./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product35.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version cf1a7837 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product35.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 45ba8c3ee5105630bc9146965d68439e6204903aca4c5a31cd4f017e456c8589 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-cf1a783 [2023-11-12 02:16:08,627 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-12 02:16:08,732 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-12 02:16:08,737 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-12 02:16:08,738 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-12 02:16:08,763 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-12 02:16:08,763 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-12 02:16:08,764 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-12 02:16:08,765 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-12 02:16:08,766 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-12 02:16:08,767 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-12 02:16:08,767 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-12 02:16:08,768 INFO L153 SettingsManager]: * Use SBE=true [2023-11-12 02:16:08,769 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-12 02:16:08,769 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-12 02:16:08,770 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-12 02:16:08,770 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-12 02:16:08,771 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-12 02:16:08,772 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-12 02:16:08,772 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-12 02:16:08,773 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-12 02:16:08,774 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-12 02:16:08,774 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-12 02:16:08,775 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-12 02:16:08,775 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-12 02:16:08,776 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-12 02:16:08,776 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-12 02:16:08,777 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-12 02:16:08,777 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-12 02:16:08,778 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-12 02:16:08,778 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-12 02:16:08,779 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-12 02:16:08,779 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-12 02:16:08,780 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-12 02:16:08,780 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-12 02:16:08,780 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-12 02:16:08,781 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-12 02:16:08,781 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-12 02:16:08,782 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-12 02:16:08,782 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 45ba8c3ee5105630bc9146965d68439e6204903aca4c5a31cd4f017e456c8589 [2023-11-12 02:16:09,118 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-12 02:16:09,154 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-12 02:16:09,157 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-12 02:16:09,159 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-12 02:16:09,161 INFO L274 PluginConnector]: CDTParser initialized [2023-11-12 02:16:09,162 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/../../sv-benchmarks/c/product-lines/minepump_spec5_product35.cil.c [2023-11-12 02:16:12,381 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-12 02:16:12,621 INFO L384 CDTParser]: Found 1 translation units. [2023-11-12 02:16:12,621 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/sv-benchmarks/c/product-lines/minepump_spec5_product35.cil.c [2023-11-12 02:16:12,635 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/data/03f9428f2/b8771e840d14402f9b0c40a00b659a9f/FLAG1c3cf6b4a [2023-11-12 02:16:12,649 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/data/03f9428f2/b8771e840d14402f9b0c40a00b659a9f [2023-11-12 02:16:12,651 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-12 02:16:12,653 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-12 02:16:12,658 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-12 02:16:12,658 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-12 02:16:12,664 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-12 02:16:12,665 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.11 02:16:12" (1/1) ... [2023-11-12 02:16:12,666 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@39a871fb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:16:12, skipping insertion in model container [2023-11-12 02:16:12,666 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.11 02:16:12" (1/1) ... [2023-11-12 02:16:12,713 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-12 02:16:12,899 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/sv-benchmarks/c/product-lines/minepump_spec5_product35.cil.c[1605,1618] [2023-11-12 02:16:13,015 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-12 02:16:13,026 INFO L202 MainTranslator]: Completed pre-run [2023-11-12 02:16:13,041 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2023-11-12 02:16:13,043 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [58] [2023-11-12 02:16:13,043 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [164] [2023-11-12 02:16:13,043 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [530] [2023-11-12 02:16:13,043 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [565] [2023-11-12 02:16:13,044 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [633] [2023-11-12 02:16:13,044 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [732] [2023-11-12 02:16:13,044 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [907] [2023-11-12 02:16:13,056 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/sv-benchmarks/c/product-lines/minepump_spec5_product35.cil.c[1605,1618] [2023-11-12 02:16:13,158 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-12 02:16:13,195 INFO L206 MainTranslator]: Completed translation [2023-11-12 02:16:13,205 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:16:13 WrapperNode [2023-11-12 02:16:13,206 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-12 02:16:13,207 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-12 02:16:13,207 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-12 02:16:13,208 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-12 02:16:13,215 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:16:13" (1/1) ... [2023-11-12 02:16:13,234 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:16:13" (1/1) ... [2023-11-12 02:16:13,270 INFO L138 Inliner]: procedures = 55, calls = 98, calls flagged for inlining = 24, calls inlined = 20, statements flattened = 182 [2023-11-12 02:16:13,271 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-12 02:16:13,271 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-12 02:16:13,272 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-12 02:16:13,272 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-12 02:16:13,281 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:16:13" (1/1) ... [2023-11-12 02:16:13,281 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:16:13" (1/1) ... [2023-11-12 02:16:13,284 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:16:13" (1/1) ... [2023-11-12 02:16:13,284 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:16:13" (1/1) ... [2023-11-12 02:16:13,291 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:16:13" (1/1) ... [2023-11-12 02:16:13,295 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:16:13" (1/1) ... [2023-11-12 02:16:13,297 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:16:13" (1/1) ... [2023-11-12 02:16:13,299 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:16:13" (1/1) ... [2023-11-12 02:16:13,302 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-12 02:16:13,302 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-12 02:16:13,303 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-12 02:16:13,303 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-12 02:16:13,304 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:16:13" (1/1) ... [2023-11-12 02:16:13,311 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-12 02:16:13,327 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/z3 [2023-11-12 02:16:13,370 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-12 02:16:13,407 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-12 02:16:13,473 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-12 02:16:13,473 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-12 02:16:13,474 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-12 02:16:13,474 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-12 02:16:13,476 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-12 02:16:13,477 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-12 02:16:13,477 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-12 02:16:13,477 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-12 02:16:13,477 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-12 02:16:13,477 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-12 02:16:13,478 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-12 02:16:13,478 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-12 02:16:13,478 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-12 02:16:13,478 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-12 02:16:13,478 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-12 02:16:13,479 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-12 02:16:13,634 INFO L236 CfgBuilder]: Building ICFG [2023-11-12 02:16:13,636 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-12 02:16:14,000 INFO L277 CfgBuilder]: Performing block encoding [2023-11-12 02:16:14,008 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-12 02:16:14,008 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-12 02:16:14,011 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:16:14 BoogieIcfgContainer [2023-11-12 02:16:14,011 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-12 02:16:14,014 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-12 02:16:14,014 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-12 02:16:14,018 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-12 02:16:14,019 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.11 02:16:12" (1/3) ... [2023-11-12 02:16:14,019 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4493a0be and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.11 02:16:14, skipping insertion in model container [2023-11-12 02:16:14,020 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:16:13" (2/3) ... [2023-11-12 02:16:14,020 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4493a0be and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.11 02:16:14, skipping insertion in model container [2023-11-12 02:16:14,020 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:16:14" (3/3) ... [2023-11-12 02:16:14,022 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product35.cil.c [2023-11-12 02:16:14,045 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-12 02:16:14,045 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-12 02:16:14,104 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-12 02:16:14,112 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5a6351ab, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-12 02:16:14,112 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-12 02:16:14,117 INFO L276 IsEmpty]: Start isEmpty. Operand has 84 states, 66 states have (on average 1.378787878787879) internal successors, (91), 72 states have internal predecessors, (91), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-12 02:16:14,129 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-12 02:16:14,129 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:16:14,130 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:16:14,130 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:16:14,136 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:16:14,137 INFO L85 PathProgramCache]: Analyzing trace with hash -569276447, now seen corresponding path program 1 times [2023-11-12 02:16:14,147 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:16:14,148 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [64391343] [2023-11-12 02:16:14,148 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:16:14,149 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:16:14,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:14,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-12 02:16:14,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:14,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-12 02:16:14,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:14,366 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-12 02:16:14,367 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:16:14,368 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [64391343] [2023-11-12 02:16:14,369 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [64391343] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:16:14,370 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:16:14,370 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-12 02:16:14,372 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [687757313] [2023-11-12 02:16:14,373 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:16:14,379 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-12 02:16:14,380 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:16:14,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-12 02:16:14,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-12 02:16:14,439 INFO L87 Difference]: Start difference. First operand has 84 states, 66 states have (on average 1.378787878787879) internal successors, (91), 72 states have internal predecessors, (91), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-12 02:16:14,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:16:14,497 INFO L93 Difference]: Finished difference Result 159 states and 216 transitions. [2023-11-12 02:16:14,498 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-12 02:16:14,499 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2023-11-12 02:16:14,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:16:14,511 INFO L225 Difference]: With dead ends: 159 [2023-11-12 02:16:14,511 INFO L226 Difference]: Without dead ends: 75 [2023-11-12 02:16:14,516 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-12 02:16:14,520 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:16:14,521 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 105 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:16:14,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2023-11-12 02:16:14,564 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2023-11-12 02:16:14,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.305084745762712) internal successors, (77), 64 states have internal predecessors, (77), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-12 02:16:14,569 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 96 transitions. [2023-11-12 02:16:14,573 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 96 transitions. Word has length 32 [2023-11-12 02:16:14,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:16:14,574 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 96 transitions. [2023-11-12 02:16:14,576 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-12 02:16:14,576 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2023-11-12 02:16:14,579 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2023-11-12 02:16:14,586 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:16:14,586 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:16:14,587 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-12 02:16:14,587 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:16:14,588 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:16:14,589 INFO L85 PathProgramCache]: Analyzing trace with hash 2081952552, now seen corresponding path program 1 times [2023-11-12 02:16:14,589 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:16:14,589 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [572220057] [2023-11-12 02:16:14,590 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:16:14,590 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:16:14,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:14,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-12 02:16:14,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:14,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-12 02:16:14,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:14,870 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-12 02:16:14,875 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:16:14,876 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [572220057] [2023-11-12 02:16:14,876 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [572220057] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:16:14,876 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:16:14,876 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-12 02:16:14,877 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [934648988] [2023-11-12 02:16:14,877 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:16:14,879 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-12 02:16:14,880 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:16:14,881 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-12 02:16:14,882 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-12 02:16:14,883 INFO L87 Difference]: Start difference. First operand 75 states and 96 transitions. Second operand has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-12 02:16:15,102 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:16:15,103 INFO L93 Difference]: Finished difference Result 261 states and 349 transitions. [2023-11-12 02:16:15,103 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-12 02:16:15,104 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2023-11-12 02:16:15,104 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:16:15,107 INFO L225 Difference]: With dead ends: 261 [2023-11-12 02:16:15,107 INFO L226 Difference]: Without dead ends: 194 [2023-11-12 02:16:15,109 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-12 02:16:15,111 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 198 mSDsluCounter, 380 mSDsCounter, 0 mSdLazyCounter, 84 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 198 SdHoareTripleChecker+Valid, 480 SdHoareTripleChecker+Invalid, 95 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 84 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-12 02:16:15,112 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [198 Valid, 480 Invalid, 95 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 84 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-12 02:16:15,113 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 194 states. [2023-11-12 02:16:15,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 194 to 184. [2023-11-12 02:16:15,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 141 states have (on average 1.326241134751773) internal successors, (187), 152 states have internal predecessors, (187), 28 states have call successors, (28), 17 states have call predecessors, (28), 14 states have return successors, (28), 23 states have call predecessors, (28), 25 states have call successors, (28) [2023-11-12 02:16:15,151 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 243 transitions. [2023-11-12 02:16:15,151 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 243 transitions. Word has length 37 [2023-11-12 02:16:15,152 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:16:15,152 INFO L495 AbstractCegarLoop]: Abstraction has 184 states and 243 transitions. [2023-11-12 02:16:15,152 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-12 02:16:15,153 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 243 transitions. [2023-11-12 02:16:15,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2023-11-12 02:16:15,155 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:16:15,155 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:16:15,156 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-12 02:16:15,156 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:16:15,157 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:16:15,157 INFO L85 PathProgramCache]: Analyzing trace with hash -2078291855, now seen corresponding path program 1 times [2023-11-12 02:16:15,157 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:16:15,157 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1266751573] [2023-11-12 02:16:15,158 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:16:15,158 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:16:15,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:15,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-12 02:16:15,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:15,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-12 02:16:15,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:15,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-12 02:16:15,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:15,380 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-12 02:16:15,382 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:16:15,382 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1266751573] [2023-11-12 02:16:15,383 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1266751573] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:16:15,383 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:16:15,384 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-12 02:16:15,385 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2104045549] [2023-11-12 02:16:15,385 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:16:15,385 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-12 02:16:15,386 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:16:15,387 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-12 02:16:15,387 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:16:15,387 INFO L87 Difference]: Start difference. First operand 184 states and 243 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-12 02:16:15,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:16:15,466 INFO L93 Difference]: Finished difference Result 461 states and 639 transitions. [2023-11-12 02:16:15,472 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-12 02:16:15,472 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 42 [2023-11-12 02:16:15,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:16:15,479 INFO L225 Difference]: With dead ends: 461 [2023-11-12 02:16:15,481 INFO L226 Difference]: Without dead ends: 285 [2023-11-12 02:16:15,484 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:16:15,488 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 65 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:16:15,492 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 177 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:16:15,494 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 285 states. [2023-11-12 02:16:15,579 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 285 to 283. [2023-11-12 02:16:15,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 283 states, 214 states have (on average 1.2990654205607477) internal successors, (278), 227 states have internal predecessors, (278), 44 states have call successors, (44), 29 states have call predecessors, (44), 24 states have return successors, (57), 39 states have call predecessors, (57), 39 states have call successors, (57) [2023-11-12 02:16:15,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 379 transitions. [2023-11-12 02:16:15,591 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 379 transitions. Word has length 42 [2023-11-12 02:16:15,591 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:16:15,591 INFO L495 AbstractCegarLoop]: Abstraction has 283 states and 379 transitions. [2023-11-12 02:16:15,592 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-12 02:16:15,592 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 379 transitions. [2023-11-12 02:16:15,597 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-12 02:16:15,601 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:16:15,601 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:16:15,601 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-12 02:16:15,602 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:16:15,602 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:16:15,603 INFO L85 PathProgramCache]: Analyzing trace with hash -1830972643, now seen corresponding path program 1 times [2023-11-12 02:16:15,603 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:16:15,603 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2128082622] [2023-11-12 02:16:15,604 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:16:15,604 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:16:15,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:15,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-12 02:16:15,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:15,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-12 02:16:15,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:15,776 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-12 02:16:15,776 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:16:15,777 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2128082622] [2023-11-12 02:16:15,777 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2128082622] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:16:15,777 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:16:15,777 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-12 02:16:15,777 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [18973253] [2023-11-12 02:16:15,777 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:16:15,778 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-12 02:16:15,778 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:16:15,779 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-12 02:16:15,779 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-12 02:16:15,779 INFO L87 Difference]: Start difference. First operand 283 states and 379 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-12 02:16:15,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:16:15,901 INFO L93 Difference]: Finished difference Result 560 states and 767 transitions. [2023-11-12 02:16:15,902 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-12 02:16:15,902 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2023-11-12 02:16:15,903 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:16:15,907 INFO L225 Difference]: With dead ends: 560 [2023-11-12 02:16:15,909 INFO L226 Difference]: Without dead ends: 285 [2023-11-12 02:16:15,911 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-12 02:16:15,921 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 53 mSDsluCounter, 345 mSDsCounter, 0 mSdLazyCounter, 63 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 451 SdHoareTripleChecker+Invalid, 68 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 63 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-12 02:16:15,922 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 451 Invalid, 68 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 63 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-12 02:16:15,925 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 285 states. [2023-11-12 02:16:15,968 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 285 to 280. [2023-11-12 02:16:15,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 280 states, 211 states have (on average 1.2748815165876777) internal successors, (269), 224 states have internal predecessors, (269), 44 states have call successors, (44), 29 states have call predecessors, (44), 24 states have return successors, (57), 39 states have call predecessors, (57), 39 states have call successors, (57) [2023-11-12 02:16:15,974 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 280 states to 280 states and 370 transitions. [2023-11-12 02:16:15,975 INFO L78 Accepts]: Start accepts. Automaton has 280 states and 370 transitions. Word has length 41 [2023-11-12 02:16:15,975 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:16:15,975 INFO L495 AbstractCegarLoop]: Abstraction has 280 states and 370 transitions. [2023-11-12 02:16:15,976 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-12 02:16:15,976 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 370 transitions. [2023-11-12 02:16:15,984 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2023-11-12 02:16:15,984 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:16:15,985 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:16:15,985 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-12 02:16:15,985 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:16:15,986 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:16:15,987 INFO L85 PathProgramCache]: Analyzing trace with hash 2109076356, now seen corresponding path program 1 times [2023-11-12 02:16:15,987 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:16:15,987 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [917171523] [2023-11-12 02:16:15,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:16:15,988 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:16:16,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-12 02:16:16,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-12 02:16:16,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,058 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-12 02:16:16,058 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:16:16,058 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [917171523] [2023-11-12 02:16:16,058 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [917171523] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:16:16,058 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:16:16,059 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-12 02:16:16,059 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1282435517] [2023-11-12 02:16:16,059 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:16:16,059 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-12 02:16:16,060 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:16:16,060 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-12 02:16:16,060 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:16:16,061 INFO L87 Difference]: Start difference. First operand 280 states and 370 transitions. Second operand has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-12 02:16:16,079 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:16:16,079 INFO L93 Difference]: Finished difference Result 412 states and 523 transitions. [2023-11-12 02:16:16,080 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-12 02:16:16,080 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 42 [2023-11-12 02:16:16,080 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:16:16,083 INFO L225 Difference]: With dead ends: 412 [2023-11-12 02:16:16,083 INFO L226 Difference]: Without dead ends: 235 [2023-11-12 02:16:16,084 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:16:16,085 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 17 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 145 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:16:16,086 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 145 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:16:16,087 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2023-11-12 02:16:16,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 235. [2023-11-12 02:16:16,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 235 states, 181 states have (on average 1.292817679558011) internal successors, (234), 194 states have internal predecessors, (234), 29 states have call successors, (29), 24 states have call predecessors, (29), 24 states have return successors, (35), 29 states have call predecessors, (35), 29 states have call successors, (35) [2023-11-12 02:16:16,109 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 235 states to 235 states and 298 transitions. [2023-11-12 02:16:16,109 INFO L78 Accepts]: Start accepts. Automaton has 235 states and 298 transitions. Word has length 42 [2023-11-12 02:16:16,110 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:16:16,110 INFO L495 AbstractCegarLoop]: Abstraction has 235 states and 298 transitions. [2023-11-12 02:16:16,110 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-12 02:16:16,110 INFO L276 IsEmpty]: Start isEmpty. Operand 235 states and 298 transitions. [2023-11-12 02:16:16,111 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-12 02:16:16,111 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:16:16,112 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:16:16,112 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-12 02:16:16,112 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:16:16,113 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:16:16,113 INFO L85 PathProgramCache]: Analyzing trace with hash 1378984981, now seen corresponding path program 1 times [2023-11-12 02:16:16,113 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:16:16,113 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1244749457] [2023-11-12 02:16:16,113 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:16:16,114 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:16:16,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-12 02:16:16,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-12 02:16:16,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,217 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-12 02:16:16,217 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:16:16,218 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1244749457] [2023-11-12 02:16:16,218 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1244749457] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:16:16,218 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:16:16,218 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-12 02:16:16,218 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [300925578] [2023-11-12 02:16:16,218 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:16:16,219 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-12 02:16:16,219 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:16:16,220 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-12 02:16:16,220 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-12 02:16:16,220 INFO L87 Difference]: Start difference. First operand 235 states and 298 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-12 02:16:16,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:16:16,280 INFO L93 Difference]: Finished difference Result 490 states and 632 transitions. [2023-11-12 02:16:16,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-12 02:16:16,281 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 46 [2023-11-12 02:16:16,281 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:16:16,285 INFO L225 Difference]: With dead ends: 490 [2023-11-12 02:16:16,286 INFO L226 Difference]: Without dead ends: 263 [2023-11-12 02:16:16,287 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-12 02:16:16,289 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 13 mSDsluCounter, 262 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 355 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:16:16,289 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 355 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:16:16,291 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 263 states. [2023-11-12 02:16:16,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 263 to 241. [2023-11-12 02:16:16,315 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 241 states, 187 states have (on average 1.2834224598930482) internal successors, (240), 200 states have internal predecessors, (240), 29 states have call successors, (29), 24 states have call predecessors, (29), 24 states have return successors, (35), 29 states have call predecessors, (35), 29 states have call successors, (35) [2023-11-12 02:16:16,318 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 241 states to 241 states and 304 transitions. [2023-11-12 02:16:16,318 INFO L78 Accepts]: Start accepts. Automaton has 241 states and 304 transitions. Word has length 46 [2023-11-12 02:16:16,319 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:16:16,319 INFO L495 AbstractCegarLoop]: Abstraction has 241 states and 304 transitions. [2023-11-12 02:16:16,319 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-12 02:16:16,320 INFO L276 IsEmpty]: Start isEmpty. Operand 241 states and 304 transitions. [2023-11-12 02:16:16,321 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-12 02:16:16,322 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:16:16,322 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:16:16,322 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-12 02:16:16,322 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:16:16,323 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:16:16,323 INFO L85 PathProgramCache]: Analyzing trace with hash -209362921, now seen corresponding path program 1 times [2023-11-12 02:16:16,323 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:16:16,323 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1421186373] [2023-11-12 02:16:16,323 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:16:16,324 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:16:16,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-12 02:16:16,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-12 02:16:16,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,458 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-12 02:16:16,458 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:16:16,459 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1421186373] [2023-11-12 02:16:16,459 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1421186373] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:16:16,459 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:16:16,459 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-12 02:16:16,459 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1236077536] [2023-11-12 02:16:16,459 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:16:16,460 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-12 02:16:16,460 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:16:16,461 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-12 02:16:16,461 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-12 02:16:16,461 INFO L87 Difference]: Start difference. First operand 241 states and 304 transitions. Second operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-12 02:16:16,494 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:16:16,494 INFO L93 Difference]: Finished difference Result 506 states and 653 transitions. [2023-11-12 02:16:16,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-12 02:16:16,495 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 46 [2023-11-12 02:16:16,495 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:16:16,497 INFO L225 Difference]: With dead ends: 506 [2023-11-12 02:16:16,497 INFO L226 Difference]: Without dead ends: 273 [2023-11-12 02:16:16,498 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-12 02:16:16,499 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 16 mSDsluCounter, 174 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 269 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:16:16,501 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 269 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:16:16,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 273 states. [2023-11-12 02:16:16,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 273 to 245. [2023-11-12 02:16:16,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 245 states, 191 states have (on average 1.2774869109947644) internal successors, (244), 204 states have internal predecessors, (244), 29 states have call successors, (29), 24 states have call predecessors, (29), 24 states have return successors, (35), 29 states have call predecessors, (35), 29 states have call successors, (35) [2023-11-12 02:16:16,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 245 states to 245 states and 308 transitions. [2023-11-12 02:16:16,531 INFO L78 Accepts]: Start accepts. Automaton has 245 states and 308 transitions. Word has length 46 [2023-11-12 02:16:16,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:16:16,534 INFO L495 AbstractCegarLoop]: Abstraction has 245 states and 308 transitions. [2023-11-12 02:16:16,534 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-12 02:16:16,534 INFO L276 IsEmpty]: Start isEmpty. Operand 245 states and 308 transitions. [2023-11-12 02:16:16,535 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-12 02:16:16,536 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:16:16,536 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:16:16,536 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-12 02:16:16,536 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:16:16,537 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:16:16,537 INFO L85 PathProgramCache]: Analyzing trace with hash -1898306663, now seen corresponding path program 1 times [2023-11-12 02:16:16,537 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:16:16,537 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [597791652] [2023-11-12 02:16:16,537 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:16:16,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:16:16,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-12 02:16:16,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-12 02:16:16,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,611 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-12 02:16:16,611 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:16:16,611 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [597791652] [2023-11-12 02:16:16,612 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [597791652] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:16:16,612 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:16:16,612 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-12 02:16:16,612 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1680223034] [2023-11-12 02:16:16,612 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:16:16,613 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-12 02:16:16,613 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:16:16,613 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-12 02:16:16,614 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:16:16,614 INFO L87 Difference]: Start difference. First operand 245 states and 308 transitions. Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-12 02:16:16,652 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:16:16,653 INFO L93 Difference]: Finished difference Result 609 states and 775 transitions. [2023-11-12 02:16:16,653 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-12 02:16:16,653 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 46 [2023-11-12 02:16:16,654 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:16:16,656 INFO L225 Difference]: With dead ends: 609 [2023-11-12 02:16:16,656 INFO L226 Difference]: Without dead ends: 372 [2023-11-12 02:16:16,658 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:16:16,659 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 39 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:16:16,659 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 153 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:16:16,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 372 states. [2023-11-12 02:16:16,692 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 372 to 372. [2023-11-12 02:16:16,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 372 states, 290 states have (on average 1.2482758620689656) internal successors, (362), 306 states have internal predecessors, (362), 46 states have call successors, (46), 38 states have call predecessors, (46), 35 states have return successors, (53), 43 states have call predecessors, (53), 46 states have call successors, (53) [2023-11-12 02:16:16,697 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 372 states to 372 states and 461 transitions. [2023-11-12 02:16:16,698 INFO L78 Accepts]: Start accepts. Automaton has 372 states and 461 transitions. Word has length 46 [2023-11-12 02:16:16,699 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:16:16,699 INFO L495 AbstractCegarLoop]: Abstraction has 372 states and 461 transitions. [2023-11-12 02:16:16,699 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-12 02:16:16,699 INFO L276 IsEmpty]: Start isEmpty. Operand 372 states and 461 transitions. [2023-11-12 02:16:16,701 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2023-11-12 02:16:16,701 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:16:16,701 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:16:16,701 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-12 02:16:16,702 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:16:16,702 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:16:16,702 INFO L85 PathProgramCache]: Analyzing trace with hash -1296933517, now seen corresponding path program 1 times [2023-11-12 02:16:16,702 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:16:16,703 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [790526234] [2023-11-12 02:16:16,703 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:16:16,703 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:16:16,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-12 02:16:16,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-12 02:16:16,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2023-11-12 02:16:16,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:16,953 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-12 02:16:16,953 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:16:16,953 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [790526234] [2023-11-12 02:16:16,953 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [790526234] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:16:16,954 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:16:16,954 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-12 02:16:16,954 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1583538945] [2023-11-12 02:16:16,954 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:16:16,955 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-12 02:16:16,955 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:16:16,955 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-12 02:16:16,956 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-12 02:16:16,956 INFO L87 Difference]: Start difference. First operand 372 states and 461 transitions. Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 7 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-12 02:16:17,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:16:17,280 INFO L93 Difference]: Finished difference Result 1177 states and 1504 transitions. [2023-11-12 02:16:17,280 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2023-11-12 02:16:17,280 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 7 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 50 [2023-11-12 02:16:17,281 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:16:17,287 INFO L225 Difference]: With dead ends: 1177 [2023-11-12 02:16:17,287 INFO L226 Difference]: Without dead ends: 940 [2023-11-12 02:16:17,289 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=56, Invalid=154, Unknown=0, NotChecked=0, Total=210 [2023-11-12 02:16:17,290 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 247 mSDsluCounter, 412 mSDsCounter, 0 mSdLazyCounter, 189 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 256 SdHoareTripleChecker+Valid, 525 SdHoareTripleChecker+Invalid, 245 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 189 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-12 02:16:17,291 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [256 Valid, 525 Invalid, 245 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 189 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-12 02:16:17,292 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 940 states. [2023-11-12 02:16:17,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 940 to 901. [2023-11-12 02:16:17,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 901 states, 707 states have (on average 1.2305516265912306) internal successors, (870), 751 states have internal predecessors, (870), 106 states have call successors, (106), 81 states have call predecessors, (106), 87 states have return successors, (132), 101 states have call predecessors, (132), 106 states have call successors, (132) [2023-11-12 02:16:17,375 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 901 states to 901 states and 1108 transitions. [2023-11-12 02:16:17,375 INFO L78 Accepts]: Start accepts. Automaton has 901 states and 1108 transitions. Word has length 50 [2023-11-12 02:16:17,375 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:16:17,376 INFO L495 AbstractCegarLoop]: Abstraction has 901 states and 1108 transitions. [2023-11-12 02:16:17,376 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.125) internal successors, (41), 7 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-12 02:16:17,376 INFO L276 IsEmpty]: Start isEmpty. Operand 901 states and 1108 transitions. [2023-11-12 02:16:17,378 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2023-11-12 02:16:17,378 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:16:17,379 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:16:17,379 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-12 02:16:17,379 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:16:17,380 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:16:17,380 INFO L85 PathProgramCache]: Analyzing trace with hash -1580462347, now seen corresponding path program 1 times [2023-11-12 02:16:17,380 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:16:17,380 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1679292778] [2023-11-12 02:16:17,380 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:16:17,381 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:16:17,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:17,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-12 02:16:17,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:17,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-12 02:16:17,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:17,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-12 02:16:17,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:17,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-12 02:16:17,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:17,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-12 02:16:17,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:17,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2023-11-12 02:16:17,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:17,657 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 17 proven. 7 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-12 02:16:17,657 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:16:17,657 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1679292778] [2023-11-12 02:16:17,658 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1679292778] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-12 02:16:17,658 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1670662943] [2023-11-12 02:16:17,658 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:16:17,658 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-12 02:16:17,659 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/z3 [2023-11-12 02:16:17,664 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-12 02:16:17,671 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-12 02:16:17,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:17,773 INFO L262 TraceCheckSpWp]: Trace formula consists of 289 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-12 02:16:17,780 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-12 02:16:17,972 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 22 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:16:17,972 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-12 02:16:18,172 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 18 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-12 02:16:18,172 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1670662943] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-12 02:16:18,173 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-12 02:16:18,173 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2023-11-12 02:16:18,173 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1163509380] [2023-11-12 02:16:18,173 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-12 02:16:18,174 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-12 02:16:18,174 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:16:18,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-12 02:16:18,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2023-11-12 02:16:18,176 INFO L87 Difference]: Start difference. First operand 901 states and 1108 transitions. Second operand has 15 states, 15 states have (on average 6.733333333333333) internal successors, (101), 11 states have internal predecessors, (101), 5 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) [2023-11-12 02:16:19,256 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:16:19,256 INFO L93 Difference]: Finished difference Result 1670 states and 2118 transitions. [2023-11-12 02:16:19,257 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2023-11-12 02:16:19,257 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 6.733333333333333) internal successors, (101), 11 states have internal predecessors, (101), 5 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) Word has length 81 [2023-11-12 02:16:19,258 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:16:19,264 INFO L225 Difference]: With dead ends: 1670 [2023-11-12 02:16:19,265 INFO L226 Difference]: Without dead ends: 898 [2023-11-12 02:16:19,269 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 221 GetRequests, 176 SyntacticMatches, 4 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 441 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=326, Invalid=1480, Unknown=0, NotChecked=0, Total=1806 [2023-11-12 02:16:19,270 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 309 mSDsluCounter, 845 mSDsCounter, 0 mSdLazyCounter, 586 mSolverCounterSat, 102 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 310 SdHoareTripleChecker+Valid, 991 SdHoareTripleChecker+Invalid, 688 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 102 IncrementalHoareTripleChecker+Valid, 586 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-12 02:16:19,271 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [310 Valid, 991 Invalid, 688 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [102 Valid, 586 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-12 02:16:19,273 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 898 states. [2023-11-12 02:16:19,354 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 898 to 803. [2023-11-12 02:16:19,356 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 803 states, 618 states have (on average 1.2119741100323624) internal successors, (749), 659 states have internal predecessors, (749), 100 states have call successors, (100), 84 states have call predecessors, (100), 84 states have return successors, (119), 89 states have call predecessors, (119), 100 states have call successors, (119) [2023-11-12 02:16:19,361 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 803 states to 803 states and 968 transitions. [2023-11-12 02:16:19,362 INFO L78 Accepts]: Start accepts. Automaton has 803 states and 968 transitions. Word has length 81 [2023-11-12 02:16:19,363 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:16:19,363 INFO L495 AbstractCegarLoop]: Abstraction has 803 states and 968 transitions. [2023-11-12 02:16:19,364 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 6.733333333333333) internal successors, (101), 11 states have internal predecessors, (101), 5 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) [2023-11-12 02:16:19,364 INFO L276 IsEmpty]: Start isEmpty. Operand 803 states and 968 transitions. [2023-11-12 02:16:19,368 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2023-11-12 02:16:19,368 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:16:19,368 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:16:19,381 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-12 02:16:19,576 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-12 02:16:19,577 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:16:19,577 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:16:19,578 INFO L85 PathProgramCache]: Analyzing trace with hash -158765002, now seen corresponding path program 1 times [2023-11-12 02:16:19,578 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:16:19,578 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1151683953] [2023-11-12 02:16:19,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:16:19,578 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:16:19,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:19,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-12 02:16:19,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:19,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-12 02:16:19,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:19,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-12 02:16:19,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:19,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2023-11-12 02:16:19,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:19,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-12 02:16:19,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:19,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-12 02:16:19,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:19,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2023-11-12 02:16:19,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:19,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-12 02:16:19,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:19,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-12 02:16:19,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:19,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2023-11-12 02:16:19,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:19,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 142 [2023-11-12 02:16:19,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:19,702 INFO L134 CoverageAnalysis]: Checked inductivity of 171 backedges. 40 proven. 3 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2023-11-12 02:16:19,702 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:16:19,702 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1151683953] [2023-11-12 02:16:19,703 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1151683953] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-12 02:16:19,703 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [527488617] [2023-11-12 02:16:19,703 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:16:19,703 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-12 02:16:19,703 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/z3 [2023-11-12 02:16:19,704 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-12 02:16:19,728 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-12 02:16:19,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:16:19,857 INFO L262 TraceCheckSpWp]: Trace formula consists of 466 conjuncts, 3 conjunts are in the unsatisfiable core [2023-11-12 02:16:19,874 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-12 02:16:19,914 INFO L134 CoverageAnalysis]: Checked inductivity of 171 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2023-11-12 02:16:19,915 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-12 02:16:19,915 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [527488617] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:16:19,915 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-12 02:16:19,915 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 5 [2023-11-12 02:16:19,916 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [303095885] [2023-11-12 02:16:19,916 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:16:19,916 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-12 02:16:19,916 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:16:19,917 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-12 02:16:19,917 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2023-11-12 02:16:19,918 INFO L87 Difference]: Start difference. First operand 803 states and 968 transitions. Second operand has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-12 02:16:19,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:16:19,986 INFO L93 Difference]: Finished difference Result 978 states and 1187 transitions. [2023-11-12 02:16:19,986 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-12 02:16:19,987 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 150 [2023-11-12 02:16:19,987 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:16:19,987 INFO L225 Difference]: With dead ends: 978 [2023-11-12 02:16:19,988 INFO L226 Difference]: Without dead ends: 0 [2023-11-12 02:16:19,990 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 174 GetRequests, 171 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2023-11-12 02:16:19,991 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 36 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:16:19,991 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 194 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:16:19,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-12 02:16:19,992 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-12 02:16:19,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:16:19,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-12 02:16:19,993 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 150 [2023-11-12 02:16:19,993 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:16:19,993 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-12 02:16:19,994 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-12 02:16:19,994 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-12 02:16:19,994 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-12 02:16:19,996 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-12 02:16:20,008 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-12 02:16:20,203 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-12 02:16:20,205 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-12 02:16:21,986 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 768 774) no Hoare annotation was computed. [2023-11-12 02:16:21,987 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 768 774) the Hoare annotation is: true [2023-11-12 02:16:21,987 INFO L899 garLoopResultBuilder]: For program point L669-1(lines 665 676) no Hoare annotation was computed. [2023-11-12 02:16:21,987 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 665 676) the Hoare annotation is: true [2023-11-12 02:16:21,987 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 665 676) no Hoare annotation was computed. [2023-11-12 02:16:21,987 INFO L895 garLoopResultBuilder]: At program point L795(line 795) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse1 (<= 1 ~pumpRunning~0)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 (and .cse1 .cse2) .cse3) (or .cse4 .cse0 .cse5) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse0 .cse5 .cse3 (and .cse1 (= ~waterLevel~0 1) .cse2)) (or .cse4 (not (= 0 ~systemActive~0))))) [2023-11-12 02:16:21,988 INFO L899 garLoopResultBuilder]: For program point L795-1(lines 776 800) no Hoare annotation was computed. [2023-11-12 02:16:21,988 INFO L899 garLoopResultBuilder]: For program point L882(lines 882 886) no Hoare annotation was computed. [2023-11-12 02:16:21,988 INFO L899 garLoopResultBuilder]: For program point L882-2(lines 882 886) no Hoare annotation was computed. [2023-11-12 02:16:21,988 INFO L899 garLoopResultBuilder]: For program point L940(lines 940 946) no Hoare annotation was computed. [2023-11-12 02:16:21,988 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 741 767) no Hoare annotation was computed. [2023-11-12 02:16:21,988 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 718 731) no Hoare annotation was computed. [2023-11-12 02:16:21,988 INFO L899 garLoopResultBuilder]: For program point getWaterLevel_returnLabel#1(lines 709 717) no Hoare annotation was computed. [2023-11-12 02:16:21,988 INFO L899 garLoopResultBuilder]: For program point L722(lines 722 728) no Hoare annotation was computed. [2023-11-12 02:16:21,988 INFO L899 garLoopResultBuilder]: For program point L755-1(lines 755 761) no Hoare annotation was computed. [2023-11-12 02:16:21,989 INFO L899 garLoopResultBuilder]: For program point L784(lines 784 792) no Hoare annotation was computed. [2023-11-12 02:16:21,989 INFO L899 garLoopResultBuilder]: For program point L780(lines 780 797) no Hoare annotation was computed. [2023-11-12 02:16:21,989 INFO L895 garLoopResultBuilder]: At program point L937(line 937) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse1 (<= 1 ~pumpRunning~0)) (.cse8 (= ~waterLevel~0 1)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse6 (not (= 0 ~systemActive~0)))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 (and .cse1 .cse2) .cse3) (or .cse4 (and .cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse6) (or .cse4 .cse0 .cse7) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse0 (and .cse5 .cse8)) (or .cse0 .cse7 .cse3 (and .cse1 .cse8 .cse2)) (or .cse4 .cse7 .cse6))) [2023-11-12 02:16:21,989 INFO L899 garLoopResultBuilder]: For program point L937-1(line 937) no Hoare annotation was computed. [2023-11-12 02:16:21,989 INFO L899 garLoopResultBuilder]: For program point activatePump_returnLabel#1(lines 801 808) no Hoare annotation was computed. [2023-11-12 02:16:21,989 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2023-11-12 02:16:21,989 INFO L899 garLoopResultBuilder]: For program point L748(lines 748 754) no Hoare annotation was computed. [2023-11-12 02:16:21,989 INFO L899 garLoopResultBuilder]: For program point L748-2(lines 744 766) no Hoare annotation was computed. [2023-11-12 02:16:21,990 INFO L899 garLoopResultBuilder]: For program point __automaton_fail_returnLabel#1(lines 50 57) no Hoare annotation was computed. [2023-11-12 02:16:21,990 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 741 767) the Hoare annotation is: (let ((.cse3 (not (= 1 ~systemActive~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 2 ~waterLevel~0)) (.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (and .cse0 .cse1 (= ~waterLevel~0 1)) .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse3 .cse4 (and .cse5 .cse1 .cse6)) (or .cse2 .cse3 (and .cse0 .cse7 .cse1) .cse8) (or .cse3 (and .cse5 .cse7 .cse1) .cse8 .cse4) (or (and .cse0 .cse1 .cse6) .cse2 (not (= 0 ~systemActive~0))))) [2023-11-12 02:16:21,990 INFO L899 garLoopResultBuilder]: For program point L645(lines 645 649) no Hoare annotation was computed. [2023-11-12 02:16:21,990 INFO L899 garLoopResultBuilder]: For program point L645-2(lines 641 652) no Hoare annotation was computed. [2023-11-12 02:16:21,990 INFO L899 garLoopResultBuilder]: For program point isHighWaterLevel_returnLabel#1(lines 873 891) no Hoare annotation was computed. [2023-11-12 02:16:21,990 INFO L895 garLoopResultBuilder]: At program point L922(line 922) the Hoare annotation is: (let ((.cse3 (not (= 1 ~systemActive~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 2 ~waterLevel~0)) (.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (and .cse0 .cse1 (= ~waterLevel~0 1)) .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse3 .cse4 (and .cse5 .cse1 .cse6)) (or .cse2 .cse3 (and .cse0 .cse7 .cse1) .cse8) (or .cse3 (and .cse5 .cse7 .cse1) .cse8 .cse4) (or (and .cse0 .cse1 .cse6) .cse2 (not (= 0 ~systemActive~0))))) [2023-11-12 02:16:21,991 INFO L899 garLoopResultBuilder]: For program point L922-1(line 922) no Hoare annotation was computed. [2023-11-12 02:16:21,991 INFO L895 garLoopResultBuilder]: At program point L790(line 790) the Hoare annotation is: (let ((.cse5 (< |old(~pumpRunning~0)| 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse2 .cse3 (= ~waterLevel~0 1))) (or .cse1 .cse4 .cse5) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse1 .cse5) (or .cse0 .cse1 .cse4 (and .cse2 (= 2 ~waterLevel~0) .cse3)) (or .cse0 (not (= 0 ~systemActive~0))))) [2023-11-12 02:16:21,991 INFO L899 garLoopResultBuilder]: For program point __utac_acc__Specification5_spec__2_returnLabel#1(lines 917 926) no Hoare annotation was computed. [2023-11-12 02:16:21,991 INFO L899 garLoopResultBuilder]: For program point L939(lines 939 949) no Hoare annotation was computed. [2023-11-12 02:16:21,991 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 741 767) no Hoare annotation was computed. [2023-11-12 02:16:21,991 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2023-11-12 02:16:21,991 INFO L899 garLoopResultBuilder]: For program point L935(lines 935 952) no Hoare annotation was computed. [2023-11-12 02:16:21,991 INFO L899 garLoopResultBuilder]: For program point L935-1(lines 927 955) no Hoare annotation was computed. [2023-11-12 02:16:21,992 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 61 90) no Hoare annotation was computed. [2023-11-12 02:16:21,992 INFO L899 garLoopResultBuilder]: For program point L86(lines 61 90) no Hoare annotation was computed. [2023-11-12 02:16:21,992 INFO L899 garLoopResultBuilder]: For program point L82(line 82) no Hoare annotation was computed. [2023-11-12 02:16:21,992 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2023-11-12 02:16:21,992 INFO L902 garLoopResultBuilder]: At program point L75-1(lines 75 79) the Hoare annotation is: true [2023-11-12 02:16:21,992 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 61 90) the Hoare annotation is: true [2023-11-12 02:16:21,992 INFO L899 garLoopResultBuilder]: For program point L72(line 72) no Hoare annotation was computed. [2023-11-12 02:16:21,992 INFO L902 garLoopResultBuilder]: At program point L71-2(lines 71 85) the Hoare annotation is: true [2023-11-12 02:16:21,992 INFO L902 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: true [2023-11-12 02:16:21,992 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2023-11-12 02:16:21,993 INFO L899 garLoopResultBuilder]: For program point L151(lines 151 158) no Hoare annotation was computed. [2023-11-12 02:16:21,993 INFO L899 garLoopResultBuilder]: For program point L597(lines 597 603) no Hoare annotation was computed. [2023-11-12 02:16:21,993 INFO L899 garLoopResultBuilder]: For program point L151-2(lines 151 158) no Hoare annotation was computed. [2023-11-12 02:16:21,993 INFO L899 garLoopResultBuilder]: For program point L597-1(lines 597 603) no Hoare annotation was computed. [2023-11-12 02:16:21,993 INFO L899 garLoopResultBuilder]: For program point runTest_returnLabel#1(lines 127 137) no Hoare annotation was computed. [2023-11-12 02:16:21,993 INFO L895 garLoopResultBuilder]: At program point L622(lines 577 624) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse4 .cse5 (= ~waterLevel~0 1)) (and .cse0 .cse2 .cse3 .cse5 (= 0 ~systemActive~0)) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 .cse4 .cse5 (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-12 02:16:21,993 INFO L895 garLoopResultBuilder]: At program point L589(line 589) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse4 .cse5 (= ~waterLevel~0 1)) (and .cse0 .cse2 .cse3 .cse5 (= 0 ~systemActive~0)) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 .cse4 .cse5 (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-12 02:16:21,993 INFO L899 garLoopResultBuilder]: For program point select_features_returnLabel#1(lines 542 548) no Hoare annotation was computed. [2023-11-12 02:16:21,994 INFO L899 garLoopResultBuilder]: For program point main_returnLabel#1(lines 141 163) no Hoare annotation was computed. [2023-11-12 02:16:21,994 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-12 02:16:21,994 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-12 02:16:21,994 INFO L899 garLoopResultBuilder]: For program point setup_returnLabel#1(lines 118 124) no Hoare annotation was computed. [2023-11-12 02:16:21,994 INFO L899 garLoopResultBuilder]: For program point L578(lines 577 624) no Hoare annotation was computed. [2023-11-12 02:16:21,994 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-12 02:16:21,994 INFO L899 garLoopResultBuilder]: For program point L896(lines 896 902) no Hoare annotation was computed. [2023-11-12 02:16:21,994 INFO L899 garLoopResultBuilder]: For program point L607(lines 607 620) no Hoare annotation was computed. [2023-11-12 02:16:21,994 INFO L899 garLoopResultBuilder]: For program point L896-2(lines 896 902) no Hoare annotation was computed. [2023-11-12 02:16:21,994 INFO L899 garLoopResultBuilder]: For program point __utac_acc__Specification5_spec__1_returnLabel#1(lines 909 916) no Hoare annotation was computed. [2023-11-12 02:16:21,995 INFO L895 garLoopResultBuilder]: At program point L599(line 599) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse4 .cse5 (= ~waterLevel~0 1)) (and .cse0 .cse2 .cse3 .cse5 (= 0 ~systemActive~0)) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 .cse4 .cse5 (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-12 02:16:21,995 INFO L899 garLoopResultBuilder]: For program point L628(lines 567 632) no Hoare annotation was computed. [2023-11-12 02:16:21,995 INFO L899 garLoopResultBuilder]: For program point L587(lines 587 593) no Hoare annotation was computed. [2023-11-12 02:16:21,995 INFO L899 garLoopResultBuilder]: For program point L587-1(lines 587 593) no Hoare annotation was computed. [2023-11-12 02:16:21,995 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-12 02:16:21,995 INFO L899 garLoopResultBuilder]: For program point select_helpers_returnLabel#1(lines 549 555) no Hoare annotation was computed. [2023-11-12 02:16:21,995 INFO L899 garLoopResultBuilder]: For program point L579(lines 579 583) no Hoare annotation was computed. [2023-11-12 02:16:21,995 INFO L899 garLoopResultBuilder]: For program point deactivatePump_returnLabel#1(lines 809 816) no Hoare annotation was computed. [2023-11-12 02:16:21,995 INFO L899 garLoopResultBuilder]: For program point stopSystem_returnLabel#1(lines 892 906) no Hoare annotation was computed. [2023-11-12 02:16:21,995 INFO L895 garLoopResultBuilder]: At program point L625(lines 576 626) the Hoare annotation is: false [2023-11-12 02:16:21,996 INFO L899 garLoopResultBuilder]: For program point valid_product_returnLabel#1(lines 556 564) no Hoare annotation was computed. [2023-11-12 02:16:21,996 INFO L899 garLoopResultBuilder]: For program point L613(lines 613 619) no Hoare annotation was computed. [2023-11-12 02:16:21,996 INFO L895 garLoopResultBuilder]: At program point L613-2(lines 607 620) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse4 .cse5 (= ~waterLevel~0 1)) (and .cse0 .cse2 .cse3 .cse5 (= 0 ~systemActive~0)) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 .cse4 .cse5 (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-12 02:16:21,996 INFO L899 garLoopResultBuilder]: For program point L657-1(lines 653 664) no Hoare annotation was computed. [2023-11-12 02:16:21,996 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 653 664) no Hoare annotation was computed. [2023-11-12 02:16:21,996 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 653 664) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse0 (< ~pumpRunning~0 1)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2 .cse3) (or .cse4 .cse5 (not (= 0 ~systemActive~0))) (or .cse0 .cse2 (< ~switchedOnBeforeTS~0 1) .cse5) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse2 (= ~waterLevel~0 1)))) [2023-11-12 02:16:21,996 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 828 836) no Hoare annotation was computed. [2023-11-12 02:16:21,996 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 828 836) no Hoare annotation was computed. [2023-11-12 02:16:21,997 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 828 836) the Hoare annotation is: true [2023-11-12 02:16:21,999 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:16:22,003 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2023-11-12 02:16:22,017 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.11 02:16:22 BoogieIcfgContainer [2023-11-12 02:16:22,017 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-12 02:16:22,018 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-12 02:16:22,018 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-12 02:16:22,018 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-12 02:16:22,019 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:16:14" (3/4) ... [2023-11-12 02:16:22,020 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-12 02:16:22,024 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-12 02:16:22,024 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-12 02:16:22,025 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-12 02:16:22,025 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-12 02:16:22,025 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-12 02:16:22,025 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-12 02:16:22,035 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2023-11-12 02:16:22,036 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-12 02:16:22,037 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-12 02:16:22,037 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-12 02:16:22,038 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-12 02:16:22,067 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1))) || (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((((1 <= pumpRunning) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS))) [2023-11-12 02:16:22,098 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1))) || (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((((1 <= pumpRunning) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS))) [2023-11-12 02:16:22,153 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/witness.graphml [2023-11-12 02:16:22,154 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/witness.yml [2023-11-12 02:16:22,154 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-12 02:16:22,155 INFO L158 Benchmark]: Toolchain (without parser) took 9501.81ms. Allocated memory was 119.5MB in the beginning and 209.7MB in the end (delta: 90.2MB). Free memory was 73.5MB in the beginning and 135.7MB in the end (delta: -62.2MB). Peak memory consumption was 31.0MB. Max. memory is 16.1GB. [2023-11-12 02:16:22,155 INFO L158 Benchmark]: CDTParser took 0.58ms. Allocated memory is still 119.5MB. Free memory is still 90.5MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-12 02:16:22,155 INFO L158 Benchmark]: CACSL2BoogieTranslator took 548.33ms. Allocated memory is still 119.5MB. Free memory was 73.4MB in the beginning and 54.0MB in the end (delta: 19.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-12 02:16:22,156 INFO L158 Benchmark]: Boogie Procedure Inliner took 63.75ms. Allocated memory is still 119.5MB. Free memory was 54.0MB in the beginning and 51.6MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-12 02:16:22,156 INFO L158 Benchmark]: Boogie Preprocessor took 30.41ms. Allocated memory is still 119.5MB. Free memory was 51.6MB in the beginning and 50.5MB in the end (delta: 1.2MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-12 02:16:22,157 INFO L158 Benchmark]: RCFGBuilder took 708.53ms. Allocated memory was 119.5MB in the beginning and 174.1MB in the end (delta: 54.5MB). Free memory was 50.3MB in the beginning and 135.4MB in the end (delta: -85.0MB). Peak memory consumption was 11.6MB. Max. memory is 16.1GB. [2023-11-12 02:16:22,158 INFO L158 Benchmark]: TraceAbstraction took 8003.16ms. Allocated memory was 174.1MB in the beginning and 209.7MB in the end (delta: 35.7MB). Free memory was 135.2MB in the beginning and 143.1MB in the end (delta: -7.9MB). Peak memory consumption was 113.7MB. Max. memory is 16.1GB. [2023-11-12 02:16:22,159 INFO L158 Benchmark]: Witness Printer took 136.24ms. Allocated memory is still 209.7MB. Free memory was 143.1MB in the beginning and 135.7MB in the end (delta: 7.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-12 02:16:22,161 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.58ms. Allocated memory is still 119.5MB. Free memory is still 90.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 548.33ms. Allocated memory is still 119.5MB. Free memory was 73.4MB in the beginning and 54.0MB in the end (delta: 19.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 63.75ms. Allocated memory is still 119.5MB. Free memory was 54.0MB in the beginning and 51.6MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 30.41ms. Allocated memory is still 119.5MB. Free memory was 51.6MB in the beginning and 50.5MB in the end (delta: 1.2MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 708.53ms. Allocated memory was 119.5MB in the beginning and 174.1MB in the end (delta: 54.5MB). Free memory was 50.3MB in the beginning and 135.4MB in the end (delta: -85.0MB). Peak memory consumption was 11.6MB. Max. memory is 16.1GB. * TraceAbstraction took 8003.16ms. Allocated memory was 174.1MB in the beginning and 209.7MB in the end (delta: 35.7MB). Free memory was 135.2MB in the beginning and 143.1MB in the end (delta: -7.9MB). Peak memory consumption was 113.7MB. Max. memory is 16.1GB. * Witness Printer took 136.24ms. Allocated memory is still 209.7MB. Free memory was 143.1MB in the beginning and 135.7MB in the end (delta: 7.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [58] - GenericResultAtLocation [Line: 164]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [164] - GenericResultAtLocation [Line: 530]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [530] - GenericResultAtLocation [Line: 565]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [565] - GenericResultAtLocation [Line: 633]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [633] - GenericResultAtLocation [Line: 732]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [732] - GenericResultAtLocation [Line: 907]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [907] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 84 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.9s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 2.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1011 SdHoareTripleChecker+Valid, 1.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 993 mSDsluCounter, 3845 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2693 mSDsCounter, 184 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 971 IncrementalHoareTripleChecker+Invalid, 1155 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 184 mSolverCounterUnsat, 1152 mSDtfsCounter, 971 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 489 GetRequests, 404 SyntacticMatches, 4 SemanticMatches, 81 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 462 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=901occurred in iteration=9, InterpolantAutomatonStates: 87, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 11 MinimizatonAttempts, 201 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 18 LocationsWithAnnotation, 905 PreInvPairs, 955 NumberOfFragments, 930 HoareAnnotationTreeSize, 905 FomulaSimplifications, 460 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 18 FomulaSimplificationsInter, 2306 FormulaSimplificationTreeSizeReductionInter, 1.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 844 NumberOfCodeBlocks, 844 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 911 ConstructedInterpolants, 0 QuantifiedInterpolants, 1599 SizeOfPredicates, 3 NumberOfNonLiveVariables, 755 ConjunctsInSsa, 11 ConjunctsInUnsatCore, 14 InterpolantComputations, 10 PerfectInterpolantSequences, 433/456 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1))) || (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((((1 <= pumpRunning) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS))) RESULT: Ultimate proved your program to be correct! [2023-11-12 02:16:22,194 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5b186fb5-5c5f-47e7-9825-464cea667f0d/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE