06:18:29,608 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 06:18:29,614 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-29 06:18:29,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:29,699 INFO L262 TraceCheckSpWp]: Trace formula consists of 250 conjuncts, 12 conjunts are in the unsatisfiable core [2023-11-29 06:18:29,706 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 06:18:29,839 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 9 proven. 6 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-29 06:18:29,840 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-29 06:18:30,045 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 10 proven. 1 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-29 06:18:30,046 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [28498460] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-29 06:18:30,046 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-29 06:18:30,046 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 7, 7] total 13 [2023-11-29 06:18:30,046 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [709253539] [2023-11-29 06:18:30,046 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-29 06:18:30,047 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2023-11-29 06:18:30,047 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:18:30,048 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2023-11-29 06:18:30,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=116, Unknown=0, NotChecked=0, Total=156 [2023-11-29 06:18:30,048 INFO L87 Difference]: Start difference. First operand 343 states and 459 transitions. Second operand has 13 states, 13 states have (on average 6.0) internal successors, (78), 11 states have internal predecessors, (78), 7 states have call successors, (15), 8 states have call predecessors, (15), 7 states have return successors, (13), 7 states have call predecessors, (13), 6 states have call successors, (13) [2023-11-29 06:18:30,956 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:18:30,956 INFO L93 Difference]: Finished difference Result 900 states and 1285 transitions. [2023-11-29 06:18:30,959 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2023-11-29 06:18:30,959 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 6.0) internal successors, (78), 11 states have internal predecessors, (78), 7 states have call successors, (15), 8 states have call predecessors, (15), 7 states have return successors, (13), 7 states have call predecessors, (13), 6 states have call successors, (13) Word has length 61 [2023-11-29 06:18:30,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:18:30,965 INFO L225 Difference]: With dead ends: 900 [2023-11-29 06:18:30,965 INFO L226 Difference]: Without dead ends: 651 [2023-11-29 06:18:30,967 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 168 GetRequests, 127 SyntacticMatches, 6 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 284 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=299, Invalid=1033, Unknown=0, NotChecked=0, Total=1332 [2023-11-29 06:18:30,968 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 390 mSDsluCounter, 338 mSDsCounter, 0 mSdLazyCounter, 703 mSolverCounterSat, 113 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 398 SdHoareTripleChecker+Valid, 419 SdHoareTripleChecker+Invalid, 816 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 113 IncrementalHoareTripleChecker+Valid, 703 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-29 06:18:30,968 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [398 Valid, 419 Invalid, 816 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [113 Valid, 703 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-29 06:18:30,970 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 651 states. [2023-11-29 06:18:31,018 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 651 to 561. [2023-11-29 06:18:31,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 561 states, 411 states have (on average 1.3090024330900243) internal successors, (538), 452 states have internal predecessors, (538), 72 states have call successors, (72), 68 states have call predecessors, (72), 77 states have return successors, (150), 67 states have call predecessors, (150), 72 states have call successors, (150) [2023-11-29 06:18:31,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 561 states to 561 states and 760 transitions. [2023-11-29 06:18:31,025 INFO L78 Accepts]: Start accepts. Automaton has 561 states and 760 transitions. Word has length 61 [2023-11-29 06:18:31,025 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:18:31,025 INFO L495 AbstractCegarLoop]: Abstraction has 561 states and 760 transitions. [2023-11-29 06:18:31,026 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 6.0) internal successors, (78), 11 states have internal predecessors, (78), 7 states have call successors, (15), 8 states have call predecessors, (15), 7 states have return successors, (13), 7 states have call predecessors, (13), 6 states have call successors, (13) [2023-11-29 06:18:31,026 INFO L276 IsEmpty]: Start isEmpty. Operand 561 states and 760 transitions. [2023-11-29 06:18:31,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2023-11-29 06:18:31,028 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:18:31,028 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:18:31,038 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-29 06:18:31,228 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2023-11-29 06:18:31,229 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:18:31,229 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:18:31,229 INFO L85 PathProgramCache]: Analyzing trace with hash 1309373942, now seen corresponding path program 1 times [2023-11-29 06:18:31,229 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:18:31,229 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [596186339] [2023-11-29 06:18:31,230 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:31,230 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:18:31,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:31,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 06:18:31,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:31,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 06:18:31,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:31,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-29 06:18:31,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:31,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 06:18:31,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:31,359 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 11 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-29 06:18:31,359 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:18:31,359 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [596186339] [2023-11-29 06:18:31,359 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [596186339] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 06:18:31,359 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [313413958] [2023-11-29 06:18:31,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:31,359 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 06:18:31,360 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 06:18:31,361 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 06:18:31,366 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-29 06:18:31,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:31,445 INFO L262 TraceCheckSpWp]: Trace formula consists of 241 conjuncts, 7 conjunts are in the unsatisfiable core [2023-11-29 06:18:31,447 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 06:18:31,466 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-29 06:18:31,467 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 06:18:31,467 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [313413958] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:18:31,467 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 06:18:31,467 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 6 [2023-11-29 06:18:31,467 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [740535194] [2023-11-29 06:18:31,468 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:18:31,468 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 06:18:31,468 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:18:31,469 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 06:18:31,469 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-29 06:18:31,469 INFO L87 Difference]: Start difference. First operand 561 states and 760 transitions. Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 06:18:31,563 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:18:31,563 INFO L93 Difference]: Finished difference Result 1130 states and 1577 transitions. [2023-11-29 06:18:31,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 06:18:31,564 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2023-11-29 06:18:31,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:18:31,568 INFO L225 Difference]: With dead ends: 1130 [2023-11-29 06:18:31,568 INFO L226 Difference]: Without dead ends: 571 [2023-11-29 06:18:31,570 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-29 06:18:31,571 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 2 mSDsluCounter, 126 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 192 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 06:18:31,571 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 192 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 06:18:31,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 571 states. [2023-11-29 06:18:31,612 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 571 to 571. [2023-11-29 06:18:31,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 571 states, 421 states have (on average 1.3016627078384797) internal successors, (548), 462 states have internal predecessors, (548), 72 states have call successors, (72), 68 states have call predecessors, (72), 77 states have return successors, (150), 67 states have call predecessors, (150), 72 states have call successors, (150) [2023-11-29 06:18:31,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 571 states to 571 states and 770 transitions. [2023-11-29 06:18:31,619 INFO L78 Accepts]: Start accepts. Automaton has 571 states and 770 transitions. Word has length 57 [2023-11-29 06:18:31,619 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:18:31,619 INFO L495 AbstractCegarLoop]: Abstraction has 571 states and 770 transitions. [2023-11-29 06:18:31,620 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 06:18:31,620 INFO L276 IsEmpty]: Start isEmpty. Operand 571 states and 770 transitions. [2023-11-29 06:18:31,621 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2023-11-29 06:18:31,622 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:18:31,622 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:18:31,628 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-11-29 06:18:31,822 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2023-11-29 06:18:31,822 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:18:31,823 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:18:31,823 INFO L85 PathProgramCache]: Analyzing trace with hash -535993224, now seen corresponding path program 1 times [2023-11-29 06:18:31,823 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:18:31,823 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [475691245] [2023-11-29 06:18:31,823 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:31,823 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:18:31,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:31,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 06:18:31,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:31,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 06:18:31,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:31,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-29 06:18:31,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:31,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 06:18:31,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:31,936 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 11 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-29 06:18:31,936 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:18:31,937 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [475691245] [2023-11-29 06:18:31,937 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [475691245] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 06:18:31,937 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1667099953] [2023-11-29 06:18:31,937 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:31,937 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 06:18:31,937 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 06:18:31,938 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 06:18:31,943 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-29 06:18:32,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:32,018 INFO L262 TraceCheckSpWp]: Trace formula consists of 242 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-29 06:18:32,021 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 06:18:32,042 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-29 06:18:32,042 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 06:18:32,043 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1667099953] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:18:32,043 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 06:18:32,043 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [7] total 9 [2023-11-29 06:18:32,043 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [914568860] [2023-11-29 06:18:32,043 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:18:32,044 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 06:18:32,044 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:18:32,044 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 06:18:32,044 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2023-11-29 06:18:32,045 INFO L87 Difference]: Start difference. First operand 571 states and 770 transitions. Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 06:18:32,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:18:32,123 INFO L93 Difference]: Finished difference Result 1061 states and 1457 transitions. [2023-11-29 06:18:32,126 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 06:18:32,126 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2023-11-29 06:18:32,126 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:18:32,130 INFO L225 Difference]: With dead ends: 1061 [2023-11-29 06:18:32,130 INFO L226 Difference]: Without dead ends: 492 [2023-11-29 06:18:32,132 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 72 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2023-11-29 06:18:32,133 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 6 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 06:18:32,133 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 185 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 06:18:32,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 492 states. [2023-11-29 06:18:32,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 492 to 492. [2023-11-29 06:18:32,172 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 492 states, 363 states have (on average 1.2837465564738293) internal successors, (466), 397 states have internal predecessors, (466), 64 states have call successors, (64), 60 states have call predecessors, (64), 64 states have return successors, (115), 57 states have call predecessors, (115), 64 states have call successors, (115) [2023-11-29 06:18:32,176 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 492 states to 492 states and 645 transitions. [2023-11-29 06:18:32,177 INFO L78 Accepts]: Start accepts. Automaton has 492 states and 645 transitions. Word has length 57 [2023-11-29 06:18:32,177 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:18:32,177 INFO L495 AbstractCegarLoop]: Abstraction has 492 states and 645 transitions. [2023-11-29 06:18:32,177 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 06:18:32,177 INFO L276 IsEmpty]: Start isEmpty. Operand 492 states and 645 transitions. [2023-11-29 06:18:32,179 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2023-11-29 06:18:32,179 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:18:32,180 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:18:32,186 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-29 06:18:32,380 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-29 06:18:32,380 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:18:32,381 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:18:32,381 INFO L85 PathProgramCache]: Analyzing trace with hash -499769044, now seen corresponding path program 1 times [2023-11-29 06:18:32,381 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:18:32,381 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1420570023] [2023-11-29 06:18:32,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:32,381 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:18:32,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:32,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 06:18:32,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:32,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 06:18:32,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:32,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 06:18:32,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:32,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-29 06:18:32,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:32,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 06:18:32,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:32,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 06:18:32,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:32,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-29 06:18:32,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:32,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 06:18:32,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:32,668 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 44 proven. 9 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-29 06:18:32,668 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:18:32,668 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1420570023] [2023-11-29 06:18:32,669 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1420570023] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 06:18:32,669 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [951668628] [2023-11-29 06:18:32,669 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:32,669 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 06:18:32,669 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 06:18:32,670 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 06:18:32,674 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-29 06:18:32,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:32,776 INFO L262 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-29 06:18:32,779 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 06:18:32,922 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 58 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 06:18:32,922 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-29 06:18:33,107 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 45 proven. 9 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-11-29 06:18:33,107 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [951668628] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-29 06:18:33,107 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-29 06:18:33,108 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 8, 7] total 16 [2023-11-29 06:18:33,108 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [762404206] [2023-11-29 06:18:33,108 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-29 06:18:33,109 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2023-11-29 06:18:33,109 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:18:33,109 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2023-11-29 06:18:33,110 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=61, Invalid=179, Unknown=0, NotChecked=0, Total=240 [2023-11-29 06:18:33,110 INFO L87 Difference]: Start difference. First operand 492 states and 645 transitions. Second operand has 16 states, 16 states have (on average 5.9375) internal successors, (95), 14 states have internal predecessors, (95), 6 states have call successors, (19), 8 states have call predecessors, (19), 6 states have return successors, (12), 6 states have call predecessors, (12), 6 states have call successors, (12) [2023-11-29 06:18:34,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:18:34,117 INFO L93 Difference]: Finished difference Result 1364 states and 1885 transitions. [2023-11-29 06:18:34,117 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2023-11-29 06:18:34,117 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 5.9375) internal successors, (95), 14 states have internal predecessors, (95), 6 states have call successors, (19), 8 states have call predecessors, (19), 6 states have return successors, (12), 6 states have call predecessors, (12), 6 states have call successors, (12) Word has length 90 [2023-11-29 06:18:34,118 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:18:34,124 INFO L225 Difference]: With dead ends: 1364 [2023-11-29 06:18:34,125 INFO L226 Difference]: Without dead ends: 936 [2023-11-29 06:18:34,127 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 222 GetRequests, 189 SyntacticMatches, 4 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 173 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=247, Invalid=683, Unknown=0, NotChecked=0, Total=930 [2023-11-29 06:18:34,128 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 361 mSDsluCounter, 502 mSDsCounter, 0 mSdLazyCounter, 1081 mSolverCounterSat, 128 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 368 SdHoareTripleChecker+Valid, 591 SdHoareTripleChecker+Invalid, 1209 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 128 IncrementalHoareTripleChecker+Valid, 1081 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-29 06:18:34,128 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [368 Valid, 591 Invalid, 1209 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [128 Valid, 1081 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-29 06:18:34,130 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 936 states. [2023-11-29 06:18:34,196 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 936 to 743. [2023-11-29 06:18:34,197 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 743 states, 548 states have (on average 1.281021897810219) internal successors, (702), 596 states have internal predecessors, (702), 98 states have call successors, (98), 91 states have call predecessors, (98), 96 states have return successors, (164), 87 states have call predecessors, (164), 98 states have call successors, (164) [2023-11-29 06:18:34,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 743 states to 743 states and 964 transitions. [2023-11-29 06:18:34,203 INFO L78 Accepts]: Start accepts. Automaton has 743 states and 964 transitions. Word has length 90 [2023-11-29 06:18:34,203 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:18:34,203 INFO L495 AbstractCegarLoop]: Abstraction has 743 states and 964 transitions. [2023-11-29 06:18:34,203 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 5.9375) internal successors, (95), 14 states have internal predecessors, (95), 6 states have call successors, (19), 8 states have call predecessors, (19), 6 states have return successors, (12), 6 states have call predecessors, (12), 6 states have call successors, (12) [2023-11-29 06:18:34,203 INFO L276 IsEmpty]: Start isEmpty. Operand 743 states and 964 transitions. [2023-11-29 06:18:34,206 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2023-11-29 06:18:34,206 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 06:18:34,206 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:18:34,212 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2023-11-29 06:18:34,406 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-29 06:18:34,407 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 06:18:34,407 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 06:18:34,407 INFO L85 PathProgramCache]: Analyzing trace with hash 393717294, now seen corresponding path program 1 times [2023-11-29 06:18:34,408 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 06:18:34,408 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1332274577] [2023-11-29 06:18:34,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 06:18:34,408 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 06:18:34,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:34,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 06:18:34,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:34,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 06:18:34,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:34,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 06:18:34,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:34,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-29 06:18:34,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:34,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 06:18:34,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:34,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 06:18:34,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:34,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-29 06:18:34,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:34,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 06:18:34,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 06:18:34,533 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2023-11-29 06:18:34,534 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 06:18:34,534 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1332274577] [2023-11-29 06:18:34,534 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1332274577] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 06:18:34,534 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 06:18:34,534 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-29 06:18:34,534 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1322277850] [2023-11-29 06:18:34,534 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 06:18:34,535 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-29 06:18:34,535 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 06:18:34,535 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-29 06:18:34,535 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-29 06:18:34,536 INFO L87 Difference]: Start difference. First operand 743 states and 964 transitions. Second operand has 7 states, 7 states have (on average 8.285714285714286) internal successors, (58), 4 states have internal predecessors, (58), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-29 06:18:34,720 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 06:18:34,720 INFO L93 Difference]: Finished difference Result 1014 states and 1298 transitions. [2023-11-29 06:18:34,721 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-29 06:18:34,721 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 8.285714285714286) internal successors, (58), 4 states have internal predecessors, (58), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 90 [2023-11-29 06:18:34,721 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 06:18:34,722 INFO L225 Difference]: With dead ends: 1014 [2023-11-29 06:18:34,722 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 06:18:34,724 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-29 06:18:34,725 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 101 mSDsluCounter, 91 mSDsCounter, 0 mSdLazyCounter, 187 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 103 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 222 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 187 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 06:18:34,725 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [103 Valid, 128 Invalid, 222 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 187 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 06:18:34,726 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 06:18:34,726 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 06:18:34,726 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 06:18:34,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 06:18:34,727 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 90 [2023-11-29 06:18:34,727 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 06:18:34,727 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 06:18:34,727 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 8.285714285714286) internal successors, (58), 4 states have internal predecessors, (58), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-29 06:18:34,727 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 06:18:34,727 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 06:18:34,730 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 06:18:34,730 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2023-11-29 06:18:34,732 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 06:18:35,705 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 263 270) no Hoare annotation was computed. [2023-11-29 06:18:35,706 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 263 270) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (< ~waterLevel~0 1) (not (= 1 ~systemActive~0))) (or .cse0 (< ~waterLevel~0 2) (= 0 ~systemActive~0)))) [2023-11-29 06:18:35,706 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 196 202) no Hoare annotation was computed. [2023-11-29 06:18:35,706 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 196 202) the Hoare annotation is: true [2023-11-29 06:18:35,706 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 84 95) the Hoare annotation is: true [2023-11-29 06:18:35,707 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2023-11-29 06:18:35,707 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2023-11-29 06:18:35,707 INFO L902 garLoopResultBuilder]: At program point L832(line 832) the Hoare annotation is: true [2023-11-29 06:18:35,707 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 826 855) no Hoare annotation was computed. [2023-11-29 06:18:35,707 INFO L899 garLoopResultBuilder]: For program point L832-1(line 832) no Hoare annotation was computed. [2023-11-29 06:18:35,707 INFO L899 garLoopResultBuilder]: For program point L851(lines 826 855) no Hoare annotation was computed. [2023-11-29 06:18:35,707 INFO L899 garLoopResultBuilder]: For program point L847(line 847) no Hoare annotation was computed. [2023-11-29 06:18:35,708 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 826 855) the Hoare annotation is: true [2023-11-29 06:18:35,708 INFO L899 garLoopResultBuilder]: For program point L840(lines 840 844) no Hoare annotation was computed. [2023-11-29 06:18:35,708 INFO L902 garLoopResultBuilder]: At program point L840-1(lines 840 844) the Hoare annotation is: true [2023-11-29 06:18:35,708 INFO L902 garLoopResultBuilder]: At program point L836-2(lines 836 850) the Hoare annotation is: true [2023-11-29 06:18:35,708 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2023-11-29 06:18:35,708 INFO L899 garLoopResultBuilder]: For program point L64-2(lines 60 71) no Hoare annotation was computed. [2023-11-29 06:18:35,708 INFO L899 garLoopResultBuilder]: For program point L176-1(lines 175 194) no Hoare annotation was computed. [2023-11-29 06:18:35,709 INFO L899 garLoopResultBuilder]: For program point L238(lines 238 246) no Hoare annotation was computed. [2023-11-29 06:18:35,709 INFO L899 garLoopResultBuilder]: For program point L234(lines 234 251) no Hoare annotation was computed. [2023-11-29 06:18:35,709 INFO L899 garLoopResultBuilder]: For program point L355(lines 355 359) no Hoare annotation was computed. [2023-11-29 06:18:35,709 INFO L899 garLoopResultBuilder]: For program point L355-2(lines 355 359) no Hoare annotation was computed. [2023-11-29 06:18:35,709 INFO L895 garLoopResultBuilder]: At program point L244(line 244) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< |old(~waterLevel~0)| 1))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse1 .cse2 .cse0) (or .cse1 .cse2 (not (= 0 ~systemActive~0))))) [2023-11-29 06:18:35,709 INFO L895 garLoopResultBuilder]: At program point L240(line 240) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< |old(~waterLevel~0)| 1)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |timeShift_processEnvironment_~tmp~1#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2023-11-29 06:18:35,710 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 172 195) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse5 (and .cse6 (= ~waterLevel~0 1))) (.cse7 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2)) (or .cse3 .cse4 .cse0 .cse5) (or .cse3 (and .cse6 .cse2) .cse1 .cse7) (or .cse3 .cse4 .cse5 .cse7)))) [2023-11-29 06:18:35,710 INFO L899 garLoopResultBuilder]: For program point L963(line 963) no Hoare annotation was computed. [2023-11-29 06:18:35,710 INFO L895 garLoopResultBuilder]: At program point L249(line 249) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (not .cse2))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (and .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse0 (and .cse1 (= ~waterLevel~0 1))) (or .cse3 (< |old(~waterLevel~0)| 1) (not (= 0 ~systemActive~0)))))) [2023-11-29 06:18:35,710 INFO L899 garLoopResultBuilder]: For program point L249-1(lines 230 254) no Hoare annotation was computed. [2023-11-29 06:18:35,710 INFO L899 garLoopResultBuilder]: For program point L183-1(lines 183 189) no Hoare annotation was computed. [2023-11-29 06:18:35,711 INFO L899 garLoopResultBuilder]: For program point L980(lines 980 986) no Hoare annotation was computed. [2023-11-29 06:18:35,711 INFO L899 garLoopResultBuilder]: For program point L976(lines 976 989) no Hoare annotation was computed. [2023-11-29 06:18:35,711 INFO L899 garLoopResultBuilder]: For program point L976-1(lines 968 992) no Hoare annotation was computed. [2023-11-29 06:18:35,711 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 172 195) no Hoare annotation was computed. [2023-11-29 06:18:35,711 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 963) no Hoare annotation was computed. [2023-11-29 06:18:35,711 INFO L899 garLoopResultBuilder]: For program point L453(lines 390 457) no Hoare annotation was computed. [2023-11-29 06:18:35,712 INFO L899 garLoopResultBuilder]: For program point L420(lines 420 426) no Hoare annotation was computed. [2023-11-29 06:18:35,712 INFO L899 garLoopResultBuilder]: For program point L420-1(lines 420 426) no Hoare annotation was computed. [2023-11-29 06:18:35,712 INFO L895 garLoopResultBuilder]: At program point L412(line 412) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~waterLevel~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse1 .cse3 (= 0 ~systemActive~0)) (and .cse2 .cse0 .cse1 .cse3))) [2023-11-29 06:18:35,712 INFO L895 garLoopResultBuilder]: At program point L371(line 371) the Hoare annotation is: (and (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-29 06:18:35,712 INFO L895 garLoopResultBuilder]: At program point L450(lines 399 451) the Hoare annotation is: false [2023-11-29 06:18:35,712 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 06:18:35,713 INFO L899 garLoopResultBuilder]: For program point L438(lines 438 444) no Hoare annotation was computed. [2023-11-29 06:18:35,713 INFO L895 garLoopResultBuilder]: At program point L438-2(lines 430 445) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~waterLevel~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse1 .cse3 (= 0 ~systemActive~0)) (and .cse2 .cse0 .cse1 .cse3))) [2023-11-29 06:18:35,713 INFO L899 garLoopResultBuilder]: For program point L401(lines 400 449) no Hoare annotation was computed. [2023-11-29 06:18:35,713 INFO L899 garLoopResultBuilder]: For program point L430(lines 430 445) no Hoare annotation was computed. [2023-11-29 06:18:35,713 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 06:18:35,713 INFO L895 garLoopResultBuilder]: At program point L422(line 422) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~waterLevel~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse1 .cse3 (= 0 ~systemActive~0)) (and .cse2 .cse0 .cse1 .cse3))) [2023-11-29 06:18:35,714 INFO L895 garLoopResultBuilder]: At program point L447(lines 400 449) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~waterLevel~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and .cse2 .cse1 .cse3 (= 0 ~systemActive~0)) (and .cse2 .cse0 .cse1 .cse3))) [2023-11-29 06:18:35,714 INFO L899 garLoopResultBuilder]: For program point L410(lines 410 416) no Hoare annotation was computed. [2023-11-29 06:18:35,714 INFO L899 garLoopResultBuilder]: For program point L410-1(lines 410 416) no Hoare annotation was computed. [2023-11-29 06:18:35,714 INFO L899 garLoopResultBuilder]: For program point L369(lines 369 375) no Hoare annotation was computed. [2023-11-29 06:18:35,714 INFO L899 garLoopResultBuilder]: For program point L369-1(lines 369 375) no Hoare annotation was computed. [2023-11-29 06:18:35,714 INFO L899 garLoopResultBuilder]: For program point L910(lines 910 917) no Hoare annotation was computed. [2023-11-29 06:18:35,715 INFO L899 garLoopResultBuilder]: For program point L910-2(lines 910 917) no Hoare annotation was computed. [2023-11-29 06:18:35,715 INFO L895 garLoopResultBuilder]: At program point L223(line 223) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (< ~waterLevel~0 2)) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2023-11-29 06:18:35,715 INFO L899 garLoopResultBuilder]: For program point L223-1(lines 204 228) no Hoare annotation was computed. [2023-11-29 06:18:35,715 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2023-11-29 06:18:35,715 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 204 228) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (< ~waterLevel~0 1) (not (= 1 ~systemActive~0))) [2023-11-29 06:18:35,715 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 137 150) no Hoare annotation was computed. [2023-11-29 06:18:35,715 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 204 228) no Hoare annotation was computed. [2023-11-29 06:18:35,716 INFO L895 garLoopResultBuilder]: At program point L218(line 218) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0))) (and (or .cse0 .cse1 (and .cse2 .cse3) (< ~waterLevel~0 2)) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse2 .cse3)))) [2023-11-29 06:18:35,716 INFO L899 garLoopResultBuilder]: For program point L212(lines 212 220) no Hoare annotation was computed. [2023-11-29 06:18:35,716 INFO L899 garLoopResultBuilder]: For program point L208(lines 208 225) no Hoare annotation was computed. [2023-11-29 06:18:35,716 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 340) no Hoare annotation was computed. [2023-11-29 06:18:35,716 INFO L899 garLoopResultBuilder]: For program point L336-2(lines 336 340) no Hoare annotation was computed. [2023-11-29 06:18:35,716 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2023-11-29 06:18:35,716 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2023-11-29 06:18:35,716 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 72 83) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= ~pumpRunning~0 0))) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse5 (= ~waterLevel~0 1)) (.cse6 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 .cse5) (or .cse3 .cse1 .cse2 .cse6) (or .cse3 .cse4 .cse5 .cse6))) [2023-11-29 06:18:35,719 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 06:18:35,721 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 06:18:35,732 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 06:18:35 BoogieIcfgContainer [2023-11-29 06:18:35,732 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 06:18:35,733 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 06:18:35,733 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 06:18:35,733 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 06:18:35,733 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 06:18:26" (3/4) ... [2023-11-29 06:18:35,735 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 06:18:35,739 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-29 06:18:35,739 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-29 06:18:35,739 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 06:18:35,739 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 06:18:35,739 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 06:18:35,739 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 06:18:35,739 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 06:18:35,747 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 32 nodes and edges [2023-11-29 06:18:35,748 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 06:18:35,748 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 06:18:35,749 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 06:18:35,750 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 06:18:35,859 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 06:18:35,859 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 06:18:35,860 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 06:18:35,860 INFO L158 Benchmark]: Toolchain (without parser) took 10027.73ms. Allocated memory was 182.5MB in the beginning and 220.2MB in the end (delta: 37.7MB). Free memory was 151.2MB in the beginning and 104.2MB in the end (delta: 47.0MB). Peak memory consumption was 84.5MB. Max. memory is 16.1GB. [2023-11-29 06:18:35,861 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 119.5MB. Free memory is still 91.6MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 06:18:35,861 INFO L158 Benchmark]: CACSL2BoogieTranslator took 385.94ms. Allocated memory is still 182.5MB. Free memory was 151.2MB in the beginning and 131.4MB in the end (delta: 19.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-29 06:18:35,861 INFO L158 Benchmark]: Boogie Procedure Inliner took 46.40ms. Allocated memory is still 182.5MB. Free memory was 131.4MB in the beginning and 129.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 06:18:35,862 INFO L158 Benchmark]: Boogie Preprocessor took 39.93ms. Allocated memory is still 182.5MB. Free memory was 129.3MB in the beginning and 127.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 06:18:35,862 INFO L158 Benchmark]: RCFGBuilder took 464.23ms. Allocated memory is still 182.5MB. Free memory was 127.2MB in the beginning and 129.8MB in the end (delta: -2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-29 06:18:35,863 INFO L158 Benchmark]: TraceAbstraction took 8957.81ms. Allocated memory was 182.5MB in the beginning and 220.2MB in the end (delta: 37.7MB). Free memory was 129.5MB in the beginning and 111.5MB in the end (delta: 18.0MB). Peak memory consumption was 114.5MB. Max. memory is 16.1GB. [2023-11-29 06:18:35,863 INFO L158 Benchmark]: Witness Printer took 127.18ms. Allocated memory is still 220.2MB. Free memory was 111.5MB in the beginning and 104.2MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-29 06:18:35,865 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 119.5MB. Free memory is still 91.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 385.94ms. Allocated memory is still 182.5MB. Free memory was 151.2MB in the beginning and 131.4MB in the end (delta: 19.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 46.40ms. Allocated memory is still 182.5MB. Free memory was 131.4MB in the beginning and 129.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 39.93ms. Allocated memory is still 182.5MB. Free memory was 129.3MB in the beginning and 127.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 464.23ms. Allocated memory is still 182.5MB. Free memory was 127.2MB in the beginning and 129.8MB in the end (delta: -2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * TraceAbstraction took 8957.81ms. Allocated memory was 182.5MB in the beginning and 220.2MB in the end (delta: 37.7MB). Free memory was 129.5MB in the beginning and 111.5MB in the end (delta: 18.0MB). Peak memory consumption was 114.5MB. Max. memory is 16.1GB. * Witness Printer took 127.18ms. Allocated memory is still 220.2MB. Free memory was 111.5MB in the beginning and 104.2MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 160]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [160] - GenericResultAtLocation [Line: 388]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [388] - GenericResultAtLocation [Line: 458]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [458] - GenericResultAtLocation [Line: 824]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [824] - GenericResultAtLocation [Line: 923]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [923] - GenericResultAtLocation [Line: 958]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [958] - GenericResultAtLocation [Line: 967]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [967] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 963]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 69 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.9s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1547 SdHoareTripleChecker+Valid, 2.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1515 mSDsluCounter, 2663 SdHoareTripleChecker+Invalid, 1.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1855 mSDsCounter, 414 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2927 IncrementalHoareTripleChecker+Invalid, 3341 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 414 mSolverCounterUnsat, 808 mSDtfsCounter, 2927 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 613 GetRequests, 486 SyntacticMatches, 10 SemanticMatches, 117 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 543 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=743occurred in iteration=11, InterpolantAutomatonStates: 115, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 354 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 21 LocationsWithAnnotation, 1033 PreInvPairs, 1089 NumberOfFragments, 535 HoareAnnotationTreeSize, 1033 FomulaSimplifications, 1244 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 21 FomulaSimplificationsInter, 1442 FormulaSimplificationTreeSizeReductionInter, 0.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 781 NumberOfCodeBlocks, 781 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 914 ConstructedInterpolants, 0 QuantifiedInterpolants, 1807 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1056 ConjunctsInSsa, 32 ConjunctsInUnsatCore, 18 InterpolantComputations, 10 PerfectInterpolantSequences, 352/399 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 399]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 836]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((pumpRunning == 0) && (splverifierCounter == 0)) && (1 <= waterLevel)) && (0 == systemActive))) || ((((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= waterLevel))) RESULT: Ultimate proved your program to be correct! [2023-11-29 06:18:35,882 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82010762-f550-496a-bd7f-92c5c60634cd/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE