./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product37.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product37.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e3509f37a4190025a6bf9c4e7a81c42e49e3316a9582aab003e20039c8a6c594 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 20:42:16,877 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 20:42:16,879 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 20:42:16,902 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 20:42:16,902 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 20:42:16,903 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 20:42:16,904 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 20:42:16,906 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 20:42:16,908 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 20:42:16,909 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 20:42:16,909 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 20:42:16,910 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 20:42:16,911 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 20:42:16,912 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 20:42:16,913 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 20:42:16,914 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 20:42:16,915 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 20:42:16,915 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 20:42:16,917 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 20:42:16,919 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 20:42:16,921 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 20:42:16,922 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 20:42:16,923 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 20:42:16,924 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 20:42:16,927 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 20:42:16,927 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 20:42:16,928 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 20:42:16,928 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 20:42:16,929 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 20:42:16,930 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 20:42:16,930 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 20:42:16,931 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 20:42:16,931 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 20:42:16,932 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 20:42:16,933 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 20:42:16,933 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 20:42:16,933 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 20:42:16,934 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 20:42:16,934 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 20:42:16,935 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 20:42:16,935 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 20:42:16,936 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-06 20:42:16,954 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 20:42:16,954 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 20:42:16,955 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 20:42:16,955 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 20:42:16,955 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 20:42:16,955 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 20:42:16,956 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 20:42:16,956 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 20:42:16,956 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 20:42:16,956 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 20:42:16,957 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 20:42:16,957 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 20:42:16,957 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 20:42:16,957 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 20:42:16,957 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 20:42:16,957 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 20:42:16,957 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 20:42:16,957 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 20:42:16,957 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 20:42:16,958 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 20:42:16,958 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 20:42:16,958 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 20:42:16,958 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 20:42:16,958 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 20:42:16,958 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 20:42:16,958 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 20:42:16,959 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 20:42:16,959 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 20:42:16,959 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 20:42:16,959 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 20:42:16,959 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 20:42:16,959 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 20:42:16,959 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 20:42:16,959 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 20:42:16,959 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e3509f37a4190025a6bf9c4e7a81c42e49e3316a9582aab003e20039c8a6c594 [2021-12-06 20:42:17,127 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 20:42:17,150 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 20:42:17,152 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 20:42:17,153 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 20:42:17,153 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 20:42:17,154 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec4_product37.cil.c [2021-12-06 20:42:17,209 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/data/7e46c4298/b3fd389f4dec46ab96ad99b4bdaceefc/FLAGc0da1d04e [2021-12-06 20:42:17,611 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 20:42:17,611 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/sv-benchmarks/c/product-lines/minepump_spec4_product37.cil.c [2021-12-06 20:42:17,620 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/data/7e46c4298/b3fd389f4dec46ab96ad99b4bdaceefc/FLAGc0da1d04e [2021-12-06 20:42:17,630 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/data/7e46c4298/b3fd389f4dec46ab96ad99b4bdaceefc [2021-12-06 20:42:17,632 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 20:42:17,633 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 20:42:17,634 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 20:42:17,634 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 20:42:17,637 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 20:42:17,638 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 08:42:17" (1/1) ... [2021-12-06 20:42:17,638 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@37c73930 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:42:17, skipping insertion in model container [2021-12-06 20:42:17,638 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 08:42:17" (1/1) ... [2021-12-06 20:42:17,643 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 20:42:17,671 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 20:42:17,863 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/sv-benchmarks/c/product-lines/minepump_spec4_product37.cil.c[6698,6711] [2021-12-06 20:42:17,929 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 20:42:17,939 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 20:42:17,972 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/sv-benchmarks/c/product-lines/minepump_spec4_product37.cil.c[6698,6711] [2021-12-06 20:42:18,013 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 20:42:18,029 INFO L208 MainTranslator]: Completed translation [2021-12-06 20:42:18,030 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:42:18 WrapperNode [2021-12-06 20:42:18,030 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 20:42:18,031 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 20:42:18,031 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 20:42:18,031 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 20:42:18,037 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:42:18" (1/1) ... [2021-12-06 20:42:18,052 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:42:18" (1/1) ... [2021-12-06 20:42:18,077 INFO L137 Inliner]: procedures = 53, calls = 153, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 251 [2021-12-06 20:42:18,078 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 20:42:18,078 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 20:42:18,079 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 20:42:18,079 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 20:42:18,085 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:42:18" (1/1) ... [2021-12-06 20:42:18,085 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:42:18" (1/1) ... [2021-12-06 20:42:18,088 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:42:18" (1/1) ... [2021-12-06 20:42:18,089 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:42:18" (1/1) ... [2021-12-06 20:42:18,095 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:42:18" (1/1) ... [2021-12-06 20:42:18,101 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:42:18" (1/1) ... [2021-12-06 20:42:18,103 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:42:18" (1/1) ... [2021-12-06 20:42:18,106 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 20:42:18,107 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 20:42:18,107 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 20:42:18,107 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 20:42:18,108 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:42:18" (1/1) ... [2021-12-06 20:42:18,115 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 20:42:18,126 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:42:18,138 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 20:42:18,140 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 20:42:18,178 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 20:42:18,178 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-06 20:42:18,178 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-06 20:42:18,179 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-06 20:42:18,179 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-06 20:42:18,179 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-06 20:42:18,179 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-06 20:42:18,179 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 20:42:18,179 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 20:42:18,180 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-06 20:42:18,180 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-06 20:42:18,180 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 20:42:18,180 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-06 20:42:18,180 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-06 20:42:18,180 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 20:42:18,180 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 20:42:18,250 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 20:42:18,252 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 20:42:18,476 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 20:42:18,482 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 20:42:18,482 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 20:42:18,484 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 08:42:18 BoogieIcfgContainer [2021-12-06 20:42:18,484 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 20:42:18,486 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 20:42:18,486 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 20:42:18,489 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 20:42:18,489 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 08:42:17" (1/3) ... [2021-12-06 20:42:18,489 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@51f8a1f7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 08:42:18, skipping insertion in model container [2021-12-06 20:42:18,489 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 08:42:18" (2/3) ... [2021-12-06 20:42:18,490 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@51f8a1f7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 08:42:18, skipping insertion in model container [2021-12-06 20:42:18,490 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 08:42:18" (3/3) ... [2021-12-06 20:42:18,491 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product37.cil.c [2021-12-06 20:42:18,496 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 20:42:18,497 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 20:42:18,535 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 20:42:18,541 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 20:42:18,546 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 20:42:18,560 INFO L276 IsEmpty]: Start isEmpty. Operand has 80 states, 62 states have (on average 1.403225806451613) internal successors, (87), 70 states have internal predecessors, (87), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2021-12-06 20:42:18,565 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-12-06 20:42:18,565 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:42:18,566 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:18,566 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:42:18,571 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:18,572 INFO L85 PathProgramCache]: Analyzing trace with hash -1654845695, now seen corresponding path program 1 times [2021-12-06 20:42:18,581 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:18,581 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1860839445] [2021-12-06 20:42:18,581 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:18,582 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:18,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:18,750 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:18,750 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:18,750 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1860839445] [2021-12-06 20:42:18,751 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1860839445] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:18,751 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:18,751 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 20:42:18,752 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [74359120] [2021-12-06 20:42:18,753 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:18,756 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 20:42:18,756 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:18,776 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 20:42:18,776 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 20:42:18,778 INFO L87 Difference]: Start difference. First operand has 80 states, 62 states have (on average 1.403225806451613) internal successors, (87), 70 states have internal predecessors, (87), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:18,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:18,799 INFO L93 Difference]: Finished difference Result 152 states and 209 transitions. [2021-12-06 20:42:18,800 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 20:42:18,801 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-12-06 20:42:18,801 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:42:18,807 INFO L225 Difference]: With dead ends: 152 [2021-12-06 20:42:18,807 INFO L226 Difference]: Without dead ends: 71 [2021-12-06 20:42:18,810 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 20:42:18,813 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 101 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 20:42:18,814 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 101 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 20:42:18,825 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2021-12-06 20:42:18,840 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71. [2021-12-06 20:42:18,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 55 states have (on average 1.3272727272727274) internal successors, (73), 62 states have internal predecessors, (73), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-06 20:42:18,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 92 transitions. [2021-12-06 20:42:18,843 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 92 transitions. Word has length 19 [2021-12-06 20:42:18,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:42:18,844 INFO L470 AbstractCegarLoop]: Abstraction has 71 states and 92 transitions. [2021-12-06 20:42:18,844 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:18,844 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 92 transitions. [2021-12-06 20:42:18,845 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2021-12-06 20:42:18,846 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:42:18,846 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:18,846 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 20:42:18,846 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:42:18,847 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:18,847 INFO L85 PathProgramCache]: Analyzing trace with hash -338550328, now seen corresponding path program 1 times [2021-12-06 20:42:18,847 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:18,847 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1002980877] [2021-12-06 20:42:18,847 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:18,847 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:18,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:18,894 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:18,894 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:18,894 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1002980877] [2021-12-06 20:42:18,894 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1002980877] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:18,895 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:18,895 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 20:42:18,895 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2075361376] [2021-12-06 20:42:18,895 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:18,896 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 20:42:18,896 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:18,896 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 20:42:18,897 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 20:42:18,897 INFO L87 Difference]: Start difference. First operand 71 states and 92 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:18,908 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:18,908 INFO L93 Difference]: Finished difference Result 108 states and 140 transitions. [2021-12-06 20:42:18,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 20:42:18,909 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2021-12-06 20:42:18,909 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:42:18,910 INFO L225 Difference]: With dead ends: 108 [2021-12-06 20:42:18,910 INFO L226 Difference]: Without dead ends: 62 [2021-12-06 20:42:18,911 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 20:42:18,912 INFO L933 BasicCegarLoop]: 79 mSDtfsCounter, 12 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 142 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 20:42:18,912 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 142 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 20:42:18,913 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2021-12-06 20:42:18,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 62. [2021-12-06 20:42:18,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62 states, 49 states have (on average 1.346938775510204) internal successors, (66), 56 states have internal predecessors, (66), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2021-12-06 20:42:18,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62 states to 62 states and 80 transitions. [2021-12-06 20:42:18,920 INFO L78 Accepts]: Start accepts. Automaton has 62 states and 80 transitions. Word has length 20 [2021-12-06 20:42:18,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:42:18,920 INFO L470 AbstractCegarLoop]: Abstraction has 62 states and 80 transitions. [2021-12-06 20:42:18,920 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:18,920 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 80 transitions. [2021-12-06 20:42:18,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-12-06 20:42:18,921 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:42:18,921 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:18,921 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 20:42:18,922 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:42:18,922 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:18,922 INFO L85 PathProgramCache]: Analyzing trace with hash -367201047, now seen corresponding path program 1 times [2021-12-06 20:42:18,922 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:18,922 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1695559262] [2021-12-06 20:42:18,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:18,923 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:18,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:18,982 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:18,982 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:18,983 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1695559262] [2021-12-06 20:42:18,983 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1695559262] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:18,983 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:18,983 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:42:18,983 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1893216166] [2021-12-06 20:42:18,983 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:18,984 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 20:42:18,984 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:18,984 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 20:42:18,984 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-06 20:42:18,984 INFO L87 Difference]: Start difference. First operand 62 states and 80 transitions. Second operand has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:19,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:19,041 INFO L93 Difference]: Finished difference Result 117 states and 154 transitions. [2021-12-06 20:42:19,042 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 20:42:19,042 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2021-12-06 20:42:19,042 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:42:19,043 INFO L225 Difference]: With dead ends: 117 [2021-12-06 20:42:19,043 INFO L226 Difference]: Without dead ends: 62 [2021-12-06 20:42:19,044 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 20:42:19,045 INFO L933 BasicCegarLoop]: 73 mSDtfsCounter, 106 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 165 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 20:42:19,050 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [106 Valid, 165 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 20:42:19,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2021-12-06 20:42:19,056 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 62. [2021-12-06 20:42:19,056 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62 states, 49 states have (on average 1.3265306122448979) internal successors, (65), 56 states have internal predecessors, (65), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2021-12-06 20:42:19,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62 states to 62 states and 79 transitions. [2021-12-06 20:42:19,058 INFO L78 Accepts]: Start accepts. Automaton has 62 states and 79 transitions. Word has length 24 [2021-12-06 20:42:19,058 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:42:19,058 INFO L470 AbstractCegarLoop]: Abstraction has 62 states and 79 transitions. [2021-12-06 20:42:19,058 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:19,058 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 79 transitions. [2021-12-06 20:42:19,059 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-12-06 20:42:19,059 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:42:19,059 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:19,059 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 20:42:19,060 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:42:19,060 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:19,060 INFO L85 PathProgramCache]: Analyzing trace with hash 1324378912, now seen corresponding path program 1 times [2021-12-06 20:42:19,060 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:19,060 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [814487984] [2021-12-06 20:42:19,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:19,061 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:19,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:19,107 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:19,107 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:19,108 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [814487984] [2021-12-06 20:42:19,108 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [814487984] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:19,108 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:19,108 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 20:42:19,108 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [852756036] [2021-12-06 20:42:19,109 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:19,109 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 20:42:19,109 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:19,110 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 20:42:19,110 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 20:42:19,110 INFO L87 Difference]: Start difference. First operand 62 states and 79 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:19,136 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:19,136 INFO L93 Difference]: Finished difference Result 155 states and 204 transitions. [2021-12-06 20:42:19,136 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 20:42:19,136 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2021-12-06 20:42:19,137 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:42:19,138 INFO L225 Difference]: With dead ends: 155 [2021-12-06 20:42:19,138 INFO L226 Difference]: Without dead ends: 100 [2021-12-06 20:42:19,138 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 20:42:19,140 INFO L933 BasicCegarLoop]: 93 mSDtfsCounter, 62 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 145 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 20:42:19,140 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [62 Valid, 145 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 20:42:19,141 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2021-12-06 20:42:19,151 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 98. [2021-12-06 20:42:19,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 77 states have (on average 1.3116883116883118) internal successors, (101), 84 states have internal predecessors, (101), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (14), 10 states have call predecessors, (14), 10 states have call successors, (14) [2021-12-06 20:42:19,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 125 transitions. [2021-12-06 20:42:19,153 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 125 transitions. Word has length 30 [2021-12-06 20:42:19,153 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:42:19,153 INFO L470 AbstractCegarLoop]: Abstraction has 98 states and 125 transitions. [2021-12-06 20:42:19,154 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 20:42:19,154 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 125 transitions. [2021-12-06 20:42:19,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-06 20:42:19,155 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:42:19,155 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:19,155 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 20:42:19,156 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:42:19,156 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:19,156 INFO L85 PathProgramCache]: Analyzing trace with hash 2145464363, now seen corresponding path program 1 times [2021-12-06 20:42:19,156 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:19,157 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1428796000] [2021-12-06 20:42:19,157 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:19,157 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:19,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:19,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 20:42:19,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:19,231 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:19,231 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:19,232 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1428796000] [2021-12-06 20:42:19,232 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1428796000] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:19,232 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:19,232 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 20:42:19,232 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [522264001] [2021-12-06 20:42:19,232 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:19,233 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 20:42:19,233 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:19,233 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 20:42:19,233 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 20:42:19,234 INFO L87 Difference]: Start difference. First operand 98 states and 125 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 20:42:19,319 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:19,319 INFO L93 Difference]: Finished difference Result 217 states and 281 transitions. [2021-12-06 20:42:19,320 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 20:42:19,320 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 38 [2021-12-06 20:42:19,320 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:42:19,321 INFO L225 Difference]: With dead ends: 217 [2021-12-06 20:42:19,321 INFO L226 Difference]: Without dead ends: 126 [2021-12-06 20:42:19,322 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-06 20:42:19,323 INFO L933 BasicCegarLoop]: 79 mSDtfsCounter, 56 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 89 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 327 SdHoareTripleChecker+Invalid, 106 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 89 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 20:42:19,324 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [57 Valid, 327 Invalid, 106 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 89 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 20:42:19,324 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2021-12-06 20:42:19,334 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 121. [2021-12-06 20:42:19,335 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 121 states, 97 states have (on average 1.288659793814433) internal successors, (125), 104 states have internal predecessors, (125), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (17), 11 states have call predecessors, (17), 10 states have call successors, (17) [2021-12-06 20:42:19,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 121 states to 121 states and 152 transitions. [2021-12-06 20:42:19,336 INFO L78 Accepts]: Start accepts. Automaton has 121 states and 152 transitions. Word has length 38 [2021-12-06 20:42:19,336 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:42:19,336 INFO L470 AbstractCegarLoop]: Abstraction has 121 states and 152 transitions. [2021-12-06 20:42:19,336 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 20:42:19,336 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 152 transitions. [2021-12-06 20:42:19,337 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-06 20:42:19,337 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:42:19,338 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:19,338 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 20:42:19,338 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:42:19,338 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:19,338 INFO L85 PathProgramCache]: Analyzing trace with hash 1134347113, now seen corresponding path program 1 times [2021-12-06 20:42:19,338 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:19,338 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1905534729] [2021-12-06 20:42:19,339 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:19,339 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:19,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:19,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 20:42:19,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:19,379 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:19,379 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:19,379 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1905534729] [2021-12-06 20:42:19,380 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1905534729] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:19,380 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:19,380 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:42:19,380 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [327985444] [2021-12-06 20:42:19,380 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:19,380 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 20:42:19,380 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:19,381 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 20:42:19,381 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 20:42:19,381 INFO L87 Difference]: Start difference. First operand 121 states and 152 transitions. Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 20:42:19,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:19,452 INFO L93 Difference]: Finished difference Result 245 states and 317 transitions. [2021-12-06 20:42:19,452 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 20:42:19,452 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 38 [2021-12-06 20:42:19,452 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:42:19,454 INFO L225 Difference]: With dead ends: 245 [2021-12-06 20:42:19,454 INFO L226 Difference]: Without dead ends: 131 [2021-12-06 20:42:19,455 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-06 20:42:19,456 INFO L933 BasicCegarLoop]: 80 mSDtfsCounter, 58 mSDsluCounter, 177 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 257 SdHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 20:42:19,457 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [60 Valid, 257 Invalid, 80 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 20:42:19,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 131 states. [2021-12-06 20:42:19,472 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 131 to 123. [2021-12-06 20:42:19,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 123 states, 99 states have (on average 1.2828282828282829) internal successors, (127), 106 states have internal predecessors, (127), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (17), 11 states have call predecessors, (17), 10 states have call successors, (17) [2021-12-06 20:42:19,474 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 154 transitions. [2021-12-06 20:42:19,474 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 154 transitions. Word has length 38 [2021-12-06 20:42:19,475 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:42:19,475 INFO L470 AbstractCegarLoop]: Abstraction has 123 states and 154 transitions. [2021-12-06 20:42:19,475 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 20:42:19,475 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 154 transitions. [2021-12-06 20:42:19,477 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-06 20:42:19,477 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:42:19,477 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:19,477 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 20:42:19,478 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:42:19,478 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:19,478 INFO L85 PathProgramCache]: Analyzing trace with hash 113278759, now seen corresponding path program 1 times [2021-12-06 20:42:19,478 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:19,479 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1727223197] [2021-12-06 20:42:19,479 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:19,479 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:19,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:19,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 20:42:19,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:19,537 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:19,537 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:19,537 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1727223197] [2021-12-06 20:42:19,537 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1727223197] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:19,538 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:19,538 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 20:42:19,538 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [390013946] [2021-12-06 20:42:19,538 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:19,538 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 20:42:19,538 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:19,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 20:42:19,539 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 20:42:19,539 INFO L87 Difference]: Start difference. First operand 123 states and 154 transitions. Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 20:42:19,658 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:19,658 INFO L93 Difference]: Finished difference Result 351 states and 462 transitions. [2021-12-06 20:42:19,658 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 20:42:19,658 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 38 [2021-12-06 20:42:19,658 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:42:19,660 INFO L225 Difference]: With dead ends: 351 [2021-12-06 20:42:19,660 INFO L226 Difference]: Without dead ends: 235 [2021-12-06 20:42:19,661 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-06 20:42:19,662 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 175 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 179 SdHoareTripleChecker+Valid, 270 SdHoareTripleChecker+Invalid, 166 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 20:42:19,662 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [179 Valid, 270 Invalid, 166 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 20:42:19,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2021-12-06 20:42:19,679 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 227. [2021-12-06 20:42:19,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 227 states, 179 states have (on average 1.2681564245810055) internal successors, (227), 190 states have internal predecessors, (227), 23 states have call successors, (23), 23 states have call predecessors, (23), 24 states have return successors, (42), 23 states have call predecessors, (42), 23 states have call successors, (42) [2021-12-06 20:42:19,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 227 states to 227 states and 292 transitions. [2021-12-06 20:42:19,681 INFO L78 Accepts]: Start accepts. Automaton has 227 states and 292 transitions. Word has length 38 [2021-12-06 20:42:19,681 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:42:19,681 INFO L470 AbstractCegarLoop]: Abstraction has 227 states and 292 transitions. [2021-12-06 20:42:19,681 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 4 states have internal predecessors, (35), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 20:42:19,682 INFO L276 IsEmpty]: Start isEmpty. Operand 227 states and 292 transitions. [2021-12-06 20:42:19,683 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2021-12-06 20:42:19,683 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:42:19,683 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:19,683 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 20:42:19,683 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:42:19,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:19,684 INFO L85 PathProgramCache]: Analyzing trace with hash 2043069861, now seen corresponding path program 1 times [2021-12-06 20:42:19,684 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:19,684 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [704733802] [2021-12-06 20:42:19,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:19,684 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:19,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:19,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 20:42:19,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:19,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 20:42:19,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:19,728 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:19,728 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:19,728 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [704733802] [2021-12-06 20:42:19,728 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [704733802] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:19,728 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:19,729 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 20:42:19,729 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [380083167] [2021-12-06 20:42:19,729 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:19,729 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 20:42:19,729 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:19,729 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 20:42:19,730 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 20:42:19,730 INFO L87 Difference]: Start difference. First operand 227 states and 292 transitions. Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 20:42:19,834 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:19,834 INFO L93 Difference]: Finished difference Result 447 states and 576 transitions. [2021-12-06 20:42:19,834 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 20:42:19,835 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 40 [2021-12-06 20:42:19,835 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:42:19,837 INFO L225 Difference]: With dead ends: 447 [2021-12-06 20:42:19,837 INFO L226 Difference]: Without dead ends: 227 [2021-12-06 20:42:19,838 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-06 20:42:19,839 INFO L933 BasicCegarLoop]: 73 mSDtfsCounter, 95 mSDsluCounter, 235 mSDsCounter, 0 mSdLazyCounter, 106 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 308 SdHoareTripleChecker+Invalid, 126 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 106 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 20:42:19,839 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [98 Valid, 308 Invalid, 126 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 106 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 20:42:19,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 227 states. [2021-12-06 20:42:19,857 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 227 to 225. [2021-12-06 20:42:19,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 225 states, 177 states have (on average 1.2598870056497176) internal successors, (223), 188 states have internal predecessors, (223), 23 states have call successors, (23), 23 states have call predecessors, (23), 24 states have return successors, (42), 23 states have call predecessors, (42), 23 states have call successors, (42) [2021-12-06 20:42:19,860 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 225 states to 225 states and 288 transitions. [2021-12-06 20:42:19,861 INFO L78 Accepts]: Start accepts. Automaton has 225 states and 288 transitions. Word has length 40 [2021-12-06 20:42:19,861 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:42:19,861 INFO L470 AbstractCegarLoop]: Abstraction has 225 states and 288 transitions. [2021-12-06 20:42:19,862 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 20:42:19,862 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 288 transitions. [2021-12-06 20:42:19,863 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2021-12-06 20:42:19,863 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:42:19,863 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:19,864 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 20:42:19,864 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:42:19,864 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:19,864 INFO L85 PathProgramCache]: Analyzing trace with hash -1243334323, now seen corresponding path program 1 times [2021-12-06 20:42:19,865 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:19,865 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1309612740] [2021-12-06 20:42:19,865 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:19,865 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:19,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:19,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 20:42:19,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:19,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-06 20:42:19,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:19,921 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:19,921 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:19,921 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1309612740] [2021-12-06 20:42:19,921 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1309612740] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 20:42:19,921 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 20:42:19,922 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 20:42:19,922 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1806223575] [2021-12-06 20:42:19,922 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 20:42:19,922 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 20:42:19,922 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:19,923 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 20:42:19,923 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 20:42:19,923 INFO L87 Difference]: Start difference. First operand 225 states and 288 transitions. Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 20:42:20,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:20,131 INFO L93 Difference]: Finished difference Result 474 states and 625 transitions. [2021-12-06 20:42:20,131 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 20:42:20,131 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 42 [2021-12-06 20:42:20,132 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:42:20,135 INFO L225 Difference]: With dead ends: 474 [2021-12-06 20:42:20,135 INFO L226 Difference]: Without dead ends: 296 [2021-12-06 20:42:20,136 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 58 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2021-12-06 20:42:20,137 INFO L933 BasicCegarLoop]: 126 mSDtfsCounter, 173 mSDsluCounter, 356 mSDsCounter, 0 mSdLazyCounter, 267 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 482 SdHoareTripleChecker+Invalid, 315 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 267 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 20:42:20,137 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [174 Valid, 482 Invalid, 315 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 267 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 20:42:20,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2021-12-06 20:42:20,159 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 264. [2021-12-06 20:42:20,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 209 states have (on average 1.229665071770335) internal successors, (257), 224 states have internal predecessors, (257), 25 states have call successors, (25), 23 states have call predecessors, (25), 29 states have return successors, (54), 27 states have call predecessors, (54), 25 states have call successors, (54) [2021-12-06 20:42:20,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 336 transitions. [2021-12-06 20:42:20,163 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 336 transitions. Word has length 42 [2021-12-06 20:42:20,163 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:42:20,163 INFO L470 AbstractCegarLoop]: Abstraction has 264 states and 336 transitions. [2021-12-06 20:42:20,163 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 20:42:20,163 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 336 transitions. [2021-12-06 20:42:20,166 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-12-06 20:42:20,166 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:42:20,166 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:20,166 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 20:42:20,166 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:42:20,167 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:20,167 INFO L85 PathProgramCache]: Analyzing trace with hash 1106963938, now seen corresponding path program 1 times [2021-12-06 20:42:20,167 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:20,167 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [784442639] [2021-12-06 20:42:20,167 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:20,167 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:20,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:20,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 20:42:20,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:20,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 20:42:20,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:20,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-06 20:42:20,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:20,223 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-06 20:42:20,223 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 20:42:20,223 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [784442639] [2021-12-06 20:42:20,224 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [784442639] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 20:42:20,224 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1120472894] [2021-12-06 20:42:20,224 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:20,224 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 20:42:20,224 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 20:42:20,225 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 20:42:20,226 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 20:42:20,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 20:42:20,291 INFO L263 TraceCheckSpWp]: Trace formula consists of 402 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-06 20:42:20,296 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 20:42:20,453 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 12 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:20,453 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 20:42:20,555 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 12 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 20:42:20,555 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1120472894] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 20:42:20,555 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 20:42:20,555 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 12 [2021-12-06 20:42:20,556 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [998082879] [2021-12-06 20:42:20,556 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 20:42:20,556 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-06 20:42:20,556 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 20:42:20,557 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-06 20:42:20,557 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=108, Unknown=0, NotChecked=0, Total=132 [2021-12-06 20:42:20,557 INFO L87 Difference]: Start difference. First operand 264 states and 336 transitions. Second operand has 12 states, 12 states have (on average 7.666666666666667) internal successors, (92), 9 states have internal predecessors, (92), 2 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-12-06 20:42:21,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 20:42:21,283 INFO L93 Difference]: Finished difference Result 636 states and 859 transitions. [2021-12-06 20:42:21,283 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2021-12-06 20:42:21,284 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 7.666666666666667) internal successors, (92), 9 states have internal predecessors, (92), 2 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 67 [2021-12-06 20:42:21,284 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 20:42:21,287 INFO L225 Difference]: With dead ends: 636 [2021-12-06 20:42:21,288 INFO L226 Difference]: Without dead ends: 421 [2021-12-06 20:42:21,290 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 202 GetRequests, 151 SyntacticMatches, 1 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 771 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=468, Invalid=2184, Unknown=0, NotChecked=0, Total=2652 [2021-12-06 20:42:21,291 INFO L933 BasicCegarLoop]: 147 mSDtfsCounter, 425 mSDsluCounter, 839 mSDsCounter, 0 mSdLazyCounter, 928 mSolverCounterSat, 180 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 430 SdHoareTripleChecker+Valid, 986 SdHoareTripleChecker+Invalid, 1108 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 180 IncrementalHoareTripleChecker+Valid, 928 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-06 20:42:21,291 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [430 Valid, 986 Invalid, 1108 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [180 Valid, 928 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-06 20:42:21,292 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 421 states. [2021-12-06 20:42:21,317 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 421 to 356. [2021-12-06 20:42:21,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 356 states, 279 states have (on average 1.2222222222222223) internal successors, (341), 300 states have internal predecessors, (341), 36 states have call successors, (36), 33 states have call predecessors, (36), 40 states have return successors, (82), 36 states have call predecessors, (82), 36 states have call successors, (82) [2021-12-06 20:42:21,322 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 356 states to 356 states and 459 transitions. [2021-12-06 20:42:21,322 INFO L78 Accepts]: Start accepts. Automaton has 356 states and 459 transitions. Word has length 67 [2021-12-06 20:42:21,322 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 20:42:21,322 INFO L470 AbstractCegarLoop]: Abstraction has 356 states and 459 transitions. [2021-12-06 20:42:21,323 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 7.666666666666667) internal successors, (92), 9 states have internal predecessors, (92), 2 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2021-12-06 20:42:21,323 INFO L276 IsEmpty]: Start isEmpty. Operand 356 states and 459 transitions. [2021-12-06 20:42:21,325 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2021-12-06 20:42:21,325 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 20:42:21,326 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:21,351 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 20:42:21,526 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-06 20:42:21,527 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 20:42:21,527 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 20:42:21,527 INFO L85 PathProgramCache]: Analyzing trace with hash -257680621, now seen corresponding path program 1 times [2021-12-06 20:42:21,527 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 20:42:21,527 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [783604874] [2021-12-06 20:42:21,527 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 20:42:21,528 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 20:42:21,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:42:21,553 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 20:42:21,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 20:42:21,597 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 20:42:21,597 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-06 20:42:21,597 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 20:42:21,599 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-06 20:42:21,601 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 20:42:21,603 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 20:42:21,664 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 08:42:21 BoogieIcfgContainer [2021-12-06 20:42:21,664 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 20:42:21,665 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 20:42:21,665 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 20:42:21,665 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 20:42:21,665 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 08:42:18" (3/4) ... [2021-12-06 20:42:21,667 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2021-12-06 20:42:21,756 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-06 20:42:21,756 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 20:42:21,757 INFO L158 Benchmark]: Toolchain (without parser) took 4123.23ms. Allocated memory was 77.6MB in the beginning and 142.6MB in the end (delta: 65.0MB). Free memory was 42.9MB in the beginning and 112.8MB in the end (delta: -69.9MB). Peak memory consumption was 73.0MB. Max. memory is 16.1GB. [2021-12-06 20:42:21,757 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 77.6MB. Free memory was 51.4MB in the beginning and 51.4MB in the end (delta: 30.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 20:42:21,757 INFO L158 Benchmark]: CACSL2BoogieTranslator took 395.58ms. Allocated memory was 77.6MB in the beginning and 117.4MB in the end (delta: 39.8MB). Free memory was 42.6MB in the beginning and 85.4MB in the end (delta: -42.8MB). Peak memory consumption was 7.9MB. Max. memory is 16.1GB. [2021-12-06 20:42:21,757 INFO L158 Benchmark]: Boogie Procedure Inliner took 47.33ms. Allocated memory is still 117.4MB. Free memory was 85.4MB in the beginning and 83.0MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 20:42:21,758 INFO L158 Benchmark]: Boogie Preprocessor took 27.58ms. Allocated memory is still 117.4MB. Free memory was 83.0MB in the beginning and 81.6MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 20:42:21,758 INFO L158 Benchmark]: RCFGBuilder took 377.04ms. Allocated memory is still 117.4MB. Free memory was 81.6MB in the beginning and 65.7MB in the end (delta: 16.0MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2021-12-06 20:42:21,758 INFO L158 Benchmark]: TraceAbstraction took 3178.30ms. Allocated memory was 117.4MB in the beginning and 142.6MB in the end (delta: 25.2MB). Free memory was 65.2MB in the beginning and 43.6MB in the end (delta: 21.7MB). Peak memory consumption was 47.2MB. Max. memory is 16.1GB. [2021-12-06 20:42:21,759 INFO L158 Benchmark]: Witness Printer took 91.46ms. Allocated memory is still 142.6MB. Free memory was 43.6MB in the beginning and 112.8MB in the end (delta: -69.3MB). Peak memory consumption was 9.3MB. Max. memory is 16.1GB. [2021-12-06 20:42:21,760 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 77.6MB. Free memory was 51.4MB in the beginning and 51.4MB in the end (delta: 30.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 395.58ms. Allocated memory was 77.6MB in the beginning and 117.4MB in the end (delta: 39.8MB). Free memory was 42.6MB in the beginning and 85.4MB in the end (delta: -42.8MB). Peak memory consumption was 7.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 47.33ms. Allocated memory is still 117.4MB. Free memory was 85.4MB in the beginning and 83.0MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 27.58ms. Allocated memory is still 117.4MB. Free memory was 83.0MB in the beginning and 81.6MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 377.04ms. Allocated memory is still 117.4MB. Free memory was 81.6MB in the beginning and 65.7MB in the end (delta: 16.0MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 3178.30ms. Allocated memory was 117.4MB in the beginning and 142.6MB in the end (delta: 25.2MB). Free memory was 65.2MB in the beginning and 43.6MB in the end (delta: 21.7MB). Peak memory consumption was 47.2MB. Max. memory is 16.1GB. * Witness Printer took 91.46ms. Allocated memory is still 142.6MB. Free memory was 43.6MB in the beginning and 112.8MB in the end (delta: -69.3MB). Peak memory consumption was 9.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 444]: a call to reach_error is reachable a call to reach_error is reachable We found a FailurePath: [L165] int pumpRunning = 0; [L166] int systemActive = 1; [L344] int cleanupTimeShifts = 4; [L450] int waterLevel = 1; [L451] int methaneLevelCritical = 0; [L713] static struct __ACC__ERR *head = (struct __ACC__ERR *)0; VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L417] int retValue_acc ; [L418] int tmp ; [L422] FCALL select_helpers() [L423] FCALL select_features() [L424] CALL, EXPR valid_product() [L79] int retValue_acc ; [L82] retValue_acc = 1 [L83] return (retValue_acc); VAL [\result=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, retValue_acc=1, systemActive=1, waterLevel=1] [L424] RET, EXPR valid_product() [L424] tmp = valid_product() [L426] COND TRUE \read(tmp) [L428] FCALL setup() [L429] CALL runTest() [L411] CALL test() [L93] int splverifierCounter ; [L94] int tmp ; [L95] int tmp___0 ; [L96] int tmp___1 ; [L97] int tmp___2 ; [L100] splverifierCounter = 0 VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=1] [L102] COND TRUE 1 VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=1] [L104] COND TRUE splverifierCounter < 4 VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=1] [L110] tmp = __VERIFIER_nondet_int() [L112] COND TRUE \read(tmp) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, tmp=1, waterLevel=1] [L114] CALL waterRise() VAL [\old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L468] COND TRUE waterLevel < 2 [L469] waterLevel = waterLevel + 1 VAL [\old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L114] RET waterRise() VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, tmp=1, waterLevel=2] [L120] tmp___0 = __VERIFIER_nondet_int() [L122] COND FALSE !(\read(tmp___0)) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, tmp=1, tmp___0=0, waterLevel=2] [L130] tmp___2 = __VERIFIER_nondet_int() [L132] COND TRUE \read(tmp___2) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, tmp=1, tmp___0=0, tmp___2=1, waterLevel=2] [L145] CALL timeShift() VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L173] COND FALSE !(\read(pumpRunning)) VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L180] COND TRUE \read(systemActive) [L182] CALL processEnvironment() [L228] int tmp ; VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L231] COND FALSE !(\read(pumpRunning)) VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L246] CALL processEnvironment__wrappee__highWaterSensor() VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L202] int tmp ; VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L205] COND TRUE ! pumpRunning [L207] CALL, EXPR isHighWaterLevel() [L325] int retValue_acc ; [L326] int tmp ; [L327] int tmp___0 ; [L331] CALL, EXPR isHighWaterSensorDry() [L530] int retValue_acc ; VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L533] COND FALSE !(waterLevel < 2) [L537] retValue_acc = 0 [L538] return (retValue_acc); VAL [\old(pumpRunning)=0, \old(waterLevel)=2, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, retValue_acc=0, systemActive=1, waterLevel=2] [L331] RET, EXPR isHighWaterSensorDry() [L331] tmp = isHighWaterSensorDry() [L333] COND FALSE !(\read(tmp)) [L336] tmp___0 = 1 VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, tmp=0, tmp___0=1, waterLevel=2] [L338] retValue_acc = tmp___0 [L339] return (retValue_acc); VAL [\old(pumpRunning)=0, \old(waterLevel)=2, \result=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, retValue_acc=1, systemActive=1, tmp=0, tmp___0=1, waterLevel=2] [L207] RET, EXPR isHighWaterLevel() [L207] tmp = isHighWaterLevel() [L209] COND TRUE \read(tmp) [L211] CALL activatePump() [L256] pumpRunning = 1 VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L211] RET activatePump() [L246] RET processEnvironment__wrappee__highWaterSensor() VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L182] RET processEnvironment() [L188] CALL __utac_acc__Specification4_spec__1() [L911] int tmp ; [L912] int tmp___0 ; [L916] CALL, EXPR getWaterLevel() [L521] int retValue_acc ; [L524] retValue_acc = waterLevel [L525] return (retValue_acc); VAL [\old(pumpRunning)=0, \old(waterLevel)=2, \result=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, retValue_acc=2, systemActive=1, waterLevel=2] [L916] RET, EXPR getWaterLevel() [L916] tmp = getWaterLevel() [L918] COND FALSE !(tmp == 0) VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, tmp=2, waterLevel=2] [L188] RET __utac_acc__Specification4_spec__1() [L145] RET timeShift() VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, tmp=1, tmp___0=0, tmp___2=1, waterLevel=2] [L102] COND TRUE 1 VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, tmp=1, tmp___0=0, tmp___2=1, waterLevel=2] [L104] COND TRUE splverifierCounter < 4 VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, tmp=1, tmp___0=0, tmp___2=1, waterLevel=2] [L110] tmp = __VERIFIER_nondet_int() [L112] COND FALSE !(\read(tmp)) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, tmp=0, tmp___0=0, tmp___2=1, waterLevel=2] [L120] tmp___0 = __VERIFIER_nondet_int() [L122] COND FALSE !(\read(tmp___0)) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, tmp=0, tmp___0=0, tmp___2=1, waterLevel=2] [L130] tmp___2 = __VERIFIER_nondet_int() [L132] COND TRUE \read(tmp___2) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, tmp=0, tmp___0=0, tmp___2=1, waterLevel=2] [L145] CALL timeShift() VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L173] COND TRUE \read(pumpRunning) [L175] CALL lowerWaterLevel() [L456] COND TRUE waterLevel > 0 [L457] waterLevel = waterLevel - 1 VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L175] RET lowerWaterLevel() [L180] COND TRUE \read(systemActive) [L182] CALL processEnvironment() [L228] int tmp ; VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L231] COND TRUE \read(pumpRunning) [L233] CALL, EXPR isMethaneAlarm() [L269] int retValue_acc ; [L273] CALL, EXPR isMethaneLevelCritical() [L489] int retValue_acc ; [L492] retValue_acc = methaneLevelCritical [L493] return (retValue_acc); VAL [\old(pumpRunning)=1, \old(waterLevel)=2, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, retValue_acc=0, systemActive=1, waterLevel=1] [L273] RET, EXPR isMethaneLevelCritical() [L273] retValue_acc = isMethaneLevelCritical() [L275] return (retValue_acc); VAL [\old(pumpRunning)=1, \old(waterLevel)=2, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, retValue_acc=0, systemActive=1, waterLevel=1] [L233] RET, EXPR isMethaneAlarm() [L233] tmp = isMethaneAlarm() [L235] COND FALSE !(\read(tmp)) VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, tmp=0, waterLevel=1] [L241] CALL processEnvironment__wrappee__highWaterSensor() VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L202] int tmp ; VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L205] COND FALSE !(! pumpRunning) VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L220] FCALL processEnvironment__wrappee__base() VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L241] RET processEnvironment__wrappee__highWaterSensor() VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, tmp=0, waterLevel=1] [L182] RET processEnvironment() [L188] CALL __utac_acc__Specification4_spec__1() [L911] int tmp ; [L912] int tmp___0 ; [L916] CALL, EXPR getWaterLevel() [L521] int retValue_acc ; [L524] retValue_acc = waterLevel [L525] return (retValue_acc); VAL [\old(pumpRunning)=1, \old(waterLevel)=2, \result=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, retValue_acc=1, systemActive=1, waterLevel=1] [L916] RET, EXPR getWaterLevel() [L916] tmp = getWaterLevel() [L918] COND FALSE !(tmp == 0) VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, tmp=1, waterLevel=1] [L188] RET __utac_acc__Specification4_spec__1() [L145] RET timeShift() VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, tmp=0, tmp___0=0, tmp___2=1, waterLevel=1] [L102] COND TRUE 1 VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, tmp=0, tmp___0=0, tmp___2=1, waterLevel=1] [L104] COND TRUE splverifierCounter < 4 VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, tmp=0, tmp___0=0, tmp___2=1, waterLevel=1] [L110] tmp = __VERIFIER_nondet_int() [L112] COND FALSE !(\read(tmp)) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, tmp=0, tmp___0=0, tmp___2=1, waterLevel=1] [L120] tmp___0 = __VERIFIER_nondet_int() [L122] COND FALSE !(\read(tmp___0)) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, tmp=0, tmp___0=0, tmp___2=1, waterLevel=1] [L130] tmp___2 = __VERIFIER_nondet_int() [L132] COND TRUE \read(tmp___2) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, tmp=0, tmp___0=0, tmp___2=1, waterLevel=1] [L145] CALL timeShift() VAL [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L173] COND TRUE \read(pumpRunning) [L175] CALL lowerWaterLevel() [L456] COND TRUE waterLevel > 0 [L457] waterLevel = waterLevel - 1 VAL [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L175] RET lowerWaterLevel() [L180] COND TRUE \read(systemActive) [L182] CALL processEnvironment() [L228] int tmp ; VAL [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L231] COND TRUE \read(pumpRunning) [L233] CALL, EXPR isMethaneAlarm() [L269] int retValue_acc ; [L273] CALL, EXPR isMethaneLevelCritical() [L489] int retValue_acc ; [L492] retValue_acc = methaneLevelCritical [L493] return (retValue_acc); VAL [\old(pumpRunning)=1, \old(waterLevel)=1, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, retValue_acc=0, systemActive=1, waterLevel=0] [L273] RET, EXPR isMethaneLevelCritical() [L273] retValue_acc = isMethaneLevelCritical() [L275] return (retValue_acc); VAL [\old(pumpRunning)=1, \old(waterLevel)=1, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, retValue_acc=0, systemActive=1, waterLevel=0] [L233] RET, EXPR isMethaneAlarm() [L233] tmp = isMethaneAlarm() [L235] COND FALSE !(\read(tmp)) VAL [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, tmp=0, waterLevel=0] [L241] CALL processEnvironment__wrappee__highWaterSensor() VAL [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L202] int tmp ; VAL [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L205] COND FALSE !(! pumpRunning) VAL [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L220] FCALL processEnvironment__wrappee__base() VAL [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L241] RET processEnvironment__wrappee__highWaterSensor() VAL [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, tmp=0, waterLevel=0] [L182] RET processEnvironment() [L188] CALL __utac_acc__Specification4_spec__1() [L911] int tmp ; [L912] int tmp___0 ; [L916] CALL, EXPR getWaterLevel() [L521] int retValue_acc ; [L524] retValue_acc = waterLevel [L525] return (retValue_acc); VAL [\old(pumpRunning)=1, \old(waterLevel)=1, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, retValue_acc=0, systemActive=1, waterLevel=0] [L916] RET, EXPR getWaterLevel() [L916] tmp = getWaterLevel() [L918] COND TRUE tmp == 0 [L920] CALL, EXPR isPumpRunning() [L280] int retValue_acc ; [L283] retValue_acc = pumpRunning [L284] return (retValue_acc); VAL [\old(pumpRunning)=1, \old(waterLevel)=1, \result=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, retValue_acc=1, systemActive=1, waterLevel=0] [L920] RET, EXPR isPumpRunning() [L920] tmp___0 = isPumpRunning() [L922] COND TRUE \read(tmp___0) [L924] CALL __automaton_fail() [L444] reach_error() VAL [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 80 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 3.1s, OverallIterations: 11, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1181 SdHoareTripleChecker+Valid, 0.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1162 mSDsluCounter, 3183 SdHoareTripleChecker+Invalid, 0.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2211 mSDsCounter, 339 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1621 IncrementalHoareTripleChecker+Invalid, 1960 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 339 mSolverCounterUnsat, 972 mSDtfsCounter, 1621 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 286 GetRequests, 184 SyntacticMatches, 2 SemanticMatches, 100 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 833 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=356occurred in iteration=10, InterpolantAutomatonStates: 103, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 122 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.7s InterpolantComputationTime, 529 NumberOfCodeBlocks, 529 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 478 ConstructedInterpolants, 0 QuantifiedInterpolants, 850 SizeOfPredicates, 4 NumberOfNonLiveVariables, 402 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 39/48 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2021-12-06 20:42:21,801 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ceadee6-1067-4cdd-b8b0-18e9657ee293/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE