./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product43.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product43.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e5a4c274bc0fec0eeea8ea2f72c4bc5bbc7aef2fd24f2cf907e22c2c7f3759d4 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 01:50:32,332 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 01:50:32,393 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 01:50:32,397 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 01:50:32,397 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 01:50:32,419 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 01:50:32,420 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 01:50:32,421 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 01:50:32,421 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 01:50:32,422 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 01:50:32,422 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 01:50:32,423 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 01:50:32,423 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 01:50:32,424 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 01:50:32,424 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 01:50:32,425 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 01:50:32,425 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 01:50:32,426 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 01:50:32,426 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 01:50:32,427 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 01:50:32,427 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 01:50:32,428 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 01:50:32,428 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 01:50:32,429 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 01:50:32,429 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 01:50:32,430 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 01:50:32,430 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 01:50:32,430 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 01:50:32,431 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 01:50:32,431 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 01:50:32,432 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 01:50:32,432 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 01:50:32,432 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 01:50:32,433 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 01:50:32,433 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 01:50:32,433 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 01:50:32,433 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 01:50:32,434 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 01:50:32,434 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 01:50:32,434 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 01:50:32,434 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 01:50:32,434 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 01:50:32,435 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e5a4c274bc0fec0eeea8ea2f72c4bc5bbc7aef2fd24f2cf907e22c2c7f3759d4 [2023-11-29 01:50:32,651 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 01:50:32,671 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 01:50:32,673 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 01:50:32,674 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 01:50:32,675 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 01:50:32,676 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec5_product43.cil.c [2023-11-29 01:50:35,376 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 01:50:35,623 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 01:50:35,623 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/sv-benchmarks/c/product-lines/minepump_spec5_product43.cil.c [2023-11-29 01:50:35,637 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/data/ff2f971ab/d5bae37c0369419da51655cfa027fc50/FLAGc7922165c [2023-11-29 01:50:35,651 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/data/ff2f971ab/d5bae37c0369419da51655cfa027fc50 [2023-11-29 01:50:35,654 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 01:50:35,655 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 01:50:35,656 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 01:50:35,657 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 01:50:35,662 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 01:50:35,663 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 01:50:35" (1/1) ... [2023-11-29 01:50:35,664 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@22f7a80b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:35, skipping insertion in model container [2023-11-29 01:50:35,664 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 01:50:35" (1/1) ... [2023-11-29 01:50:35,706 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 01:50:35,931 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/sv-benchmarks/c/product-lines/minepump_spec5_product43.cil.c[18537,18550] [2023-11-29 01:50:35,935 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 01:50:35,945 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 01:50:35,952 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-11-29 01:50:35,953 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [415] [2023-11-29 01:50:35,954 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [521] [2023-11-29 01:50:35,954 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [589] [2023-11-29 01:50:35,954 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [786] [2023-11-29 01:50:35,954 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [881] [2023-11-29 01:50:35,954 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [931] [2023-11-29 01:50:35,954 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [966] [2023-11-29 01:50:36,009 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/sv-benchmarks/c/product-lines/minepump_spec5_product43.cil.c[18537,18550] [2023-11-29 01:50:36,010 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 01:50:36,027 INFO L206 MainTranslator]: Completed translation [2023-11-29 01:50:36,028 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:36 WrapperNode [2023-11-29 01:50:36,028 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 01:50:36,029 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 01:50:36,029 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 01:50:36,029 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 01:50:36,034 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:36" (1/1) ... [2023-11-29 01:50:36,047 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:36" (1/1) ... [2023-11-29 01:50:36,075 INFO L138 Inliner]: procedures = 56, calls = 100, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 205 [2023-11-29 01:50:36,075 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 01:50:36,076 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 01:50:36,076 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 01:50:36,076 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 01:50:36,086 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:36" (1/1) ... [2023-11-29 01:50:36,086 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:36" (1/1) ... [2023-11-29 01:50:36,088 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:36" (1/1) ... [2023-11-29 01:50:36,100 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 01:50:36,100 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:36" (1/1) ... [2023-11-29 01:50:36,100 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:36" (1/1) ... [2023-11-29 01:50:36,106 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:36" (1/1) ... [2023-11-29 01:50:36,110 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:36" (1/1) ... [2023-11-29 01:50:36,112 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:36" (1/1) ... [2023-11-29 01:50:36,113 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:36" (1/1) ... [2023-11-29 01:50:36,114 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 01:50:36,115 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 01:50:36,115 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 01:50:36,115 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 01:50:36,116 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:36" (1/1) ... [2023-11-29 01:50:36,121 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 01:50:36,133 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 01:50:36,144 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 01:50:36,147 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 01:50:36,175 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 01:50:36,176 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-29 01:50:36,176 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-29 01:50:36,176 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 01:50:36,176 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 01:50:36,176 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 01:50:36,176 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 01:50:36,176 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 01:50:36,177 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 01:50:36,177 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-29 01:50:36,177 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-29 01:50:36,177 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 01:50:36,177 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 01:50:36,177 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 01:50:36,177 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 01:50:36,178 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 01:50:36,255 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 01:50:36,257 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 01:50:36,481 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 01:50:36,565 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 01:50:36,565 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 01:50:36,566 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 01:50:36 BoogieIcfgContainer [2023-11-29 01:50:36,566 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 01:50:36,569 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 01:50:36,569 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 01:50:36,572 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 01:50:36,572 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 01:50:35" (1/3) ... [2023-11-29 01:50:36,573 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5ad8409f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 01:50:36, skipping insertion in model container [2023-11-29 01:50:36,573 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:50:36" (2/3) ... [2023-11-29 01:50:36,574 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5ad8409f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 01:50:36, skipping insertion in model container [2023-11-29 01:50:36,574 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 01:50:36" (3/3) ... [2023-11-29 01:50:36,575 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product43.cil.c [2023-11-29 01:50:36,594 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 01:50:36,594 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 01:50:36,643 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 01:50:36,650 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3bfa61fa, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 01:50:36,650 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 01:50:36,654 INFO L276 IsEmpty]: Start isEmpty. Operand has 66 states, 48 states have (on average 1.5416666666666667) internal successors, (74), 54 states have internal predecessors, (74), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-29 01:50:36,663 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-29 01:50:36,663 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:50:36,664 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:50:36,664 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:50:36,670 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:50:36,670 INFO L85 PathProgramCache]: Analyzing trace with hash 1216755973, now seen corresponding path program 1 times [2023-11-29 01:50:36,679 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:50:36,680 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1407144607] [2023-11-29 01:50:36,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:50:36,680 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:50:36,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:36,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 01:50:36,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:36,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 01:50:36,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:36,853 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 01:50:36,853 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:50:36,854 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1407144607] [2023-11-29 01:50:36,854 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1407144607] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:50:36,855 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:50:36,855 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 01:50:36,856 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1877081457] [2023-11-29 01:50:36,857 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:50:36,860 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 01:50:36,861 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:50:36,885 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 01:50:36,886 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 01:50:36,888 INFO L87 Difference]: Start difference. First operand has 66 states, 48 states have (on average 1.5416666666666667) internal successors, (74), 54 states have internal predecessors, (74), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 01:50:36,940 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:50:36,941 INFO L93 Difference]: Finished difference Result 130 states and 189 transitions. [2023-11-29 01:50:36,942 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 01:50:36,943 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-11-29 01:50:36,943 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:50:36,951 INFO L225 Difference]: With dead ends: 130 [2023-11-29 01:50:36,951 INFO L226 Difference]: Without dead ends: 61 [2023-11-29 01:50:36,954 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 01:50:36,957 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 01:50:36,958 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 74 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 01:50:36,971 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2023-11-29 01:50:36,989 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2023-11-29 01:50:36,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 45 states have (on average 1.4222222222222223) internal successors, (64), 50 states have internal predecessors, (64), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-29 01:50:36,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 83 transitions. [2023-11-29 01:50:36,994 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 83 transitions. Word has length 22 [2023-11-29 01:50:36,995 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:50:36,995 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 83 transitions. [2023-11-29 01:50:36,995 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 01:50:36,996 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 83 transitions. [2023-11-29 01:50:36,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-29 01:50:36,998 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:50:36,998 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:50:36,999 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 01:50:36,999 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:50:37,000 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:50:37,000 INFO L85 PathProgramCache]: Analyzing trace with hash 2084275414, now seen corresponding path program 1 times [2023-11-29 01:50:37,000 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:50:37,000 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [82704176] [2023-11-29 01:50:37,001 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:50:37,001 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:50:37,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 01:50:37,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-29 01:50:37,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,107 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 01:50:37,107 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:50:37,107 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [82704176] [2023-11-29 01:50:37,108 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [82704176] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:50:37,108 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:50:37,108 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 01:50:37,108 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1792831767] [2023-11-29 01:50:37,108 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:50:37,110 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 01:50:37,110 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:50:37,111 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 01:50:37,111 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 01:50:37,111 INFO L87 Difference]: Start difference. First operand 61 states and 83 transitions. Second operand has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 01:50:37,144 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:50:37,145 INFO L93 Difference]: Finished difference Result 93 states and 126 transitions. [2023-11-29 01:50:37,145 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 01:50:37,145 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 23 [2023-11-29 01:50:37,146 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:50:37,147 INFO L225 Difference]: With dead ends: 93 [2023-11-29 01:50:37,147 INFO L226 Difference]: Without dead ends: 53 [2023-11-29 01:50:37,148 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 01:50:37,149 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 14 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 01:50:37,150 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 105 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 01:50:37,151 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2023-11-29 01:50:37,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2023-11-29 01:50:37,158 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 40 states have (on average 1.45) internal successors, (58), 45 states have internal predecessors, (58), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2023-11-29 01:50:37,160 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 72 transitions. [2023-11-29 01:50:37,160 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 72 transitions. Word has length 23 [2023-11-29 01:50:37,160 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:50:37,160 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 72 transitions. [2023-11-29 01:50:37,161 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 01:50:37,161 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 72 transitions. [2023-11-29 01:50:37,162 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-29 01:50:37,162 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:50:37,163 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:50:37,163 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 01:50:37,163 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:50:37,164 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:50:37,164 INFO L85 PathProgramCache]: Analyzing trace with hash -508518016, now seen corresponding path program 1 times [2023-11-29 01:50:37,164 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:50:37,164 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1223888480] [2023-11-29 01:50:37,164 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:50:37,165 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:50:37,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 01:50:37,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-29 01:50:37,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,290 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 01:50:37,291 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:50:37,291 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1223888480] [2023-11-29 01:50:37,291 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1223888480] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:50:37,291 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:50:37,291 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-29 01:50:37,292 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1955492125] [2023-11-29 01:50:37,292 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:50:37,292 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 01:50:37,293 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:50:37,293 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 01:50:37,293 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 01:50:37,294 INFO L87 Difference]: Start difference. First operand 53 states and 72 transitions. Second operand has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 01:50:37,403 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:50:37,403 INFO L93 Difference]: Finished difference Result 155 states and 217 transitions. [2023-11-29 01:50:37,404 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 01:50:37,404 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 26 [2023-11-29 01:50:37,404 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:50:37,406 INFO L225 Difference]: With dead ends: 155 [2023-11-29 01:50:37,406 INFO L226 Difference]: Without dead ends: 104 [2023-11-29 01:50:37,407 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 01:50:37,408 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 81 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 178 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 01:50:37,409 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 178 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 01:50:37,410 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2023-11-29 01:50:37,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 87. [2023-11-29 01:50:37,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 65 states have (on average 1.4461538461538461) internal successors, (94), 72 states have internal predecessors, (94), 12 states have call successors, (12), 9 states have call predecessors, (12), 9 states have return successors, (13), 11 states have call predecessors, (13), 12 states have call successors, (13) [2023-11-29 01:50:37,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 119 transitions. [2023-11-29 01:50:37,425 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 119 transitions. Word has length 26 [2023-11-29 01:50:37,426 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:50:37,426 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 119 transitions. [2023-11-29 01:50:37,426 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 01:50:37,426 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 119 transitions. [2023-11-29 01:50:37,427 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2023-11-29 01:50:37,428 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:50:37,428 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:50:37,428 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 01:50:37,428 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:50:37,429 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:50:37,429 INFO L85 PathProgramCache]: Analyzing trace with hash 911150500, now seen corresponding path program 1 times [2023-11-29 01:50:37,429 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:50:37,429 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [359210359] [2023-11-29 01:50:37,429 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:50:37,429 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:50:37,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-29 01:50:37,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-29 01:50:37,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,561 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-29 01:50:37,562 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:50:37,562 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [359210359] [2023-11-29 01:50:37,563 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [359210359] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:50:37,563 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:50:37,563 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 01:50:37,563 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [287582594] [2023-11-29 01:50:37,563 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:50:37,564 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 01:50:37,564 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:50:37,565 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 01:50:37,566 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 01:50:37,566 INFO L87 Difference]: Start difference. First operand 87 states and 119 transitions. Second operand has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 01:50:37,702 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:50:37,702 INFO L93 Difference]: Finished difference Result 209 states and 289 transitions. [2023-11-29 01:50:37,703 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-29 01:50:37,703 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 29 [2023-11-29 01:50:37,703 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:50:37,705 INFO L225 Difference]: With dead ends: 209 [2023-11-29 01:50:37,705 INFO L226 Difference]: Without dead ends: 124 [2023-11-29 01:50:37,707 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-29 01:50:37,708 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 53 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 103 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 111 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 103 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 01:50:37,708 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 254 Invalid, 111 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 103 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 01:50:37,709 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 124 states. [2023-11-29 01:50:37,726 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 124 to 121. [2023-11-29 01:50:37,726 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 121 states, 89 states have (on average 1.3595505617977528) internal successors, (121), 98 states have internal predecessors, (121), 17 states have call successors, (17), 14 states have call predecessors, (17), 14 states have return successors, (21), 17 states have call predecessors, (21), 17 states have call successors, (21) [2023-11-29 01:50:37,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 121 states to 121 states and 159 transitions. [2023-11-29 01:50:37,728 INFO L78 Accepts]: Start accepts. Automaton has 121 states and 159 transitions. Word has length 29 [2023-11-29 01:50:37,728 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:50:37,728 INFO L495 AbstractCegarLoop]: Abstraction has 121 states and 159 transitions. [2023-11-29 01:50:37,729 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 01:50:37,729 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 159 transitions. [2023-11-29 01:50:37,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-11-29 01:50:37,731 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:50:37,731 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:50:37,731 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 01:50:37,731 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:50:37,732 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:50:37,732 INFO L85 PathProgramCache]: Analyzing trace with hash 844412357, now seen corresponding path program 1 times [2023-11-29 01:50:37,732 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:50:37,732 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [585462999] [2023-11-29 01:50:37,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:50:37,733 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:50:37,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 01:50:37,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-29 01:50:37,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,830 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 01:50:37,830 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:50:37,830 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [585462999] [2023-11-29 01:50:37,831 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [585462999] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:50:37,831 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:50:37,831 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-29 01:50:37,831 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [622862892] [2023-11-29 01:50:37,831 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:50:37,831 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 01:50:37,832 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:50:37,832 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 01:50:37,832 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 01:50:37,833 INFO L87 Difference]: Start difference. First operand 121 states and 159 transitions. Second operand has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 01:50:37,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:50:37,877 INFO L93 Difference]: Finished difference Result 243 states and 326 transitions. [2023-11-29 01:50:37,877 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 01:50:37,878 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 35 [2023-11-29 01:50:37,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:50:37,880 INFO L225 Difference]: With dead ends: 243 [2023-11-29 01:50:37,880 INFO L226 Difference]: Without dead ends: 124 [2023-11-29 01:50:37,881 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 01:50:37,882 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 1 mSDsluCounter, 113 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 01:50:37,883 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 173 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 01:50:37,884 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 124 states. [2023-11-29 01:50:37,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 124 to 123. [2023-11-29 01:50:37,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 123 states, 91 states have (on average 1.3516483516483517) internal successors, (123), 100 states have internal predecessors, (123), 17 states have call successors, (17), 14 states have call predecessors, (17), 14 states have return successors, (21), 17 states have call predecessors, (21), 17 states have call successors, (21) [2023-11-29 01:50:37,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 161 transitions. [2023-11-29 01:50:37,901 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 161 transitions. Word has length 35 [2023-11-29 01:50:37,901 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:50:37,901 INFO L495 AbstractCegarLoop]: Abstraction has 123 states and 161 transitions. [2023-11-29 01:50:37,902 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 01:50:37,902 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 161 transitions. [2023-11-29 01:50:37,904 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-11-29 01:50:37,904 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:50:37,904 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:50:37,904 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-29 01:50:37,904 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:50:37,905 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:50:37,905 INFO L85 PathProgramCache]: Analyzing trace with hash -435451321, now seen corresponding path program 1 times [2023-11-29 01:50:37,905 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:50:37,905 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1213872069] [2023-11-29 01:50:37,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:50:37,906 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:50:37,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 01:50:37,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-29 01:50:37,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:37,977 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 01:50:37,977 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:50:37,978 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1213872069] [2023-11-29 01:50:37,978 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1213872069] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:50:37,978 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:50:37,978 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 01:50:37,978 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [980311385] [2023-11-29 01:50:37,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:50:37,979 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 01:50:37,979 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:50:37,979 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 01:50:37,980 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 01:50:37,980 INFO L87 Difference]: Start difference. First operand 123 states and 161 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 01:50:38,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:50:38,041 INFO L93 Difference]: Finished difference Result 257 states and 345 transitions. [2023-11-29 01:50:38,041 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-29 01:50:38,042 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 35 [2023-11-29 01:50:38,042 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:50:38,043 INFO L225 Difference]: With dead ends: 257 [2023-11-29 01:50:38,044 INFO L226 Difference]: Without dead ends: 136 [2023-11-29 01:50:38,044 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2023-11-29 01:50:38,045 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 28 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 238 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 01:50:38,046 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 238 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 01:50:38,047 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136 states. [2023-11-29 01:50:38,061 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136 to 125. [2023-11-29 01:50:38,062 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 93 states have (on average 1.3440860215053763) internal successors, (125), 102 states have internal predecessors, (125), 17 states have call successors, (17), 14 states have call predecessors, (17), 14 states have return successors, (21), 17 states have call predecessors, (21), 17 states have call successors, (21) [2023-11-29 01:50:38,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 163 transitions. [2023-11-29 01:50:38,063 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 163 transitions. Word has length 35 [2023-11-29 01:50:38,064 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:50:38,064 INFO L495 AbstractCegarLoop]: Abstraction has 125 states and 163 transitions. [2023-11-29 01:50:38,064 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 01:50:38,064 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 163 transitions. [2023-11-29 01:50:38,066 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-11-29 01:50:38,066 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:50:38,066 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:50:38,066 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-29 01:50:38,066 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:50:38,067 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:50:38,067 INFO L85 PathProgramCache]: Analyzing trace with hash -2023799223, now seen corresponding path program 1 times [2023-11-29 01:50:38,067 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:50:38,067 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1152404125] [2023-11-29 01:50:38,067 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:50:38,067 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:50:38,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:38,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 01:50:38,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:38,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-29 01:50:38,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:38,120 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 01:50:38,120 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:50:38,120 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1152404125] [2023-11-29 01:50:38,120 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1152404125] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:50:38,120 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:50:38,121 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 01:50:38,121 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1897512660] [2023-11-29 01:50:38,121 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:50:38,121 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 01:50:38,121 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:50:38,122 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 01:50:38,122 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 01:50:38,122 INFO L87 Difference]: Start difference. First operand 125 states and 163 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 01:50:38,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:50:38,181 INFO L93 Difference]: Finished difference Result 356 states and 483 transitions. [2023-11-29 01:50:38,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 01:50:38,181 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 35 [2023-11-29 01:50:38,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:50:38,184 INFO L225 Difference]: With dead ends: 356 [2023-11-29 01:50:38,184 INFO L226 Difference]: Without dead ends: 233 [2023-11-29 01:50:38,185 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 01:50:38,186 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 45 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 01:50:38,186 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 124 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 01:50:38,187 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 233 states. [2023-11-29 01:50:38,209 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 233 to 231. [2023-11-29 01:50:38,210 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 171 states have (on average 1.3333333333333333) internal successors, (228), 183 states have internal predecessors, (228), 34 states have call successors, (34), 28 states have call predecessors, (34), 25 states have return successors, (44), 31 states have call predecessors, (44), 34 states have call successors, (44) [2023-11-29 01:50:38,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 306 transitions. [2023-11-29 01:50:38,213 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 306 transitions. Word has length 35 [2023-11-29 01:50:38,213 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:50:38,213 INFO L495 AbstractCegarLoop]: Abstraction has 231 states and 306 transitions. [2023-11-29 01:50:38,213 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 01:50:38,213 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 306 transitions. [2023-11-29 01:50:38,215 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2023-11-29 01:50:38,215 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:50:38,215 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:50:38,215 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-29 01:50:38,216 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:50:38,216 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:50:38,216 INFO L85 PathProgramCache]: Analyzing trace with hash 384406563, now seen corresponding path program 1 times [2023-11-29 01:50:38,216 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:50:38,216 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [931328260] [2023-11-29 01:50:38,216 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:50:38,217 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:50:38,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:38,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 01:50:38,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:38,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 01:50:38,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:38,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2023-11-29 01:50:38,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:38,458 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 01:50:38,458 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:50:38,458 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [931328260] [2023-11-29 01:50:38,458 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [931328260] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:50:38,458 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:50:38,458 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-29 01:50:38,459 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1042083083] [2023-11-29 01:50:38,459 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:50:38,459 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-29 01:50:38,459 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:50:38,460 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-29 01:50:38,460 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2023-11-29 01:50:38,460 INFO L87 Difference]: Start difference. First operand 231 states and 306 transitions. Second operand has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 6 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-29 01:50:38,778 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:50:38,778 INFO L93 Difference]: Finished difference Result 805 states and 1079 transitions. [2023-11-29 01:50:38,781 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-29 01:50:38,782 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 6 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 39 [2023-11-29 01:50:38,782 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:50:38,786 INFO L225 Difference]: With dead ends: 805 [2023-11-29 01:50:38,786 INFO L226 Difference]: Without dead ends: 576 [2023-11-29 01:50:38,787 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2023-11-29 01:50:38,788 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 209 mSDsluCounter, 220 mSDsCounter, 0 mSdLazyCounter, 209 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 302 SdHoareTripleChecker+Invalid, 264 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 209 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 01:50:38,788 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [218 Valid, 302 Invalid, 264 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 209 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 01:50:38,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 576 states. [2023-11-29 01:50:38,830 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 576 to 523. [2023-11-29 01:50:38,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 523 states, 389 states have (on average 1.2982005141388175) internal successors, (505), 423 states have internal predecessors, (505), 73 states have call successors, (73), 55 states have call predecessors, (73), 60 states have return successors, (101), 67 states have call predecessors, (101), 73 states have call successors, (101) [2023-11-29 01:50:38,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 523 states to 523 states and 679 transitions. [2023-11-29 01:50:38,835 INFO L78 Accepts]: Start accepts. Automaton has 523 states and 679 transitions. Word has length 39 [2023-11-29 01:50:38,835 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:50:38,835 INFO L495 AbstractCegarLoop]: Abstraction has 523 states and 679 transitions. [2023-11-29 01:50:38,836 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 6 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-29 01:50:38,836 INFO L276 IsEmpty]: Start isEmpty. Operand 523 states and 679 transitions. [2023-11-29 01:50:38,837 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2023-11-29 01:50:38,837 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:50:38,837 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:50:38,838 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-29 01:50:38,838 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:50:38,838 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:50:38,838 INFO L85 PathProgramCache]: Analyzing trace with hash 1365866285, now seen corresponding path program 1 times [2023-11-29 01:50:38,838 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:50:38,838 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [81144256] [2023-11-29 01:50:38,839 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:50:38,839 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:50:38,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:38,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 01:50:38,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:38,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 01:50:38,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:38,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 01:50:38,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:38,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2023-11-29 01:50:38,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:38,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-29 01:50:38,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:39,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2023-11-29 01:50:39,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:39,004 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 14 proven. 5 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-29 01:50:39,004 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:50:39,004 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [81144256] [2023-11-29 01:50:39,004 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [81144256] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 01:50:39,004 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1677082937] [2023-11-29 01:50:39,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:50:39,005 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 01:50:39,005 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 01:50:39,008 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 01:50:39,010 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-29 01:50:39,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:39,096 INFO L262 TraceCheckSpWp]: Trace formula consists of 271 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-29 01:50:39,101 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 01:50:39,218 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 18 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 01:50:39,218 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-29 01:50:39,375 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-29 01:50:39,375 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1677082937] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-29 01:50:39,375 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-29 01:50:39,376 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 6, 6] total 14 [2023-11-29 01:50:39,376 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [315792487] [2023-11-29 01:50:39,376 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-29 01:50:39,377 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2023-11-29 01:50:39,377 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:50:39,378 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2023-11-29 01:50:39,378 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2023-11-29 01:50:39,378 INFO L87 Difference]: Start difference. First operand 523 states and 679 transitions. Second operand has 14 states, 11 states have (on average 7.181818181818182) internal successors, (79), 10 states have internal predecessors, (79), 5 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) [2023-11-29 01:50:40,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:50:40,343 INFO L93 Difference]: Finished difference Result 1124 states and 1510 transitions. [2023-11-29 01:50:40,343 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2023-11-29 01:50:40,344 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 11 states have (on average 7.181818181818182) internal successors, (79), 10 states have internal predecessors, (79), 5 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) Word has length 65 [2023-11-29 01:50:40,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:50:40,349 INFO L225 Difference]: With dead ends: 1124 [2023-11-29 01:50:40,349 INFO L226 Difference]: Without dead ends: 603 [2023-11-29 01:50:40,351 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 142 SyntacticMatches, 4 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 384 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=301, Invalid=1259, Unknown=0, NotChecked=0, Total=1560 [2023-11-29 01:50:40,352 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 234 mSDsluCounter, 697 mSDsCounter, 0 mSdLazyCounter, 802 mSolverCounterSat, 84 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 239 SdHoareTripleChecker+Valid, 806 SdHoareTripleChecker+Invalid, 886 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 84 IncrementalHoareTripleChecker+Valid, 802 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-29 01:50:40,352 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [239 Valid, 806 Invalid, 886 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [84 Valid, 802 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-29 01:50:40,353 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 603 states. [2023-11-29 01:50:40,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 603 to 539. [2023-11-29 01:50:40,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 539 states, 390 states have (on average 1.2692307692307692) internal successors, (495), 427 states have internal predecessors, (495), 81 states have call successors, (81), 69 states have call predecessors, (81), 67 states have return successors, (106), 67 states have call predecessors, (106), 81 states have call successors, (106) [2023-11-29 01:50:40,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 539 states to 539 states and 682 transitions. [2023-11-29 01:50:40,403 INFO L78 Accepts]: Start accepts. Automaton has 539 states and 682 transitions. Word has length 65 [2023-11-29 01:50:40,403 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:50:40,403 INFO L495 AbstractCegarLoop]: Abstraction has 539 states and 682 transitions. [2023-11-29 01:50:40,403 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 11 states have (on average 7.181818181818182) internal successors, (79), 10 states have internal predecessors, (79), 5 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) [2023-11-29 01:50:40,403 INFO L276 IsEmpty]: Start isEmpty. Operand 539 states and 682 transitions. [2023-11-29 01:50:40,406 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 123 [2023-11-29 01:50:40,406 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:50:40,406 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:50:40,418 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-29 01:50:40,607 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 01:50:40,607 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:50:40,607 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:50:40,608 INFO L85 PathProgramCache]: Analyzing trace with hash -1550675827, now seen corresponding path program 1 times [2023-11-29 01:50:40,608 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:50:40,608 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [906278845] [2023-11-29 01:50:40,608 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:50:40,608 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:50:40,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:40,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 01:50:40,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:40,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 01:50:40,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:40,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 01:50:40,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:40,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-29 01:50:40,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:40,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 01:50:40,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:40,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-29 01:50:40,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:40,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2023-11-29 01:50:40,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:40,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 01:50:40,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:40,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-29 01:50:40,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:40,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2023-11-29 01:50:40,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:40,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2023-11-29 01:50:40,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:40,727 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 34 proven. 3 refuted. 0 times theorem prover too weak. 103 trivial. 0 not checked. [2023-11-29 01:50:40,728 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:50:40,728 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [906278845] [2023-11-29 01:50:40,728 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [906278845] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 01:50:40,728 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1704238319] [2023-11-29 01:50:40,728 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:50:40,728 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 01:50:40,729 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 01:50:40,730 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 01:50:40,731 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-29 01:50:40,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:50:40,848 INFO L262 TraceCheckSpWp]: Trace formula consists of 432 conjuncts, 3 conjunts are in the unsatisfiable core [2023-11-29 01:50:40,854 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 01:50:40,875 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 51 proven. 0 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2023-11-29 01:50:40,875 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-29 01:50:40,875 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1704238319] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:50:40,875 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-29 01:50:40,875 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 5 [2023-11-29 01:50:40,876 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [356734186] [2023-11-29 01:50:40,876 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:50:40,876 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 01:50:40,876 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:50:40,877 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 01:50:40,877 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2023-11-29 01:50:40,877 INFO L87 Difference]: Start difference. First operand 539 states and 682 transitions. Second operand has 3 states, 3 states have (on average 19.666666666666668) internal successors, (59), 3 states have internal predecessors, (59), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-29 01:50:40,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:50:40,948 INFO L93 Difference]: Finished difference Result 937 states and 1183 transitions. [2023-11-29 01:50:40,949 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 01:50:40,949 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 19.666666666666668) internal successors, (59), 3 states have internal predecessors, (59), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 122 [2023-11-29 01:50:40,949 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:50:40,950 INFO L225 Difference]: With dead ends: 937 [2023-11-29 01:50:40,950 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 01:50:40,952 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 146 GetRequests, 143 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2023-11-29 01:50:40,953 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 33 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 142 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 01:50:40,953 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 142 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 01:50:40,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 01:50:40,954 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 01:50:40,954 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 01:50:40,954 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 01:50:40,955 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 122 [2023-11-29 01:50:40,955 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:50:40,955 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 01:50:40,955 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 19.666666666666668) internal successors, (59), 3 states have internal predecessors, (59), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-29 01:50:40,955 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 01:50:40,955 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 01:50:40,957 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 01:50:40,964 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-11-29 01:50:41,158 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 01:50:41,160 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 01:50:42,749 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 629 635) no Hoare annotation was computed. [2023-11-29 01:50:42,749 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 629 635) the Hoare annotation is: true [2023-11-29 01:50:42,749 INFO L899 garLoopResultBuilder]: For program point L818-1(lines 814 825) no Hoare annotation was computed. [2023-11-29 01:50:42,750 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 814 825) the Hoare annotation is: true [2023-11-29 01:50:42,750 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 814 825) no Hoare annotation was computed. [2023-11-29 01:50:42,750 INFO L899 garLoopResultBuilder]: For program point L609(lines 609 615) no Hoare annotation was computed. [2023-11-29 01:50:42,750 INFO L899 garLoopResultBuilder]: For program point L609-2(lines 605 627) no Hoare annotation was computed. [2023-11-29 01:50:42,750 INFO L899 garLoopResultBuilder]: For program point L915(lines 915 921) no Hoare annotation was computed. [2023-11-29 01:50:42,750 INFO L895 garLoopResultBuilder]: At program point L651(line 651) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse4 (< |old(~pumpRunning~0)| 1)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not .cse5))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 .cse2 (= ~waterLevel~0 1) .cse3)) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse4 .cse5) (or .cse6 .cse4 .cse5) (or .cse0 (and .cse1 (= 2 ~waterLevel~0) .cse2 .cse3) .cse6) (or .cse0 .cse3)))) [2023-11-29 01:50:42,751 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 867 880) no Hoare annotation was computed. [2023-11-29 01:50:42,751 INFO L895 garLoopResultBuilder]: At program point L656(line 656) the Hoare annotation is: (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse1 (< |old(~pumpRunning~0)| 1)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 (<= ~waterLevel~0 1) .cse1 .cse2) (or .cse3 .cse4) (or .cse0 (and .cse5 .cse6) .cse1 .cse2) (or .cse4 .cse1 .cse2 (and .cse5 (= ~waterLevel~0 1) .cse6)) (or .cse3 (not (= |old(~waterLevel~0)| 1))) (or .cse3 (not .cse2)))) [2023-11-29 01:50:42,751 INFO L895 garLoopResultBuilder]: At program point L912(line 912) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse1 (< |old(~pumpRunning~0)| 1)) (.cse2 (= 0 ~systemActive~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse5 (= ~waterLevel~0 1)) (.cse8 (<= 1 ~switchedOnBeforeTS~0))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 (<= ~waterLevel~0 1) .cse1 .cse2) (or .cse3 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (not .cse2)) (or .cse3 (not (= |old(~waterLevel~0)| 1)) (and .cse4 .cse5)) (or .cse3 .cse6) (or .cse0 (and .cse7 .cse8) .cse1 .cse2) (or .cse6 .cse1 .cse2 (and .cse7 .cse5 .cse8)))) [2023-11-29 01:50:42,751 INFO L899 garLoopResultBuilder]: For program point L656-1(lines 637 661) no Hoare annotation was computed. [2023-11-29 01:50:42,751 INFO L899 garLoopResultBuilder]: For program point L912-1(line 912) no Hoare annotation was computed. [2023-11-29 01:50:42,752 INFO L899 garLoopResultBuilder]: For program point L871(lines 871 877) no Hoare annotation was computed. [2023-11-29 01:50:42,752 INFO L899 garLoopResultBuilder]: For program point L971(line 971) no Hoare annotation was computed. [2023-11-29 01:50:42,752 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 602 628) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse7 (= 2 ~waterLevel~0)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse8 (not (= |old(~waterLevel~0)| 2)))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4)) (or (and .cse5 .cse3 .cse4) .cse6 (not .cse1)) (or (and .cse5 .cse3 (= ~waterLevel~0 1)) .cse6 (not (= |old(~waterLevel~0)| 1))) (or (and .cse2 .cse7 .cse3) .cse8 .cse0 .cse1) (or .cse6 (and .cse5 .cse7 .cse3) .cse8))) [2023-11-29 01:50:42,752 INFO L899 garLoopResultBuilder]: For program point L616-1(lines 616 622) no Hoare annotation was computed. [2023-11-29 01:50:42,752 INFO L899 garLoopResultBuilder]: For program point L678(lines 678 684) no Hoare annotation was computed. [2023-11-29 01:50:42,752 INFO L899 garLoopResultBuilder]: For program point L645(lines 645 653) no Hoare annotation was computed. [2023-11-29 01:50:42,752 INFO L899 garLoopResultBuilder]: For program point L678-2(lines 671 687) no Hoare annotation was computed. [2023-11-29 01:50:42,753 INFO L895 garLoopResultBuilder]: At program point L897(line 897) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse7 (= 2 ~waterLevel~0)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse8 (not (= |old(~waterLevel~0)| 2)))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4)) (or (and .cse5 .cse3 .cse4) .cse6 (not .cse1)) (or (and .cse5 .cse3 (= ~waterLevel~0 1)) .cse6 (not (= |old(~waterLevel~0)| 1))) (or (and .cse2 .cse7 .cse3) .cse8 .cse0 .cse1) (or .cse6 (and .cse5 .cse7 .cse3) .cse8))) [2023-11-29 01:50:42,753 INFO L899 garLoopResultBuilder]: For program point L641(lines 641 658) no Hoare annotation was computed. [2023-11-29 01:50:42,753 INFO L899 garLoopResultBuilder]: For program point L897-1(line 897) no Hoare annotation was computed. [2023-11-29 01:50:42,753 INFO L899 garLoopResultBuilder]: For program point L794(lines 794 798) no Hoare annotation was computed. [2023-11-29 01:50:42,753 INFO L899 garLoopResultBuilder]: For program point L761(lines 761 765) no Hoare annotation was computed. [2023-11-29 01:50:42,753 INFO L899 garLoopResultBuilder]: For program point L794-2(lines 790 801) no Hoare annotation was computed. [2023-11-29 01:50:42,753 INFO L899 garLoopResultBuilder]: For program point L761-2(lines 761 765) no Hoare annotation was computed. [2023-11-29 01:50:42,753 INFO L899 garLoopResultBuilder]: For program point L914(lines 914 924) no Hoare annotation was computed. [2023-11-29 01:50:42,753 INFO L899 garLoopResultBuilder]: For program point L910(lines 910 927) no Hoare annotation was computed. [2023-11-29 01:50:42,753 INFO L899 garLoopResultBuilder]: For program point L910-1(lines 902 930) no Hoare annotation was computed. [2023-11-29 01:50:42,754 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 602 628) no Hoare annotation was computed. [2023-11-29 01:50:42,754 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 971) no Hoare annotation was computed. [2023-11-29 01:50:42,754 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 418 447) no Hoare annotation was computed. [2023-11-29 01:50:42,754 INFO L899 garLoopResultBuilder]: For program point L443(lines 418 447) no Hoare annotation was computed. [2023-11-29 01:50:42,754 INFO L899 garLoopResultBuilder]: For program point L439(line 439) no Hoare annotation was computed. [2023-11-29 01:50:42,754 INFO L899 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2023-11-29 01:50:42,754 INFO L902 garLoopResultBuilder]: At program point L432-1(lines 432 436) the Hoare annotation is: true [2023-11-29 01:50:42,754 INFO L902 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: true [2023-11-29 01:50:42,754 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 418 447) the Hoare annotation is: true [2023-11-29 01:50:42,754 INFO L902 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: true [2023-11-29 01:50:42,755 INFO L899 garLoopResultBuilder]: For program point L424-1(line 424) no Hoare annotation was computed. [2023-11-29 01:50:42,755 INFO L899 garLoopResultBuilder]: For program point L543(lines 543 549) no Hoare annotation was computed. [2023-11-29 01:50:42,755 INFO L899 garLoopResultBuilder]: For program point L543-1(lines 543 549) no Hoare annotation was computed. [2023-11-29 01:50:42,755 INFO L899 garLoopResultBuilder]: For program point L775(lines 775 781) no Hoare annotation was computed. [2023-11-29 01:50:42,755 INFO L899 garLoopResultBuilder]: For program point L775-2(lines 775 781) no Hoare annotation was computed. [2023-11-29 01:50:42,755 INFO L895 garLoopResultBuilder]: At program point L581(lines 532 582) the Hoare annotation is: false [2023-11-29 01:50:42,755 INFO L899 garLoopResultBuilder]: For program point L569(lines 569 575) no Hoare annotation was computed. [2023-11-29 01:50:42,755 INFO L895 garLoopResultBuilder]: At program point L569-2(lines 563 576) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse6 (not .cse3))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse1 .cse2 .cse6) (and .cse4 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse6) (and .cse0 .cse5 .cse1 .cse2 .cse6) (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse6)))) [2023-11-29 01:50:42,755 INFO L899 garLoopResultBuilder]: For program point L553(lines 553 559) no Hoare annotation was computed. [2023-11-29 01:50:42,756 INFO L899 garLoopResultBuilder]: For program point L553-1(lines 553 559) no Hoare annotation was computed. [2023-11-29 01:50:42,756 INFO L895 garLoopResultBuilder]: At program point L578(lines 533 580) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse6 (not .cse3))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse1 .cse2 .cse6) (and .cse4 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse6) (and .cse0 .cse5 .cse1 .cse2 .cse6) (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse6)))) [2023-11-29 01:50:42,756 INFO L895 garLoopResultBuilder]: At program point L545(line 545) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse6 (not .cse3))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse1 .cse2 .cse6) (and .cse4 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse6) (and .cse0 .cse5 .cse1 .cse2 .cse6) (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse6)))) [2023-11-29 01:50:42,756 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 01:50:42,756 INFO L899 garLoopResultBuilder]: For program point L508(lines 508 515) no Hoare annotation was computed. [2023-11-29 01:50:42,756 INFO L899 garLoopResultBuilder]: For program point L508-2(lines 508 515) no Hoare annotation was computed. [2023-11-29 01:50:42,756 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 01:50:42,756 INFO L899 garLoopResultBuilder]: For program point L534(lines 533 580) no Hoare annotation was computed. [2023-11-29 01:50:42,756 INFO L899 garLoopResultBuilder]: For program point L563(lines 563 576) no Hoare annotation was computed. [2023-11-29 01:50:42,757 INFO L895 garLoopResultBuilder]: At program point L555(line 555) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse6 (not .cse3))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse1 .cse2 .cse6) (and .cse4 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse6) (and .cse0 .cse5 .cse1 .cse2 .cse6) (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse6)))) [2023-11-29 01:50:42,757 INFO L899 garLoopResultBuilder]: For program point L584(lines 523 588) no Hoare annotation was computed. [2023-11-29 01:50:42,757 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 802 813) no Hoare annotation was computed. [2023-11-29 01:50:42,757 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 802 813) the Hoare annotation is: (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (< ~pumpRunning~0 1)) (.cse1 (= 2 ~waterLevel~0)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 (not .cse4)) (or .cse5 (< ~switchedOnBeforeTS~0 1) .cse3 .cse4) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)) (or .cse5 .cse1 .cse2 .cse4))) [2023-11-29 01:50:42,757 INFO L899 garLoopResultBuilder]: For program point L806-1(lines 802 813) no Hoare annotation was computed. [2023-11-29 01:50:42,757 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 707 715) no Hoare annotation was computed. [2023-11-29 01:50:42,757 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 707 715) the Hoare annotation is: true [2023-11-29 01:50:42,759 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:50:42,761 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 01:50:42,771 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 01:50:42 BoogieIcfgContainer [2023-11-29 01:50:42,771 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 01:50:42,771 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 01:50:42,771 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 01:50:42,771 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 01:50:42,772 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 01:50:36" (3/4) ... [2023-11-29 01:50:42,773 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 01:50:42,776 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-29 01:50:42,776 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 01:50:42,776 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 01:50:42,776 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 01:50:42,776 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 01:50:42,777 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-29 01:50:42,784 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 33 nodes and edges [2023-11-29 01:50:42,785 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 01:50:42,786 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 01:50:42,786 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 01:50:42,787 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 01:50:42,896 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 01:50:42,897 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 01:50:42,897 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 01:50:42,898 INFO L158 Benchmark]: Toolchain (without parser) took 7242.74ms. Allocated memory was 153.1MB in the beginning and 249.6MB in the end (delta: 96.5MB). Free memory was 118.6MB in the beginning and 131.8MB in the end (delta: -13.2MB). Peak memory consumption was 85.1MB. Max. memory is 16.1GB. [2023-11-29 01:50:42,898 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 104.9MB. Free memory is still 55.7MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 01:50:42,899 INFO L158 Benchmark]: CACSL2BoogieTranslator took 371.67ms. Allocated memory is still 153.1MB. Free memory was 118.6MB in the beginning and 99.0MB in the end (delta: 19.6MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-29 01:50:42,899 INFO L158 Benchmark]: Boogie Procedure Inliner took 46.47ms. Allocated memory is still 153.1MB. Free memory was 99.0MB in the beginning and 96.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 01:50:42,899 INFO L158 Benchmark]: Boogie Preprocessor took 38.87ms. Allocated memory is still 153.1MB. Free memory was 96.9MB in the beginning and 94.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 01:50:42,900 INFO L158 Benchmark]: RCFGBuilder took 450.71ms. Allocated memory was 153.1MB in the beginning and 207.6MB in the end (delta: 54.5MB). Free memory was 94.4MB in the beginning and 173.4MB in the end (delta: -79.0MB). Peak memory consumption was 24.6MB. Max. memory is 16.1GB. [2023-11-29 01:50:42,900 INFO L158 Benchmark]: TraceAbstraction took 6202.00ms. Allocated memory was 207.6MB in the beginning and 249.6MB in the end (delta: 41.9MB). Free memory was 173.4MB in the beginning and 139.2MB in the end (delta: 34.2MB). Peak memory consumption was 146.1MB. Max. memory is 16.1GB. [2023-11-29 01:50:42,900 INFO L158 Benchmark]: Witness Printer took 126.31ms. Allocated memory is still 249.6MB. Free memory was 139.2MB in the beginning and 131.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-29 01:50:42,902 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 104.9MB. Free memory is still 55.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 371.67ms. Allocated memory is still 153.1MB. Free memory was 118.6MB in the beginning and 99.0MB in the end (delta: 19.6MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 46.47ms. Allocated memory is still 153.1MB. Free memory was 99.0MB in the beginning and 96.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 38.87ms. Allocated memory is still 153.1MB. Free memory was 96.9MB in the beginning and 94.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 450.71ms. Allocated memory was 153.1MB in the beginning and 207.6MB in the end (delta: 54.5MB). Free memory was 94.4MB in the beginning and 173.4MB in the end (delta: -79.0MB). Peak memory consumption was 24.6MB. Max. memory is 16.1GB. * TraceAbstraction took 6202.00ms. Allocated memory was 207.6MB in the beginning and 249.6MB in the end (delta: 41.9MB). Free memory was 173.4MB in the beginning and 139.2MB in the end (delta: 34.2MB). Peak memory consumption was 146.1MB. Max. memory is 16.1GB. * Witness Printer took 126.31ms. Allocated memory is still 249.6MB. Free memory was 139.2MB in the beginning and 131.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [415] - GenericResultAtLocation [Line: 521]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [521] - GenericResultAtLocation [Line: 589]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [589] - GenericResultAtLocation [Line: 786]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [786] - GenericResultAtLocation [Line: 881]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [881] - GenericResultAtLocation [Line: 931]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [931] - GenericResultAtLocation [Line: 966]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [966] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 971]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 66 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.1s, OverallIterations: 10, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 723 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 698 mSDsluCounter, 2396 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1664 mSDsCounter, 160 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1368 IncrementalHoareTripleChecker+Invalid, 1528 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 160 mSolverCounterUnsat, 732 mSDtfsCounter, 1368 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 408 GetRequests, 334 SyntacticMatches, 4 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 400 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=539occurred in iteration=9, InterpolantAutomatonStates: 78, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 151 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 18 LocationsWithAnnotation, 606 PreInvPairs, 670 NumberOfFragments, 853 HoareAnnotationTreeSize, 606 FomulaSimplifications, 981 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 18 FomulaSimplificationsInter, 3462 FormulaSimplificationTreeSizeReductionInter, 1.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 618 NumberOfCodeBlocks, 618 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 670 ConstructedInterpolants, 0 QuantifiedInterpolants, 1145 SizeOfPredicates, 3 NumberOfNonLiveVariables, 703 ConjunctsInSsa, 11 ConjunctsInUnsatCore, 13 InterpolantComputations, 9 PerfectInterpolantSequences, 348/365 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0) && (splverifierCounter == 0)) && (tmp == 1)) && (0 == systemActive)) || (((((1 <= pumpRunning) && (2 == waterLevel)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) || (((((1 <= pumpRunning) && (splverifierCounter == 0)) && (tmp == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (splverifierCounter == 0)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive)))) - InvariantResult [Line: 532]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2023-11-29 01:50:42,920 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16d45f40-4651-4cb3-8f84-68496f099c14/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE