./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product56.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product56.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 03daf3415808298ae6016bdc33e04662b3dd63f1cba0029f4033bbf040a042d2 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 03:06:36,481 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 03:06:36,549 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 03:06:36,555 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 03:06:36,555 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 03:06:36,581 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 03:06:36,581 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 03:06:36,582 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 03:06:36,583 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 03:06:36,583 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 03:06:36,584 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 03:06:36,584 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 03:06:36,585 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 03:06:36,586 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 03:06:36,586 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 03:06:36,587 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 03:06:36,587 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 03:06:36,588 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 03:06:36,588 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 03:06:36,589 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 03:06:36,589 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 03:06:36,590 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 03:06:36,591 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 03:06:36,591 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 03:06:36,591 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 03:06:36,592 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 03:06:36,592 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 03:06:36,593 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 03:06:36,593 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 03:06:36,594 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 03:06:36,594 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 03:06:36,595 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 03:06:36,595 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 03:06:36,596 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 03:06:36,596 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 03:06:36,596 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 03:06:36,597 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 03:06:36,597 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 03:06:36,597 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 03:06:36,597 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 03:06:36,598 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 03:06:36,598 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 03:06:36,598 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 03daf3415808298ae6016bdc33e04662b3dd63f1cba0029f4033bbf040a042d2 [2023-11-29 03:06:36,823 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 03:06:36,844 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 03:06:36,847 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 03:06:36,848 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 03:06:36,848 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 03:06:36,850 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec4_product56.cil.c [2023-11-29 03:06:39,684 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 03:06:39,901 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 03:06:39,901 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/sv-benchmarks/c/product-lines/minepump_spec4_product56.cil.c [2023-11-29 03:06:39,917 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/data/233b3279d/edc8850fce314205a5c92d557e0c9788/FLAG8a731c20b [2023-11-29 03:06:39,933 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/data/233b3279d/edc8850fce314205a5c92d557e0c9788 [2023-11-29 03:06:39,935 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 03:06:39,937 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 03:06:39,938 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 03:06:39,938 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 03:06:39,943 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 03:06:39,944 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 03:06:39" (1/1) ... [2023-11-29 03:06:39,945 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4a17a4aa and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:39, skipping insertion in model container [2023-11-29 03:06:39,945 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 03:06:39" (1/1) ... [2023-11-29 03:06:39,994 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 03:06:40,245 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/sv-benchmarks/c/product-lines/minepump_spec4_product56.cil.c[17338,17351] [2023-11-29 03:06:40,256 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 03:06:40,267 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 03:06:40,278 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] [2023-11-29 03:06:40,279 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [308] [2023-11-29 03:06:40,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [674] [2023-11-29 03:06:40,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [746] [2023-11-29 03:06:40,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [774] [2023-11-29 03:06:40,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [873] [2023-11-29 03:06:40,281 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [882] [2023-11-29 03:06:40,281 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [985] [2023-11-29 03:06:40,327 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/sv-benchmarks/c/product-lines/minepump_spec4_product56.cil.c[17338,17351] [2023-11-29 03:06:40,332 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 03:06:40,348 INFO L206 MainTranslator]: Completed translation [2023-11-29 03:06:40,349 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:40 WrapperNode [2023-11-29 03:06:40,349 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 03:06:40,350 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 03:06:40,350 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 03:06:40,350 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 03:06:40,357 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:40" (1/1) ... [2023-11-29 03:06:40,371 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:40" (1/1) ... [2023-11-29 03:06:40,399 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 236 [2023-11-29 03:06:40,399 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 03:06:40,399 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 03:06:40,399 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 03:06:40,400 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 03:06:40,409 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:40" (1/1) ... [2023-11-29 03:06:40,409 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:40" (1/1) ... [2023-11-29 03:06:40,411 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:40" (1/1) ... [2023-11-29 03:06:40,426 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 03:06:40,426 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:40" (1/1) ... [2023-11-29 03:06:40,426 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:40" (1/1) ... [2023-11-29 03:06:40,432 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:40" (1/1) ... [2023-11-29 03:06:40,437 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:40" (1/1) ... [2023-11-29 03:06:40,438 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:40" (1/1) ... [2023-11-29 03:06:40,440 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:40" (1/1) ... [2023-11-29 03:06:40,443 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 03:06:40,444 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 03:06:40,444 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 03:06:40,444 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 03:06:40,445 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:40" (1/1) ... [2023-11-29 03:06:40,452 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 03:06:40,464 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:06:40,477 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 03:06:40,480 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 03:06:40,506 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 03:06:40,506 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-29 03:06:40,506 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-29 03:06:40,506 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 03:06:40,506 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 03:06:40,506 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 03:06:40,506 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 03:06:40,506 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 03:06:40,506 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 03:06:40,506 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 03:06:40,507 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 03:06:40,507 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 03:06:40,507 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 03:06:40,507 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-29 03:06:40,507 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-29 03:06:40,507 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 03:06:40,507 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 03:06:40,507 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 03:06:40,507 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 03:06:40,508 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 03:06:40,587 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 03:06:40,590 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 03:06:40,840 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 03:06:40,925 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 03:06:40,925 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 03:06:40,925 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 03:06:40 BoogieIcfgContainer [2023-11-29 03:06:40,925 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 03:06:40,943 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 03:06:40,943 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 03:06:40,947 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 03:06:40,947 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 03:06:39" (1/3) ... [2023-11-29 03:06:40,948 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@fd8e27c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 03:06:40, skipping insertion in model container [2023-11-29 03:06:40,948 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 03:06:40" (2/3) ... [2023-11-29 03:06:40,949 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@fd8e27c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 03:06:40, skipping insertion in model container [2023-11-29 03:06:40,949 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 03:06:40" (3/3) ... [2023-11-29 03:06:40,950 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product56.cil.c [2023-11-29 03:06:40,965 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 03:06:40,966 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 03:06:41,008 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 03:06:41,014 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3d48df94, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 03:06:41,014 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 03:06:41,018 INFO L276 IsEmpty]: Start isEmpty. Operand has 77 states, 52 states have (on average 1.5576923076923077) internal successors, (81), 63 states have internal predecessors, (81), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-29 03:06:41,025 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-11-29 03:06:41,025 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:06:41,026 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:06:41,026 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:06:41,031 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:06:41,031 INFO L85 PathProgramCache]: Analyzing trace with hash 1527860270, now seen corresponding path program 1 times [2023-11-29 03:06:41,038 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:06:41,038 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1258768844] [2023-11-29 03:06:41,039 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:41,039 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:06:41,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:41,183 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:06:41,184 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:06:41,184 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1258768844] [2023-11-29 03:06:41,185 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1258768844] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:06:41,186 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:06:41,186 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 03:06:41,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [749955415] [2023-11-29 03:06:41,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:06:41,193 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 03:06:41,193 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:06:41,221 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 03:06:41,222 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 03:06:41,224 INFO L87 Difference]: Start difference. First operand has 77 states, 52 states have (on average 1.5576923076923077) internal successors, (81), 63 states have internal predecessors, (81), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 03:06:41,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:06:41,283 INFO L93 Difference]: Finished difference Result 152 states and 223 transitions. [2023-11-29 03:06:41,285 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 03:06:41,286 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-11-29 03:06:41,286 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:06:41,295 INFO L225 Difference]: With dead ends: 152 [2023-11-29 03:06:41,295 INFO L226 Difference]: Without dead ends: 72 [2023-11-29 03:06:41,299 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 03:06:41,302 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 89 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:06:41,303 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 89 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:06:41,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2023-11-29 03:06:41,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 72. [2023-11-29 03:06:41,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 49 states have (on average 1.4489795918367347) internal successors, (71), 59 states have internal predecessors, (71), 15 states have call successors, (15), 8 states have call predecessors, (15), 7 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-29 03:06:41,343 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 100 transitions. [2023-11-29 03:06:41,345 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 100 transitions. Word has length 12 [2023-11-29 03:06:41,345 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:06:41,346 INFO L495 AbstractCegarLoop]: Abstraction has 72 states and 100 transitions. [2023-11-29 03:06:41,346 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 03:06:41,346 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 100 transitions. [2023-11-29 03:06:41,347 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-11-29 03:06:41,348 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:06:41,348 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:06:41,348 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 03:06:41,348 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:06:41,349 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:06:41,349 INFO L85 PathProgramCache]: Analyzing trace with hash 166472456, now seen corresponding path program 1 times [2023-11-29 03:06:41,349 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:06:41,350 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1992269651] [2023-11-29 03:06:41,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:41,350 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:06:41,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:41,442 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:06:41,443 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:06:41,443 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1992269651] [2023-11-29 03:06:41,443 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1992269651] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:06:41,443 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:06:41,444 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 03:06:41,444 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [296319856] [2023-11-29 03:06:41,444 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:06:41,445 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 03:06:41,445 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:06:41,446 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 03:06:41,446 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:06:41,447 INFO L87 Difference]: Start difference. First operand 72 states and 100 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 03:06:41,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:06:41,491 INFO L93 Difference]: Finished difference Result 114 states and 158 transitions. [2023-11-29 03:06:41,492 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 03:06:41,492 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-11-29 03:06:41,492 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:06:41,494 INFO L225 Difference]: With dead ends: 114 [2023-11-29 03:06:41,494 INFO L226 Difference]: Without dead ends: 64 [2023-11-29 03:06:41,495 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:06:41,497 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 14 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 134 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:06:41,497 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 134 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:06:41,498 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2023-11-29 03:06:41,506 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2023-11-29 03:06:41,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 44 states have (on average 1.4772727272727273) internal successors, (65), 54 states have internal predecessors, (65), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 7 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-29 03:06:41,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 89 transitions. [2023-11-29 03:06:41,509 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 89 transitions. Word has length 13 [2023-11-29 03:06:41,509 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:06:41,509 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 89 transitions. [2023-11-29 03:06:41,510 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 03:06:41,510 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 89 transitions. [2023-11-29 03:06:41,511 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-29 03:06:41,511 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:06:41,511 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:06:41,511 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 03:06:41,511 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:06:41,512 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:06:41,512 INFO L85 PathProgramCache]: Analyzing trace with hash -1924684962, now seen corresponding path program 1 times [2023-11-29 03:06:41,512 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:06:41,512 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1534406759] [2023-11-29 03:06:41,513 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:41,513 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:06:41,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:41,612 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:06:41,612 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:06:41,612 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1534406759] [2023-11-29 03:06:41,612 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1534406759] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:06:41,613 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:06:41,613 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-29 03:06:41,613 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [951047056] [2023-11-29 03:06:41,613 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:06:41,613 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 03:06:41,614 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:06:41,614 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 03:06:41,614 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 03:06:41,615 INFO L87 Difference]: Start difference. First operand 64 states and 89 transitions. Second operand has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 03:06:41,708 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:06:41,710 INFO L93 Difference]: Finished difference Result 159 states and 222 transitions. [2023-11-29 03:06:41,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 03:06:41,711 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-11-29 03:06:41,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:06:41,713 INFO L225 Difference]: With dead ends: 159 [2023-11-29 03:06:41,713 INFO L226 Difference]: Without dead ends: 97 [2023-11-29 03:06:41,714 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 03:06:41,715 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 112 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 03:06:41,716 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 172 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 03:06:41,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2023-11-29 03:06:41,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 94. [2023-11-29 03:06:41,730 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 66 states have (on average 1.4848484848484849) internal successors, (98), 79 states have internal predecessors, (98), 16 states have call successors, (16), 11 states have call predecessors, (16), 11 states have return successors, (17), 10 states have call predecessors, (17), 16 states have call successors, (17) [2023-11-29 03:06:41,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 131 transitions. [2023-11-29 03:06:41,732 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 131 transitions. Word has length 16 [2023-11-29 03:06:41,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:06:41,733 INFO L495 AbstractCegarLoop]: Abstraction has 94 states and 131 transitions. [2023-11-29 03:06:41,733 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 03:06:41,733 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 131 transitions. [2023-11-29 03:06:41,734 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-29 03:06:41,734 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:06:41,734 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:06:41,734 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 03:06:41,735 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:06:41,735 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:06:41,735 INFO L85 PathProgramCache]: Analyzing trace with hash -1381983152, now seen corresponding path program 1 times [2023-11-29 03:06:41,735 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:06:41,736 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1824886510] [2023-11-29 03:06:41,736 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:41,736 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:06:41,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:41,839 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:06:41,840 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:06:41,840 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1824886510] [2023-11-29 03:06:41,840 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1824886510] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:06:41,840 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:06:41,840 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 03:06:41,841 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2136665756] [2023-11-29 03:06:41,841 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:06:41,841 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 03:06:41,841 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:06:41,842 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 03:06:41,842 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 03:06:41,842 INFO L87 Difference]: Start difference. First operand 94 states and 131 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 03:06:41,938 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:06:41,939 INFO L93 Difference]: Finished difference Result 268 states and 392 transitions. [2023-11-29 03:06:41,939 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 03:06:41,939 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-29 03:06:41,939 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:06:41,942 INFO L225 Difference]: With dead ends: 268 [2023-11-29 03:06:41,942 INFO L226 Difference]: Without dead ends: 176 [2023-11-29 03:06:41,944 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 03:06:41,945 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 63 mSDsluCounter, 140 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 211 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 03:06:41,946 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 211 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 03:06:41,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 176 states. [2023-11-29 03:06:41,972 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 176 to 176. [2023-11-29 03:06:41,973 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 176 states, 123 states have (on average 1.4471544715447155) internal successors, (178), 146 states have internal predecessors, (178), 32 states have call successors, (32), 22 states have call predecessors, (32), 20 states have return successors, (37), 18 states have call predecessors, (37), 32 states have call successors, (37) [2023-11-29 03:06:41,976 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 176 states to 176 states and 247 transitions. [2023-11-29 03:06:41,976 INFO L78 Accepts]: Start accepts. Automaton has 176 states and 247 transitions. Word has length 19 [2023-11-29 03:06:41,976 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:06:41,976 INFO L495 AbstractCegarLoop]: Abstraction has 176 states and 247 transitions. [2023-11-29 03:06:41,977 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 03:06:41,977 INFO L276 IsEmpty]: Start isEmpty. Operand 176 states and 247 transitions. [2023-11-29 03:06:41,979 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-29 03:06:41,979 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:06:41,980 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:06:41,980 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 03:06:41,980 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:06:41,980 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:06:41,980 INFO L85 PathProgramCache]: Analyzing trace with hash 108915157, now seen corresponding path program 1 times [2023-11-29 03:06:41,981 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:06:41,981 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [204229245] [2023-11-29 03:06:41,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:41,981 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:06:41,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:42,037 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:06:42,037 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:06:42,038 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [204229245] [2023-11-29 03:06:42,038 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [204229245] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:06:42,038 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:06:42,038 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 03:06:42,038 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [269418669] [2023-11-29 03:06:42,038 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:06:42,039 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 03:06:42,039 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:06:42,039 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 03:06:42,040 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:06:42,040 INFO L87 Difference]: Start difference. First operand 176 states and 247 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 03:06:42,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:06:42,110 INFO L93 Difference]: Finished difference Result 397 states and 572 transitions. [2023-11-29 03:06:42,110 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 03:06:42,110 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2023-11-29 03:06:42,111 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:06:42,113 INFO L225 Difference]: With dead ends: 397 [2023-11-29 03:06:42,113 INFO L226 Difference]: Without dead ends: 223 [2023-11-29 03:06:42,115 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 03:06:42,116 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 53 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:06:42,116 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 130 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:06:42,118 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2023-11-29 03:06:42,144 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 219. [2023-11-29 03:06:42,145 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 219 states, 159 states have (on average 1.3584905660377358) internal successors, (216), 174 states have internal predecessors, (216), 31 states have call successors, (31), 29 states have call predecessors, (31), 28 states have return successors, (47), 28 states have call predecessors, (47), 31 states have call successors, (47) [2023-11-29 03:06:42,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 219 states to 219 states and 294 transitions. [2023-11-29 03:06:42,147 INFO L78 Accepts]: Start accepts. Automaton has 219 states and 294 transitions. Word has length 21 [2023-11-29 03:06:42,147 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:06:42,148 INFO L495 AbstractCegarLoop]: Abstraction has 219 states and 294 transitions. [2023-11-29 03:06:42,148 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 03:06:42,148 INFO L276 IsEmpty]: Start isEmpty. Operand 219 states and 294 transitions. [2023-11-29 03:06:42,149 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-29 03:06:42,149 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:06:42,150 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:06:42,150 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-29 03:06:42,150 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:06:42,150 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:06:42,151 INFO L85 PathProgramCache]: Analyzing trace with hash -294797462, now seen corresponding path program 1 times [2023-11-29 03:06:42,151 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:06:42,151 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2130067863] [2023-11-29 03:06:42,151 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:42,151 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:06:42,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:42,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:06:42,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:42,297 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:06:42,297 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:06:42,298 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2130067863] [2023-11-29 03:06:42,298 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2130067863] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:06:42,298 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:06:42,298 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 03:06:42,298 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [138605627] [2023-11-29 03:06:42,299 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:06:42,299 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-29 03:06:42,299 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:06:42,300 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-29 03:06:42,301 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-29 03:06:42,301 INFO L87 Difference]: Start difference. First operand 219 states and 294 transitions. Second operand has 7 states, 7 states have (on average 2.857142857142857) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:06:42,765 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:06:42,766 INFO L93 Difference]: Finished difference Result 479 states and 690 transitions. [2023-11-29 03:06:42,767 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-29 03:06:42,768 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 2.857142857142857) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-29 03:06:42,768 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:06:42,771 INFO L225 Difference]: With dead ends: 479 [2023-11-29 03:06:42,772 INFO L226 Difference]: Without dead ends: 356 [2023-11-29 03:06:42,773 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=98, Unknown=0, NotChecked=0, Total=132 [2023-11-29 03:06:42,774 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 195 mSDsluCounter, 221 mSDsCounter, 0 mSdLazyCounter, 468 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 290 SdHoareTripleChecker+Invalid, 520 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 468 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-29 03:06:42,774 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [207 Valid, 290 Invalid, 520 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 468 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-29 03:06:42,776 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 356 states. [2023-11-29 03:06:42,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 356 to 353. [2023-11-29 03:06:42,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 353 states, 255 states have (on average 1.3254901960784313) internal successors, (338), 283 states have internal predecessors, (338), 47 states have call successors, (47), 42 states have call predecessors, (47), 50 states have return successors, (102), 47 states have call predecessors, (102), 47 states have call successors, (102) [2023-11-29 03:06:42,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 353 states to 353 states and 487 transitions. [2023-11-29 03:06:42,821 INFO L78 Accepts]: Start accepts. Automaton has 353 states and 487 transitions. Word has length 23 [2023-11-29 03:06:42,821 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:06:42,821 INFO L495 AbstractCegarLoop]: Abstraction has 353 states and 487 transitions. [2023-11-29 03:06:42,822 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 2.857142857142857) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 03:06:42,822 INFO L276 IsEmpty]: Start isEmpty. Operand 353 states and 487 transitions. [2023-11-29 03:06:42,825 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2023-11-29 03:06:42,826 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:06:42,826 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:06:42,826 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-29 03:06:42,826 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:06:42,827 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:06:42,827 INFO L85 PathProgramCache]: Analyzing trace with hash -169033184, now seen corresponding path program 1 times [2023-11-29 03:06:42,827 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:06:42,827 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1992202197] [2023-11-29 03:06:42,828 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:42,828 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:06:42,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:42,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-29 03:06:42,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:42,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:06:42,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:42,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:06:42,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:42,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2023-11-29 03:06:42,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:42,929 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:06:42,929 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:06:42,929 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1992202197] [2023-11-29 03:06:42,929 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1992202197] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:06:42,930 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:06:42,930 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 03:06:42,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1954882694] [2023-11-29 03:06:42,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:06:42,931 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 03:06:42,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:06:42,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 03:06:42,932 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-29 03:06:42,932 INFO L87 Difference]: Start difference. First operand 353 states and 487 transitions. Second operand has 6 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-29 03:06:43,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:06:43,258 INFO L93 Difference]: Finished difference Result 746 states and 1025 transitions. [2023-11-29 03:06:43,261 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-29 03:06:43,261 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 58 [2023-11-29 03:06:43,262 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:06:43,265 INFO L225 Difference]: With dead ends: 746 [2023-11-29 03:06:43,265 INFO L226 Difference]: Without dead ends: 395 [2023-11-29 03:06:43,267 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2023-11-29 03:06:43,268 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 172 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 269 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 177 SdHoareTripleChecker+Valid, 182 SdHoareTripleChecker+Invalid, 308 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 269 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 03:06:43,268 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [177 Valid, 182 Invalid, 308 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 269 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 03:06:43,270 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 395 states. [2023-11-29 03:06:43,307 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 395 to 371. [2023-11-29 03:06:43,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 371 states, 268 states have (on average 1.3134328358208955) internal successors, (352), 296 states have internal predecessors, (352), 47 states have call successors, (47), 42 states have call predecessors, (47), 55 states have return successors, (101), 51 states have call predecessors, (101), 47 states have call successors, (101) [2023-11-29 03:06:43,312 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 371 states to 371 states and 500 transitions. [2023-11-29 03:06:43,312 INFO L78 Accepts]: Start accepts. Automaton has 371 states and 500 transitions. Word has length 58 [2023-11-29 03:06:43,313 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:06:43,313 INFO L495 AbstractCegarLoop]: Abstraction has 371 states and 500 transitions. [2023-11-29 03:06:43,313 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-29 03:06:43,313 INFO L276 IsEmpty]: Start isEmpty. Operand 371 states and 500 transitions. [2023-11-29 03:06:43,315 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-11-29 03:06:43,316 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:06:43,316 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:06:43,316 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-29 03:06:43,316 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:06:43,317 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:06:43,317 INFO L85 PathProgramCache]: Analyzing trace with hash -308345006, now seen corresponding path program 1 times [2023-11-29 03:06:43,317 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:06:43,317 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2119107652] [2023-11-29 03:06:43,317 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:43,317 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:06:43,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:43,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 03:06:43,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:43,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:06:43,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:43,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:06:43,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:43,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-29 03:06:43,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:43,427 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-29 03:06:43,427 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:06:43,427 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2119107652] [2023-11-29 03:06:43,427 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2119107652] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:06:43,427 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [164793148] [2023-11-29 03:06:43,428 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:43,428 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:06:43,428 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:06:43,432 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:06:43,437 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-29 03:06:43,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:43,523 INFO L262 TraceCheckSpWp]: Trace formula consists of 237 conjuncts, 7 conjunts are in the unsatisfiable core [2023-11-29 03:06:43,529 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:06:43,567 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-29 03:06:43,568 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 03:06:43,568 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [164793148] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:06:43,568 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 03:06:43,568 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 8 [2023-11-29 03:06:43,568 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1752689632] [2023-11-29 03:06:43,569 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:06:43,569 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 03:06:43,569 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:06:43,570 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 03:06:43,570 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-29 03:06:43,570 INFO L87 Difference]: Start difference. First operand 371 states and 500 transitions. Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 03:06:43,654 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:06:43,655 INFO L93 Difference]: Finished difference Result 746 states and 1037 transitions. [2023-11-29 03:06:43,655 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 03:06:43,655 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2023-11-29 03:06:43,655 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:06:43,658 INFO L225 Difference]: With dead ends: 746 [2023-11-29 03:06:43,658 INFO L226 Difference]: Without dead ends: 377 [2023-11-29 03:06:43,660 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 59 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-29 03:06:43,661 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 2 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 225 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:06:43,661 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 225 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:06:43,662 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 377 states. [2023-11-29 03:06:43,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 377 to 377. [2023-11-29 03:06:43,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 274 states have (on average 1.3065693430656935) internal successors, (358), 302 states have internal predecessors, (358), 47 states have call successors, (47), 42 states have call predecessors, (47), 55 states have return successors, (101), 51 states have call predecessors, (101), 47 states have call successors, (101) [2023-11-29 03:06:43,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 506 transitions. [2023-11-29 03:06:43,702 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 506 transitions. Word has length 55 [2023-11-29 03:06:43,703 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:06:43,703 INFO L495 AbstractCegarLoop]: Abstraction has 377 states and 506 transitions. [2023-11-29 03:06:43,703 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 03:06:43,703 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 506 transitions. [2023-11-29 03:06:43,705 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-11-29 03:06:43,705 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:06:43,705 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:06:43,713 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-29 03:06:43,906 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:06:43,906 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:06:43,906 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:06:43,906 INFO L85 PathProgramCache]: Analyzing trace with hash 1742638992, now seen corresponding path program 1 times [2023-11-29 03:06:43,906 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:06:43,906 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1777505548] [2023-11-29 03:06:43,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:43,907 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:06:43,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:43,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 03:06:43,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:44,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:06:44,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:44,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:06:44,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:44,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-29 03:06:44,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:44,075 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-29 03:06:44,075 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:06:44,075 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1777505548] [2023-11-29 03:06:44,076 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1777505548] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:06:44,076 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 03:06:44,076 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-29 03:06:44,076 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1021996961] [2023-11-29 03:06:44,076 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:06:44,076 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-29 03:06:44,077 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:06:44,077 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-29 03:06:44,077 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2023-11-29 03:06:44,077 INFO L87 Difference]: Start difference. First operand 377 states and 506 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 03:06:44,354 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:06:44,354 INFO L93 Difference]: Finished difference Result 717 states and 980 transitions. [2023-11-29 03:06:44,354 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-29 03:06:44,355 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2023-11-29 03:06:44,355 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:06:44,358 INFO L225 Difference]: With dead ends: 717 [2023-11-29 03:06:44,358 INFO L226 Difference]: Without dead ends: 342 [2023-11-29 03:06:44,359 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2023-11-29 03:06:44,361 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 130 mSDsluCounter, 146 mSDsCounter, 0 mSdLazyCounter, 276 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 316 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 276 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 03:06:44,361 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 194 Invalid, 316 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 276 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 03:06:44,362 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 342 states. [2023-11-29 03:06:44,390 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 342 to 332. [2023-11-29 03:06:44,391 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 332 states, 242 states have (on average 1.2933884297520661) internal successors, (313), 266 states have internal predecessors, (313), 43 states have call successors, (43), 38 states have call predecessors, (43), 46 states have return successors, (81), 44 states have call predecessors, (81), 43 states have call successors, (81) [2023-11-29 03:06:44,394 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 332 states to 332 states and 437 transitions. [2023-11-29 03:06:44,394 INFO L78 Accepts]: Start accepts. Automaton has 332 states and 437 transitions. Word has length 55 [2023-11-29 03:06:44,394 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:06:44,395 INFO L495 AbstractCegarLoop]: Abstraction has 332 states and 437 transitions. [2023-11-29 03:06:44,395 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 03:06:44,395 INFO L276 IsEmpty]: Start isEmpty. Operand 332 states and 437 transitions. [2023-11-29 03:06:44,396 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2023-11-29 03:06:44,396 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:06:44,396 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:06:44,396 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-29 03:06:44,397 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:06:44,397 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:06:44,397 INFO L85 PathProgramCache]: Analyzing trace with hash -543154584, now seen corresponding path program 1 times [2023-11-29 03:06:44,397 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:06:44,397 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2005182188] [2023-11-29 03:06:44,397 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:44,398 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:06:44,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:44,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:06:44,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:44,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:06:44,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:44,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:06:44,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:44,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:06:44,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:44,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2023-11-29 03:06:44,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:44,519 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-29 03:06:44,519 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:06:44,519 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2005182188] [2023-11-29 03:06:44,519 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2005182188] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:06:44,520 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1793776313] [2023-11-29 03:06:44,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:44,520 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:06:44,520 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:06:44,521 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:06:44,524 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-29 03:06:44,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:44,609 INFO L262 TraceCheckSpWp]: Trace formula consists of 247 conjuncts, 7 conjunts are in the unsatisfiable core [2023-11-29 03:06:44,612 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:06:44,697 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:06:44,697 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-29 03:06:44,827 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 03:06:44,827 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1793776313] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-29 03:06:44,827 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-29 03:06:44,827 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 5] total 10 [2023-11-29 03:06:44,828 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1521280832] [2023-11-29 03:06:44,828 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-29 03:06:44,828 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-11-29 03:06:44,828 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:06:44,829 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-11-29 03:06:44,829 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2023-11-29 03:06:44,829 INFO L87 Difference]: Start difference. First operand 332 states and 437 transitions. Second operand has 10 states, 10 states have (on average 8.4) internal successors, (84), 7 states have internal predecessors, (84), 5 states have call successors, (13), 7 states have call predecessors, (13), 3 states have return successors, (11), 5 states have call predecessors, (11), 4 states have call successors, (11) [2023-11-29 03:06:46,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:06:46,277 INFO L93 Difference]: Finished difference Result 1410 states and 1977 transitions. [2023-11-29 03:06:46,277 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 59 states. [2023-11-29 03:06:46,277 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 8.4) internal successors, (84), 7 states have internal predecessors, (84), 5 states have call successors, (13), 7 states have call predecessors, (13), 3 states have return successors, (11), 5 states have call predecessors, (11), 4 states have call successors, (11) Word has length 59 [2023-11-29 03:06:46,277 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:06:46,285 INFO L225 Difference]: With dead ends: 1410 [2023-11-29 03:06:46,286 INFO L226 Difference]: Without dead ends: 1080 [2023-11-29 03:06:46,289 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 132 SyntacticMatches, 4 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1222 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=610, Invalid=2930, Unknown=0, NotChecked=0, Total=3540 [2023-11-29 03:06:46,290 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 643 mSDsluCounter, 381 mSDsCounter, 0 mSdLazyCounter, 760 mSolverCounterSat, 290 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 652 SdHoareTripleChecker+Valid, 452 SdHoareTripleChecker+Invalid, 1050 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 290 IncrementalHoareTripleChecker+Valid, 760 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2023-11-29 03:06:46,290 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [652 Valid, 452 Invalid, 1050 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [290 Valid, 760 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2023-11-29 03:06:46,292 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1080 states. [2023-11-29 03:06:46,364 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1080 to 909. [2023-11-29 03:06:46,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 909 states, 659 states have (on average 1.2761760242792108) internal successors, (841), 723 states have internal predecessors, (841), 121 states have call successors, (121), 108 states have call predecessors, (121), 128 states have return successors, (256), 118 states have call predecessors, (256), 121 states have call successors, (256) [2023-11-29 03:06:46,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 909 states to 909 states and 1218 transitions. [2023-11-29 03:06:46,373 INFO L78 Accepts]: Start accepts. Automaton has 909 states and 1218 transitions. Word has length 59 [2023-11-29 03:06:46,374 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:06:46,374 INFO L495 AbstractCegarLoop]: Abstraction has 909 states and 1218 transitions. [2023-11-29 03:06:46,374 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 8.4) internal successors, (84), 7 states have internal predecessors, (84), 5 states have call successors, (13), 7 states have call predecessors, (13), 3 states have return successors, (11), 5 states have call predecessors, (11), 4 states have call successors, (11) [2023-11-29 03:06:46,374 INFO L276 IsEmpty]: Start isEmpty. Operand 909 states and 1218 transitions. [2023-11-29 03:06:46,378 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2023-11-29 03:06:46,378 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:06:46,378 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:06:46,384 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-11-29 03:06:46,584 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-29 03:06:46,584 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:06:46,585 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:06:46,585 INFO L85 PathProgramCache]: Analyzing trace with hash -1070415388, now seen corresponding path program 1 times [2023-11-29 03:06:46,585 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:06:46,585 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1312735554] [2023-11-29 03:06:46,585 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:46,585 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:06:46,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:46,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:06:46,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:46,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:06:46,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:46,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:06:46,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:46,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:06:46,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:46,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-29 03:06:46,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:46,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2023-11-29 03:06:46,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:46,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:06:46,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:46,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:06:46,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:46,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-29 03:06:46,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:46,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2023-11-29 03:06:46,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:46,944 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 41 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-29 03:06:46,944 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:06:46,945 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1312735554] [2023-11-29 03:06:46,945 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1312735554] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:06:46,945 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [213751928] [2023-11-29 03:06:46,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:46,945 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:06:46,945 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:06:46,946 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:06:46,957 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-29 03:06:47,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:47,054 INFO L262 TraceCheckSpWp]: Trace formula consists of 348 conjuncts, 7 conjunts are in the unsatisfiable core [2023-11-29 03:06:47,058 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:06:47,091 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2023-11-29 03:06:47,091 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 03:06:47,092 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [213751928] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:06:47,092 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 03:06:47,092 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [13] total 15 [2023-11-29 03:06:47,092 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [58193957] [2023-11-29 03:06:47,092 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:06:47,093 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 03:06:47,093 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:06:47,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 03:06:47,094 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2023-11-29 03:06:47,094 INFO L87 Difference]: Start difference. First operand 909 states and 1218 transitions. Second operand has 4 states, 4 states have (on average 12.75) internal successors, (51), 4 states have internal predecessors, (51), 1 states have call successors, (9), 1 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) [2023-11-29 03:06:47,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:06:47,209 INFO L93 Difference]: Finished difference Result 923 states and 1231 transitions. [2023-11-29 03:06:47,209 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 03:06:47,210 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 12.75) internal successors, (51), 4 states have internal predecessors, (51), 1 states have call successors, (9), 1 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) Word has length 98 [2023-11-29 03:06:47,210 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:06:47,216 INFO L225 Difference]: With dead ends: 923 [2023-11-29 03:06:47,217 INFO L226 Difference]: Without dead ends: 921 [2023-11-29 03:06:47,217 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 113 SyntacticMatches, 3 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2023-11-29 03:06:47,218 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 61 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 55 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 61 SdHoareTripleChecker+Valid, 192 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 55 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:06:47,218 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [61 Valid, 192 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 55 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:06:47,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 921 states. [2023-11-29 03:06:47,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 921 to 909. [2023-11-29 03:06:47,282 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 909 states, 659 states have (on average 1.2640364188163884) internal successors, (833), 723 states have internal predecessors, (833), 121 states have call successors, (121), 108 states have call predecessors, (121), 128 states have return successors, (256), 118 states have call predecessors, (256), 121 states have call successors, (256) [2023-11-29 03:06:47,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 909 states to 909 states and 1210 transitions. [2023-11-29 03:06:47,287 INFO L78 Accepts]: Start accepts. Automaton has 909 states and 1210 transitions. Word has length 98 [2023-11-29 03:06:47,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:06:47,287 INFO L495 AbstractCegarLoop]: Abstraction has 909 states and 1210 transitions. [2023-11-29 03:06:47,287 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 12.75) internal successors, (51), 4 states have internal predecessors, (51), 1 states have call successors, (9), 1 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) [2023-11-29 03:06:47,287 INFO L276 IsEmpty]: Start isEmpty. Operand 909 states and 1210 transitions. [2023-11-29 03:06:47,291 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2023-11-29 03:06:47,291 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:06:47,291 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:06:47,296 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-29 03:06:47,493 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:06:47,494 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:06:47,494 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:06:47,494 INFO L85 PathProgramCache]: Analyzing trace with hash -1569241767, now seen corresponding path program 1 times [2023-11-29 03:06:47,494 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:06:47,494 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1504401170] [2023-11-29 03:06:47,495 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:47,495 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:06:47,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:47,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:06:47,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:47,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:06:47,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:47,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:06:47,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:47,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:06:47,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:47,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-29 03:06:47,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:47,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2023-11-29 03:06:47,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:47,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:06:47,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:47,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:06:47,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:47,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2023-11-29 03:06:47,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:47,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:06:47,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:47,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:06:47,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:47,839 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 42 proven. 19 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-11-29 03:06:47,839 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:06:47,839 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1504401170] [2023-11-29 03:06:47,839 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1504401170] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:06:47,840 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [575541082] [2023-11-29 03:06:47,840 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:47,840 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:06:47,840 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:06:47,843 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:06:47,845 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-29 03:06:47,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:47,951 INFO L262 TraceCheckSpWp]: Trace formula consists of 371 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-29 03:06:47,955 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:06:48,103 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 68 proven. 9 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 03:06:48,104 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-29 03:06:48,336 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 43 proven. 19 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2023-11-29 03:06:48,337 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [575541082] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-29 03:06:48,337 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-29 03:06:48,337 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 18 [2023-11-29 03:06:48,337 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1229031994] [2023-11-29 03:06:48,337 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-29 03:06:48,338 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2023-11-29 03:06:48,338 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:06:48,339 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2023-11-29 03:06:48,339 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=238, Unknown=0, NotChecked=0, Total=306 [2023-11-29 03:06:48,340 INFO L87 Difference]: Start difference. First operand 909 states and 1210 transitions. Second operand has 18 states, 18 states have (on average 6.277777777777778) internal successors, (113), 16 states have internal predecessors, (113), 7 states have call successors, (27), 8 states have call predecessors, (27), 7 states have return successors, (19), 7 states have call predecessors, (19), 7 states have call successors, (19) [2023-11-29 03:06:49,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:06:49,556 INFO L93 Difference]: Finished difference Result 2589 states and 3710 transitions. [2023-11-29 03:06:49,556 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2023-11-29 03:06:49,556 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 6.277777777777778) internal successors, (113), 16 states have internal predecessors, (113), 7 states have call successors, (27), 8 states have call predecessors, (27), 7 states have return successors, (19), 7 states have call predecessors, (19), 7 states have call successors, (19) Word has length 107 [2023-11-29 03:06:49,557 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:06:49,567 INFO L225 Difference]: With dead ends: 2589 [2023-11-29 03:06:49,567 INFO L226 Difference]: Without dead ends: 1816 [2023-11-29 03:06:49,571 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 272 GetRequests, 234 SyntacticMatches, 5 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 238 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=309, Invalid=881, Unknown=0, NotChecked=0, Total=1190 [2023-11-29 03:06:49,571 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 586 mSDsluCounter, 490 mSDsCounter, 0 mSdLazyCounter, 1232 mSolverCounterSat, 235 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 595 SdHoareTripleChecker+Valid, 582 SdHoareTripleChecker+Invalid, 1467 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 235 IncrementalHoareTripleChecker+Valid, 1232 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2023-11-29 03:06:49,572 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [595 Valid, 582 Invalid, 1467 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [235 Valid, 1232 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2023-11-29 03:06:49,574 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1816 states. [2023-11-29 03:06:49,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1816 to 1600. [2023-11-29 03:06:49,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1600 states, 1168 states have (on average 1.2636986301369864) internal successors, (1476), 1259 states have internal predecessors, (1476), 212 states have call successors, (212), 196 states have call predecessors, (212), 219 states have return successors, (414), 211 states have call predecessors, (414), 212 states have call successors, (414) [2023-11-29 03:06:49,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1600 states to 1600 states and 2102 transitions. [2023-11-29 03:06:49,699 INFO L78 Accepts]: Start accepts. Automaton has 1600 states and 2102 transitions. Word has length 107 [2023-11-29 03:06:49,700 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:06:49,700 INFO L495 AbstractCegarLoop]: Abstraction has 1600 states and 2102 transitions. [2023-11-29 03:06:49,700 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 6.277777777777778) internal successors, (113), 16 states have internal predecessors, (113), 7 states have call successors, (27), 8 states have call predecessors, (27), 7 states have return successors, (19), 7 states have call predecessors, (19), 7 states have call successors, (19) [2023-11-29 03:06:49,700 INFO L276 IsEmpty]: Start isEmpty. Operand 1600 states and 2102 transitions. [2023-11-29 03:06:49,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2023-11-29 03:06:49,704 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 03:06:49,704 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:06:49,709 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2023-11-29 03:06:49,908 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2023-11-29 03:06:49,909 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 03:06:49,909 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 03:06:49,909 INFO L85 PathProgramCache]: Analyzing trace with hash -1125341093, now seen corresponding path program 1 times [2023-11-29 03:06:49,909 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 03:06:49,909 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1741715516] [2023-11-29 03:06:49,909 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:49,909 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 03:06:49,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:49,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:06:49,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:49,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 03:06:49,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:49,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 03:06:49,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:49,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:06:49,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:49,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-29 03:06:49,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:50,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2023-11-29 03:06:50,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:50,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:06:50,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:50,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:06:50,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:50,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2023-11-29 03:06:50,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:50,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 03:06:50,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:50,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 03:06:50,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:50,028 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 36 proven. 5 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2023-11-29 03:06:50,028 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 03:06:50,028 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1741715516] [2023-11-29 03:06:50,028 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1741715516] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 03:06:50,028 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1591612202] [2023-11-29 03:06:50,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 03:06:50,029 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 03:06:50,029 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 03:06:50,029 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 03:06:50,032 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-11-29 03:06:50,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 03:06:50,121 INFO L262 TraceCheckSpWp]: Trace formula consists of 372 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-29 03:06:50,124 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 03:06:50,134 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 53 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2023-11-29 03:06:50,134 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 03:06:50,134 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1591612202] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 03:06:50,134 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 03:06:50,135 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [7] total 7 [2023-11-29 03:06:50,135 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2121236845] [2023-11-29 03:06:50,135 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 03:06:50,135 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 03:06:50,135 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 03:06:50,136 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 03:06:50,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-29 03:06:50,136 INFO L87 Difference]: Start difference. First operand 1600 states and 2102 transitions. Second operand has 4 states, 4 states have (on average 17.25) internal successors, (69), 4 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2023-11-29 03:06:50,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 03:06:50,208 INFO L93 Difference]: Finished difference Result 2071 states and 2693 transitions. [2023-11-29 03:06:50,208 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 03:06:50,208 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 17.25) internal successors, (69), 4 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 107 [2023-11-29 03:06:50,208 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 03:06:50,209 INFO L225 Difference]: With dead ends: 2071 [2023-11-29 03:06:50,209 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 03:06:50,214 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 129 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-29 03:06:50,214 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 2 mSDsluCounter, 136 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 03:06:50,215 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 207 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 46 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 03:06:50,215 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 03:06:50,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 03:06:50,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 03:06:50,215 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 03:06:50,216 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 107 [2023-11-29 03:06:50,216 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 03:06:50,216 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 03:06:50,216 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 17.25) internal successors, (69), 4 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2023-11-29 03:06:50,216 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 03:06:50,216 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 03:06:50,218 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 03:06:50,223 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2023-11-29 03:06:50,420 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2023-11-29 03:06:50,423 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 03:06:51,717 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 183 190) no Hoare annotation was computed. [2023-11-29 03:06:51,718 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 183 190) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (< ~waterLevel~0 1) (= 0 ~systemActive~0)) [2023-11-29 03:06:51,718 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 90 96) no Hoare annotation was computed. [2023-11-29 03:06:51,718 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 90 96) the Hoare annotation is: true [2023-11-29 03:06:51,718 INFO L899 garLoopResultBuilder]: For program point L913-1(lines 909 920) no Hoare annotation was computed. [2023-11-29 03:06:51,718 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 909 920) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (< ~waterLevel~0 2))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse2 .cse3 (= 0 ~systemActive~0)) (or .cse0 .cse1 .cse2 .cse3))) [2023-11-29 03:06:51,718 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 909 920) no Hoare annotation was computed. [2023-11-29 03:06:51,718 INFO L899 garLoopResultBuilder]: For program point L801(lines 776 805) no Hoare annotation was computed. [2023-11-29 03:06:51,718 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 776 805) no Hoare annotation was computed. [2023-11-29 03:06:51,719 INFO L899 garLoopResultBuilder]: For program point L797(line 797) no Hoare annotation was computed. [2023-11-29 03:06:51,719 INFO L899 garLoopResultBuilder]: For program point L790(lines 790 794) no Hoare annotation was computed. [2023-11-29 03:06:51,719 INFO L902 garLoopResultBuilder]: At program point L790-1(lines 790 794) the Hoare annotation is: true [2023-11-29 03:06:51,719 INFO L902 garLoopResultBuilder]: At program point L786-2(lines 786 800) the Hoare annotation is: true [2023-11-29 03:06:51,719 INFO L902 garLoopResultBuilder]: At program point L782(line 782) the Hoare annotation is: true [2023-11-29 03:06:51,719 INFO L899 garLoopResultBuilder]: For program point L782-1(line 782) no Hoare annotation was computed. [2023-11-29 03:06:51,719 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 776 805) the Hoare annotation is: true [2023-11-29 03:06:51,719 INFO L899 garLoopResultBuilder]: For program point L878(line 878) no Hoare annotation was computed. [2023-11-29 03:06:51,719 INFO L899 garLoopResultBuilder]: For program point L77-1(lines 77 83) no Hoare annotation was computed. [2023-11-29 03:06:51,719 INFO L895 garLoopResultBuilder]: At program point L164(line 164) the Hoare annotation is: (and (or (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_processEnvironment_~tmp~2#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (= 0 ~systemActive~0)) (or (not (= |old(~pumpRunning~0)| 0)) (< |old(~waterLevel~0)| 1))) [2023-11-29 03:06:51,720 INFO L895 garLoopResultBuilder]: At program point L160(line 160) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 2)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (< |old(~waterLevel~0)| 1)) (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2023-11-29 03:06:51,720 INFO L895 garLoopResultBuilder]: At program point L169(line 169) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (not .cse2)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or (< |old(~waterLevel~0)| 2) (and .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse3) (or .cse0 (< |old(~waterLevel~0)| 1) (not .cse3))))) [2023-11-29 03:06:51,720 INFO L899 garLoopResultBuilder]: For program point L169-1(lines 150 174) no Hoare annotation was computed. [2023-11-29 03:06:51,720 INFO L899 garLoopResultBuilder]: For program point L70-1(lines 69 88) no Hoare annotation was computed. [2023-11-29 03:06:51,720 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 66 89) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (< |old(~waterLevel~0)| 1) (and (= ~pumpRunning~0 0) .cse0)) (or (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (= 0 ~systemActive~0)))) [2023-11-29 03:06:51,721 INFO L899 garLoopResultBuilder]: For program point L158(lines 158 166) no Hoare annotation was computed. [2023-11-29 03:06:51,721 INFO L899 garLoopResultBuilder]: For program point L154(lines 154 171) no Hoare annotation was computed. [2023-11-29 03:06:51,721 INFO L899 garLoopResultBuilder]: For program point L889(lines 889 893) no Hoare annotation was computed. [2023-11-29 03:06:51,721 INFO L899 garLoopResultBuilder]: For program point L761(lines 761 767) no Hoare annotation was computed. [2023-11-29 03:06:51,721 INFO L899 garLoopResultBuilder]: For program point L889-2(lines 885 896) no Hoare annotation was computed. [2023-11-29 03:06:51,721 INFO L899 garLoopResultBuilder]: For program point L757(lines 757 770) no Hoare annotation was computed. [2023-11-29 03:06:51,721 INFO L899 garLoopResultBuilder]: For program point L757-1(lines 749 773) no Hoare annotation was computed. [2023-11-29 03:06:51,721 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 66 89) no Hoare annotation was computed. [2023-11-29 03:06:51,721 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 878) no Hoare annotation was computed. [2023-11-29 03:06:51,722 INFO L895 garLoopResultBuilder]: At program point L700(line 700) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and (= ~pumpRunning~0 0) .cse0 (<= 1 ~waterLevel~0) .cse1) (and (<= 2 ~waterLevel~0) .cse0 .cse1 (not (= 0 ~systemActive~0))))) [2023-11-29 03:06:51,722 INFO L895 garLoopResultBuilder]: At program point L738(lines 687 739) the Hoare annotation is: false [2023-11-29 03:06:51,722 INFO L899 garLoopResultBuilder]: For program point L726(lines 726 732) no Hoare annotation was computed. [2023-11-29 03:06:51,722 INFO L895 garLoopResultBuilder]: At program point L726-2(lines 718 733) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and (= ~pumpRunning~0 0) .cse0 (<= 1 ~waterLevel~0) .cse1) (and (<= 2 ~waterLevel~0) .cse0 .cse1 (not (= 0 ~systemActive~0))))) [2023-11-29 03:06:51,722 INFO L899 garLoopResultBuilder]: For program point L689(lines 688 737) no Hoare annotation was computed. [2023-11-29 03:06:51,722 INFO L899 garLoopResultBuilder]: For program point L718(lines 718 733) no Hoare annotation was computed. [2023-11-29 03:06:51,722 INFO L895 garLoopResultBuilder]: At program point L710(line 710) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and (= ~pumpRunning~0 0) .cse0 (<= 1 ~waterLevel~0) .cse1) (and (<= 2 ~waterLevel~0) .cse0 .cse1 (not (= 0 ~systemActive~0))))) [2023-11-29 03:06:51,722 INFO L899 garLoopResultBuilder]: For program point L289(lines 289 295) no Hoare annotation was computed. [2023-11-29 03:06:51,722 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 03:06:51,722 INFO L899 garLoopResultBuilder]: For program point L289-1(lines 289 295) no Hoare annotation was computed. [2023-11-29 03:06:51,722 INFO L895 garLoopResultBuilder]: At program point L735(lines 688 737) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and (= ~pumpRunning~0 0) .cse0 (<= 1 ~waterLevel~0) .cse1) (and (<= 2 ~waterLevel~0) .cse0 .cse1 (not (= 0 ~systemActive~0))))) [2023-11-29 03:06:51,722 INFO L899 garLoopResultBuilder]: For program point L698(lines 698 704) no Hoare annotation was computed. [2023-11-29 03:06:51,722 INFO L899 garLoopResultBuilder]: For program point L698-1(lines 698 704) no Hoare annotation was computed. [2023-11-29 03:06:51,722 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 03:06:51,722 INFO L899 garLoopResultBuilder]: For program point L860(lines 860 867) no Hoare annotation was computed. [2023-11-29 03:06:51,722 INFO L899 garLoopResultBuilder]: For program point L860-2(lines 860 867) no Hoare annotation was computed. [2023-11-29 03:06:51,723 INFO L899 garLoopResultBuilder]: For program point L741(lines 678 745) no Hoare annotation was computed. [2023-11-29 03:06:51,723 INFO L899 garLoopResultBuilder]: For program point L708(lines 708 714) no Hoare annotation was computed. [2023-11-29 03:06:51,723 INFO L899 garLoopResultBuilder]: For program point L708-1(lines 708 714) no Hoare annotation was computed. [2023-11-29 03:06:51,723 INFO L895 garLoopResultBuilder]: At program point L291(line 291) the Hoare annotation is: (and (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2023-11-29 03:06:51,723 INFO L899 garLoopResultBuilder]: For program point L256(lines 256 260) no Hoare annotation was computed. [2023-11-29 03:06:51,723 INFO L899 garLoopResultBuilder]: For program point L256-2(lines 256 260) no Hoare annotation was computed. [2023-11-29 03:06:51,723 INFO L895 garLoopResultBuilder]: At program point L112(line 112) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 .cse2) (< ~waterLevel~0 2) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 (and .cse1 .cse2 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) .cse3))) [2023-11-29 03:06:51,723 INFO L899 garLoopResultBuilder]: For program point L106(lines 106 114) no Hoare annotation was computed. [2023-11-29 03:06:51,723 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 98 122) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (< ~waterLevel~0 1) (= 0 ~systemActive~0)) [2023-11-29 03:06:51,723 INFO L899 garLoopResultBuilder]: For program point L102(lines 102 119) no Hoare annotation was computed. [2023-11-29 03:06:51,723 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 962 975) no Hoare annotation was computed. [2023-11-29 03:06:51,723 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 98 122) no Hoare annotation was computed. [2023-11-29 03:06:51,724 INFO L895 garLoopResultBuilder]: At program point L117(line 117) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (= 0 ~systemActive~0)) [2023-11-29 03:06:51,724 INFO L899 garLoopResultBuilder]: For program point L117-1(lines 98 122) no Hoare annotation was computed. [2023-11-29 03:06:51,724 INFO L899 garLoopResultBuilder]: For program point L966(lines 966 972) no Hoare annotation was computed. [2023-11-29 03:06:51,724 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 897 908) no Hoare annotation was computed. [2023-11-29 03:06:51,724 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 897 908) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (< |old(~waterLevel~0)| 1) (not (= ~pumpRunning~0 0)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (= 0 ~systemActive~0)))) [2023-11-29 03:06:51,724 INFO L899 garLoopResultBuilder]: For program point L901-1(lines 897 908) no Hoare annotation was computed. [2023-11-29 03:06:51,724 INFO L899 garLoopResultBuilder]: For program point L128(lines 128 145) no Hoare annotation was computed. [2023-11-29 03:06:51,724 INFO L899 garLoopResultBuilder]: For program point L275(lines 275 279) no Hoare annotation was computed. [2023-11-29 03:06:51,724 INFO L899 garLoopResultBuilder]: For program point L275-2(lines 275 279) no Hoare annotation was computed. [2023-11-29 03:06:51,725 INFO L895 garLoopResultBuilder]: At program point L143(line 143) the Hoare annotation is: (or (< ~waterLevel~0 1) (= 0 ~systemActive~0) (and (= ~pumpRunning~0 0) (= |old(~pumpRunning~0)| 0))) [2023-11-29 03:06:51,725 INFO L899 garLoopResultBuilder]: For program point L143-1(lines 124 148) no Hoare annotation was computed. [2023-11-29 03:06:51,725 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 124 148) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (< ~waterLevel~0 1) (= 0 ~systemActive~0)) [2023-11-29 03:06:51,725 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 124 148) no Hoare annotation was computed. [2023-11-29 03:06:51,725 INFO L895 garLoopResultBuilder]: At program point L138(line 138) the Hoare annotation is: (or (< ~waterLevel~0 1) (= 0 ~systemActive~0)) [2023-11-29 03:06:51,725 INFO L895 garLoopResultBuilder]: At program point L134(line 134) the Hoare annotation is: (let ((.cse0 (< ~waterLevel~0 1)) (.cse1 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__lowWaterSensor_~tmp~1#1|)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2023-11-29 03:06:51,726 INFO L899 garLoopResultBuilder]: For program point L132(lines 132 140) no Hoare annotation was computed. [2023-11-29 03:06:51,728 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 03:06:51,729 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 03:06:51,745 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 03:06:51 BoogieIcfgContainer [2023-11-29 03:06:51,745 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 03:06:51,746 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 03:06:51,746 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 03:06:51,746 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 03:06:51,747 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 03:06:40" (3/4) ... [2023-11-29 03:06:51,748 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 03:06:51,752 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-29 03:06:51,752 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-29 03:06:51,752 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 03:06:51,752 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 03:06:51,752 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 03:06:51,752 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-29 03:06:51,753 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 03:06:51,753 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 03:06:51,761 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 35 nodes and edges [2023-11-29 03:06:51,761 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 03:06:51,762 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 03:06:51,763 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 03:06:51,763 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 03:06:51,863 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 03:06:51,864 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 03:06:51,864 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 03:06:51,865 INFO L158 Benchmark]: Toolchain (without parser) took 11928.34ms. Allocated memory was 132.1MB in the beginning and 239.1MB in the end (delta: 107.0MB). Free memory was 92.4MB in the beginning and 70.4MB in the end (delta: 22.1MB). Peak memory consumption was 131.1MB. Max. memory is 16.1GB. [2023-11-29 03:06:51,865 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 132.1MB. Free memory is still 102.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 03:06:51,866 INFO L158 Benchmark]: CACSL2BoogieTranslator took 411.00ms. Allocated memory is still 132.1MB. Free memory was 92.4MB in the beginning and 72.7MB in the end (delta: 19.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-29 03:06:51,866 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.31ms. Allocated memory is still 132.1MB. Free memory was 72.3MB in the beginning and 70.1MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 03:06:51,867 INFO L158 Benchmark]: Boogie Preprocessor took 43.86ms. Allocated memory is still 132.1MB. Free memory was 70.1MB in the beginning and 67.7MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 03:06:51,867 INFO L158 Benchmark]: RCFGBuilder took 481.39ms. Allocated memory is still 132.1MB. Free memory was 67.7MB in the beginning and 99.4MB in the end (delta: -31.7MB). Peak memory consumption was 28.9MB. Max. memory is 16.1GB. [2023-11-29 03:06:51,867 INFO L158 Benchmark]: TraceAbstraction took 10802.09ms. Allocated memory was 165.7MB in the beginning and 239.1MB in the end (delta: 73.4MB). Free memory was 136.2MB in the beginning and 77.7MB in the end (delta: 58.5MB). Peak memory consumption was 142.3MB. Max. memory is 16.1GB. [2023-11-29 03:06:51,868 INFO L158 Benchmark]: Witness Printer took 118.43ms. Allocated memory is still 239.1MB. Free memory was 77.7MB in the beginning and 70.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-29 03:06:51,870 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 132.1MB. Free memory is still 102.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 411.00ms. Allocated memory is still 132.1MB. Free memory was 92.4MB in the beginning and 72.7MB in the end (delta: 19.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.31ms. Allocated memory is still 132.1MB. Free memory was 72.3MB in the beginning and 70.1MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 43.86ms. Allocated memory is still 132.1MB. Free memory was 70.1MB in the beginning and 67.7MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 481.39ms. Allocated memory is still 132.1MB. Free memory was 67.7MB in the beginning and 99.4MB in the end (delta: -31.7MB). Peak memory consumption was 28.9MB. Max. memory is 16.1GB. * TraceAbstraction took 10802.09ms. Allocated memory was 165.7MB in the beginning and 239.1MB in the end (delta: 73.4MB). Free memory was 136.2MB in the beginning and 77.7MB in the end (delta: 58.5MB). Peak memory consumption was 142.3MB. Max. memory is 16.1GB. * Witness Printer took 118.43ms. Allocated memory is still 239.1MB. Free memory was 77.7MB in the beginning and 70.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] - GenericResultAtLocation [Line: 308]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [308] - GenericResultAtLocation [Line: 674]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [674] - GenericResultAtLocation [Line: 746]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [746] - GenericResultAtLocation [Line: 774]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [774] - GenericResultAtLocation [Line: 873]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [873] - GenericResultAtLocation [Line: 882]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [882] - GenericResultAtLocation [Line: 985]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [985] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 878]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 77 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 10.7s, OverallIterations: 13, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2085 SdHoareTripleChecker+Valid, 2.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2033 mSDsluCounter, 3060 SdHoareTripleChecker+Invalid, 2.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2105 mSDsCounter, 685 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3321 IncrementalHoareTripleChecker+Invalid, 4006 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 685 mSolverCounterUnsat, 955 mSDtfsCounter, 3321 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 863 GetRequests, 701 SyntacticMatches, 12 SemanticMatches, 150 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1527 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1600occurred in iteration=12, InterpolantAutomatonStates: 142, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 13 MinimizatonAttempts, 443 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 25 LocationsWithAnnotation, 1430 PreInvPairs, 1515 NumberOfFragments, 474 HoareAnnotationTreeSize, 1430 FomulaSimplifications, 1026 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 25 FomulaSimplificationsInter, 4220 FormulaSimplificationTreeSizeReductionInter, 1.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.4s InterpolantComputationTime, 1069 NumberOfCodeBlocks, 1069 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1215 ConstructedInterpolants, 0 QuantifiedInterpolants, 2181 SizeOfPredicates, 9 NumberOfNonLiveVariables, 1575 ConjunctsInSsa, 34 ConjunctsInUnsatCore, 20 InterpolantComputations, 11 PerfectInterpolantSequences, 534/603 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 687]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (splverifierCounter == 0)) && (1 <= waterLevel)) && (tmp == 1)) || ((((2 <= waterLevel) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) - InvariantResult [Line: 786]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-29 03:06:51,888 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2168ef73-8119-4a84-868c-aea43b0996ba/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE