./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product33.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product33.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e2e0ba6a085074e8295b6882a51ff57a646359fc725b3e12397ae540b49c1d93 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:58:58,369 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:58:58,436 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:58:58,442 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:58:58,443 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:58:58,468 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:58:58,469 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:58:58,470 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:58:58,471 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:58:58,472 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:58:58,473 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:58:58,473 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:58:58,474 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:58:58,475 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:58:58,475 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:58:58,476 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:58:58,477 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:58:58,477 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:58:58,478 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:58:58,479 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:58:58,479 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:58:58,480 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:58:58,480 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:58:58,481 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:58:58,481 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:58:58,482 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:58:58,482 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:58:58,483 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:58:58,483 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:58:58,484 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:58:58,484 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:58:58,485 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:58:58,485 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:58:58,486 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:58:58,486 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:58:58,486 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:58:58,486 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:58:58,487 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:58:58,487 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:58:58,487 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e2e0ba6a085074e8295b6882a51ff57a646359fc725b3e12397ae540b49c1d93 [2023-11-06 22:58:58,799 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:58:58,830 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:58:58,833 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:58:58,835 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:58:58,836 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:58:58,837 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec3_product33.cil.c [2023-11-06 22:59:02,029 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:59:02,341 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:59:02,342 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/sv-benchmarks/c/product-lines/minepump_spec3_product33.cil.c [2023-11-06 22:59:02,360 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/data/7a08a61e5/2b797565f90c4b968ee778e82f029522/FLAG1ba2c5649 [2023-11-06 22:59:02,638 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/data/7a08a61e5/2b797565f90c4b968ee778e82f029522 [2023-11-06 22:59:02,640 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:59:02,642 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:59:02,644 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:59:02,644 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:59:02,651 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:59:02,652 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:59:02" (1/1) ... [2023-11-06 22:59:02,653 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@25a411f7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:02, skipping insertion in model container [2023-11-06 22:59:02,654 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:59:02" (1/1) ... [2023-11-06 22:59:02,711 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:59:02,991 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/sv-benchmarks/c/product-lines/minepump_spec3_product33.cil.c[13988,14001] [2023-11-06 22:59:03,014 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:59:03,027 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:59:03,038 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-06 22:59:03,043 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [150] [2023-11-06 22:59:03,044 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [252] [2023-11-06 22:59:03,044 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [618] [2023-11-06 22:59:03,045 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [627] [2023-11-06 22:59:03,045 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [692] [2023-11-06 22:59:03,045 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [848] [2023-11-06 22:59:03,046 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [882] [2023-11-06 22:59:03,112 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/sv-benchmarks/c/product-lines/minepump_spec3_product33.cil.c[13988,14001] [2023-11-06 22:59:03,124 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:59:03,145 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:59:03,145 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:03 WrapperNode [2023-11-06 22:59:03,146 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:59:03,147 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:59:03,147 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:59:03,148 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:59:03,156 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:03" (1/1) ... [2023-11-06 22:59:03,173 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:03" (1/1) ... [2023-11-06 22:59:03,210 INFO L138 Inliner]: procedures = 52, calls = 94, calls flagged for inlining = 20, calls inlined = 17, statements flattened = 176 [2023-11-06 22:59:03,211 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:59:03,211 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:59:03,212 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:59:03,212 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:59:03,223 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:03" (1/1) ... [2023-11-06 22:59:03,223 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:03" (1/1) ... [2023-11-06 22:59:03,239 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:03" (1/1) ... [2023-11-06 22:59:03,240 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:03" (1/1) ... [2023-11-06 22:59:03,246 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:03" (1/1) ... [2023-11-06 22:59:03,250 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:03" (1/1) ... [2023-11-06 22:59:03,252 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:03" (1/1) ... [2023-11-06 22:59:03,254 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:03" (1/1) ... [2023-11-06 22:59:03,257 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:59:03,258 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:59:03,258 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:59:03,259 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:59:03,260 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:03" (1/1) ... [2023-11-06 22:59:03,268 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:59:03,304 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:59:03,330 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:59:03,380 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:59:03,396 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:59:03,396 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:59:03,396 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:59:03,396 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:59:03,399 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:59:03,399 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:59:03,400 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:59:03,400 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:59:03,400 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:59:03,400 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:59:03,401 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:59:03,401 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:59:03,401 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:59:03,401 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:59:03,401 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:59:03,402 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:59:03,528 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:59:03,531 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:59:03,913 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:59:03,920 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:59:03,921 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:59:03,923 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:59:03 BoogieIcfgContainer [2023-11-06 22:59:03,927 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:59:03,930 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:59:03,930 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:59:03,934 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:59:03,934 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:59:02" (1/3) ... [2023-11-06 22:59:03,935 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5f0a32d8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:59:03, skipping insertion in model container [2023-11-06 22:59:03,936 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:03" (2/3) ... [2023-11-06 22:59:03,936 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5f0a32d8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:59:03, skipping insertion in model container [2023-11-06 22:59:03,936 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:59:03" (3/3) ... [2023-11-06 22:59:03,938 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product33.cil.c [2023-11-06 22:59:03,956 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:59:03,956 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:59:04,010 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:59:04,017 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@50057b3e, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:59:04,017 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:59:04,021 INFO L276 IsEmpty]: Start isEmpty. Operand has 76 states, 59 states have (on average 1.4067796610169492) internal successors, (83), 65 states have internal predecessors, (83), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-06 22:59:04,031 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:59:04,032 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:04,033 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:04,033 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:04,041 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:04,046 INFO L85 PathProgramCache]: Analyzing trace with hash 2051524167, now seen corresponding path program 1 times [2023-11-06 22:59:04,070 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:04,070 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1026737407] [2023-11-06 22:59:04,072 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:04,072 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:04,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:04,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 22:59:04,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:04,354 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:04,358 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:04,358 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1026737407] [2023-11-06 22:59:04,359 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1026737407] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:04,359 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:04,359 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:59:04,361 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1738236504] [2023-11-06 22:59:04,362 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:04,367 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:59:04,367 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:04,416 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:59:04,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:59:04,420 INFO L87 Difference]: Start difference. First operand has 76 states, 59 states have (on average 1.4067796610169492) internal successors, (83), 65 states have internal predecessors, (83), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:04,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:04,472 INFO L93 Difference]: Finished difference Result 144 states and 197 transitions. [2023-11-06 22:59:04,473 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:59:04,475 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-06 22:59:04,476 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:04,487 INFO L225 Difference]: With dead ends: 144 [2023-11-06 22:59:04,488 INFO L226 Difference]: Without dead ends: 67 [2023-11-06 22:59:04,493 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:59:04,497 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:04,498 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:59:04,518 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2023-11-06 22:59:04,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2023-11-06 22:59:04,545 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 52 states have (on average 1.3269230769230769) internal successors, (69), 57 states have internal predecessors, (69), 9 states have call successors, (9), 6 states have call predecessors, (9), 5 states have return successors, (8), 7 states have call predecessors, (8), 8 states have call successors, (8) [2023-11-06 22:59:04,547 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 86 transitions. [2023-11-06 22:59:04,549 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 86 transitions. Word has length 25 [2023-11-06 22:59:04,549 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:04,550 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 86 transitions. [2023-11-06 22:59:04,550 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:04,550 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 86 transitions. [2023-11-06 22:59:04,553 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-06 22:59:04,553 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:04,554 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:04,554 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:59:04,554 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:04,555 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:04,555 INFO L85 PathProgramCache]: Analyzing trace with hash -755812007, now seen corresponding path program 1 times [2023-11-06 22:59:04,556 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:04,556 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [933136431] [2023-11-06 22:59:04,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:04,557 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:04,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:04,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:59:04,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:04,690 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:04,691 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:04,691 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [933136431] [2023-11-06 22:59:04,691 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [933136431] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:04,692 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:04,692 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:59:04,692 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2077811883] [2023-11-06 22:59:04,692 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:04,694 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:59:04,694 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:04,695 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:59:04,695 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:59:04,695 INFO L87 Difference]: Start difference. First operand 67 states and 86 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:04,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:04,712 INFO L93 Difference]: Finished difference Result 100 states and 128 transitions. [2023-11-06 22:59:04,712 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:59:04,713 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-06 22:59:04,713 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:04,714 INFO L225 Difference]: With dead ends: 100 [2023-11-06 22:59:04,715 INFO L226 Difference]: Without dead ends: 58 [2023-11-06 22:59:04,716 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:59:04,717 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 12 mSDsluCounter, 57 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:04,718 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 130 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:59:04,719 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2023-11-06 22:59:04,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 58. [2023-11-06 22:59:04,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 46 states have (on average 1.3478260869565217) internal successors, (62), 51 states have internal predecessors, (62), 6 states have call successors, (6), 5 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 6 states have call successors, (6) [2023-11-06 22:59:04,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 74 transitions. [2023-11-06 22:59:04,732 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 74 transitions. Word has length 26 [2023-11-06 22:59:04,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:04,733 INFO L495 AbstractCegarLoop]: Abstraction has 58 states and 74 transitions. [2023-11-06 22:59:04,733 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:04,734 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 74 transitions. [2023-11-06 22:59:04,735 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-06 22:59:04,735 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:04,735 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:04,736 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:59:04,736 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:04,737 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:04,737 INFO L85 PathProgramCache]: Analyzing trace with hash 1418329719, now seen corresponding path program 1 times [2023-11-06 22:59:04,737 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:04,738 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1351132939] [2023-11-06 22:59:04,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:04,738 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:04,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:04,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:59:04,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:04,950 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:04,950 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:04,950 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1351132939] [2023-11-06 22:59:04,951 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1351132939] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:04,951 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:04,951 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:59:04,951 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2112076496] [2023-11-06 22:59:04,952 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:04,952 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:59:04,952 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:04,953 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:59:04,954 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:59:04,954 INFO L87 Difference]: Start difference. First operand 58 states and 74 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:05,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:05,097 INFO L93 Difference]: Finished difference Result 109 states and 142 transitions. [2023-11-06 22:59:05,098 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:59:05,099 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2023-11-06 22:59:05,099 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:05,101 INFO L225 Difference]: With dead ends: 109 [2023-11-06 22:59:05,103 INFO L226 Difference]: Without dead ends: 58 [2023-11-06 22:59:05,104 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:59:05,106 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 98 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 151 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:05,106 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [98 Valid, 151 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:59:05,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2023-11-06 22:59:05,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 58. [2023-11-06 22:59:05,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 46 states have (on average 1.326086956521739) internal successors, (61), 51 states have internal predecessors, (61), 6 states have call successors, (6), 5 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 6 states have call successors, (6) [2023-11-06 22:59:05,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 73 transitions. [2023-11-06 22:59:05,127 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 73 transitions. Word has length 30 [2023-11-06 22:59:05,127 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:05,127 INFO L495 AbstractCegarLoop]: Abstraction has 58 states and 73 transitions. [2023-11-06 22:59:05,128 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:05,128 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 73 transitions. [2023-11-06 22:59:05,130 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-11-06 22:59:05,133 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:05,133 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:05,133 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:59:05,134 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:05,134 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:05,134 INFO L85 PathProgramCache]: Analyzing trace with hash -1398795374, now seen corresponding path program 1 times [2023-11-06 22:59:05,135 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:05,135 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1579709187] [2023-11-06 22:59:05,136 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:05,136 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:05,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:05,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:59:05,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:05,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:59:05,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:05,255 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:05,256 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:05,257 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1579709187] [2023-11-06 22:59:05,257 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1579709187] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:05,257 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:05,258 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:59:05,258 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1675017898] [2023-11-06 22:59:05,258 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:05,259 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:59:05,260 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:05,260 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:59:05,261 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:59:05,262 INFO L87 Difference]: Start difference. First operand 58 states and 73 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:59:05,340 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:05,340 INFO L93 Difference]: Finished difference Result 149 states and 192 transitions. [2023-11-06 22:59:05,340 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:59:05,341 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 35 [2023-11-06 22:59:05,341 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:05,343 INFO L225 Difference]: With dead ends: 149 [2023-11-06 22:59:05,343 INFO L226 Difference]: Without dead ends: 98 [2023-11-06 22:59:05,344 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:59:05,345 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 47 mSDsluCounter, 50 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 139 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:05,346 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 139 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:59:05,347 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2023-11-06 22:59:05,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 96. [2023-11-06 22:59:05,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 75 states have (on average 1.32) internal successors, (99), 81 states have internal predecessors, (99), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (12), 10 states have call predecessors, (12), 10 states have call successors, (12) [2023-11-06 22:59:05,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 121 transitions. [2023-11-06 22:59:05,369 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 121 transitions. Word has length 35 [2023-11-06 22:59:05,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:05,369 INFO L495 AbstractCegarLoop]: Abstraction has 96 states and 121 transitions. [2023-11-06 22:59:05,370 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:59:05,370 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 121 transitions. [2023-11-06 22:59:05,371 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2023-11-06 22:59:05,371 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:05,372 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:05,372 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:59:05,372 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:05,373 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:05,373 INFO L85 PathProgramCache]: Analyzing trace with hash -2080139765, now seen corresponding path program 1 times [2023-11-06 22:59:05,373 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:05,373 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [743031876] [2023-11-06 22:59:05,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:05,374 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:05,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:05,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 22:59:05,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:05,483 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:05,484 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:05,484 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [743031876] [2023-11-06 22:59:05,484 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [743031876] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:05,484 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:05,484 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:59:05,485 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1194160538] [2023-11-06 22:59:05,485 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:05,485 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:59:05,486 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:05,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:59:05,487 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:59:05,487 INFO L87 Difference]: Start difference. First operand 96 states and 121 transitions. Second operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:05,528 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:05,529 INFO L93 Difference]: Finished difference Result 264 states and 348 transitions. [2023-11-06 22:59:05,529 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:59:05,529 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2023-11-06 22:59:05,530 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:05,532 INFO L225 Difference]: With dead ends: 264 [2023-11-06 22:59:05,532 INFO L226 Difference]: Without dead ends: 175 [2023-11-06 22:59:05,534 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:59:05,535 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 43 mSDsluCounter, 60 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:05,536 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 129 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:59:05,537 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 175 states. [2023-11-06 22:59:05,564 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 175 to 173. [2023-11-06 22:59:05,565 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 173 states, 136 states have (on average 1.3161764705882353) internal successors, (179), 144 states have internal predecessors, (179), 19 states have call successors, (19), 19 states have call predecessors, (19), 17 states have return successors, (25), 17 states have call predecessors, (25), 19 states have call successors, (25) [2023-11-06 22:59:05,567 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 173 states to 173 states and 223 transitions. [2023-11-06 22:59:05,567 INFO L78 Accepts]: Start accepts. Automaton has 173 states and 223 transitions. Word has length 39 [2023-11-06 22:59:05,568 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:05,568 INFO L495 AbstractCegarLoop]: Abstraction has 173 states and 223 transitions. [2023-11-06 22:59:05,568 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:05,568 INFO L276 IsEmpty]: Start isEmpty. Operand 173 states and 223 transitions. [2023-11-06 22:59:05,570 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2023-11-06 22:59:05,570 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:05,571 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:05,571 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:59:05,571 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:05,572 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:05,572 INFO L85 PathProgramCache]: Analyzing trace with hash -1262491315, now seen corresponding path program 1 times [2023-11-06 22:59:05,572 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:05,572 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1531821567] [2023-11-06 22:59:05,573 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:05,573 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:05,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:05,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 22:59:05,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:05,735 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:05,741 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:05,741 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1531821567] [2023-11-06 22:59:05,741 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1531821567] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:05,741 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:05,742 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:59:05,742 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [534436555] [2023-11-06 22:59:05,742 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:05,743 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:59:05,743 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:05,743 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:59:05,744 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:59:05,744 INFO L87 Difference]: Start difference. First operand 173 states and 223 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:05,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:05,828 INFO L93 Difference]: Finished difference Result 373 states and 492 transitions. [2023-11-06 22:59:05,829 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:59:05,829 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2023-11-06 22:59:05,829 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:05,833 INFO L225 Difference]: With dead ends: 373 [2023-11-06 22:59:05,833 INFO L226 Difference]: Without dead ends: 207 [2023-11-06 22:59:05,835 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:59:05,842 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 18 mSDsluCounter, 239 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 326 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:05,846 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 326 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:59:05,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2023-11-06 22:59:05,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 179. [2023-11-06 22:59:05,902 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 142 states have (on average 1.3028169014084507) internal successors, (185), 150 states have internal predecessors, (185), 19 states have call successors, (19), 19 states have call predecessors, (19), 17 states have return successors, (25), 17 states have call predecessors, (25), 19 states have call successors, (25) [2023-11-06 22:59:05,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 229 transitions. [2023-11-06 22:59:05,905 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 229 transitions. Word has length 39 [2023-11-06 22:59:05,907 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:05,907 INFO L495 AbstractCegarLoop]: Abstraction has 179 states and 229 transitions. [2023-11-06 22:59:05,907 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:05,908 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 229 transitions. [2023-11-06 22:59:05,915 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2023-11-06 22:59:05,915 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:05,916 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:05,916 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:59:05,916 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:05,917 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:05,917 INFO L85 PathProgramCache]: Analyzing trace with hash 1038331275, now seen corresponding path program 1 times [2023-11-06 22:59:05,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:05,917 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1775258517] [2023-11-06 22:59:05,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:05,918 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:05,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:06,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 22:59:06,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:06,069 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:06,070 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:06,070 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1775258517] [2023-11-06 22:59:06,070 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1775258517] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:06,070 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:06,070 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 22:59:06,071 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [201495480] [2023-11-06 22:59:06,071 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:06,071 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-06 22:59:06,071 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:06,072 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-06 22:59:06,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-06 22:59:06,072 INFO L87 Difference]: Start difference. First operand 179 states and 229 transitions. Second operand has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:06,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:06,112 INFO L93 Difference]: Finished difference Result 334 states and 431 transitions. [2023-11-06 22:59:06,112 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-06 22:59:06,112 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2023-11-06 22:59:06,113 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:06,114 INFO L225 Difference]: With dead ends: 334 [2023-11-06 22:59:06,115 INFO L226 Difference]: Without dead ends: 162 [2023-11-06 22:59:06,116 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:59:06,117 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 21 mSDsluCounter, 137 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 23 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:06,117 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [23 Valid, 208 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:59:06,118 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2023-11-06 22:59:06,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 144. [2023-11-06 22:59:06,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 114 states have (on average 1.280701754385965) internal successors, (146), 121 states have internal predecessors, (146), 15 states have call successors, (15), 15 states have call predecessors, (15), 14 states have return successors, (17), 14 states have call predecessors, (17), 15 states have call successors, (17) [2023-11-06 22:59:06,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 178 transitions. [2023-11-06 22:59:06,138 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 178 transitions. Word has length 39 [2023-11-06 22:59:06,139 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:06,139 INFO L495 AbstractCegarLoop]: Abstraction has 144 states and 178 transitions. [2023-11-06 22:59:06,139 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:06,139 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 178 transitions. [2023-11-06 22:59:06,140 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-06 22:59:06,140 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:06,141 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:06,141 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:59:06,141 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:06,142 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:06,142 INFO L85 PathProgramCache]: Analyzing trace with hash -1305949366, now seen corresponding path program 1 times [2023-11-06 22:59:06,142 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:06,142 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1941074819] [2023-11-06 22:59:06,142 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:06,143 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:06,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:06,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 22:59:06,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:06,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-06 22:59:06,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:06,242 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:06,243 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:06,243 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1941074819] [2023-11-06 22:59:06,243 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1941074819] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:06,243 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:06,243 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:59:06,244 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [370881745] [2023-11-06 22:59:06,244 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:06,244 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:59:06,244 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:06,245 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:59:06,245 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:59:06,246 INFO L87 Difference]: Start difference. First operand 144 states and 178 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:59:06,313 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:06,313 INFO L93 Difference]: Finished difference Result 282 states and 350 transitions. [2023-11-06 22:59:06,314 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:59:06,314 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2023-11-06 22:59:06,314 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:06,316 INFO L225 Difference]: With dead ends: 282 [2023-11-06 22:59:06,316 INFO L226 Difference]: Without dead ends: 145 [2023-11-06 22:59:06,317 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:59:06,318 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 28 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 267 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:06,318 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 267 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:59:06,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 145 states. [2023-11-06 22:59:06,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 145 to 142. [2023-11-06 22:59:06,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 112 states have (on average 1.2678571428571428) internal successors, (142), 119 states have internal predecessors, (142), 15 states have call successors, (15), 15 states have call predecessors, (15), 14 states have return successors, (17), 14 states have call predecessors, (17), 15 states have call successors, (17) [2023-11-06 22:59:06,338 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 174 transitions. [2023-11-06 22:59:06,338 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 174 transitions. Word has length 41 [2023-11-06 22:59:06,338 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:06,338 INFO L495 AbstractCegarLoop]: Abstraction has 142 states and 174 transitions. [2023-11-06 22:59:06,339 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:59:06,339 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 174 transitions. [2023-11-06 22:59:06,340 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2023-11-06 22:59:06,340 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:06,340 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:06,340 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:59:06,341 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:06,341 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:06,341 INFO L85 PathProgramCache]: Analyzing trace with hash 1289793507, now seen corresponding path program 1 times [2023-11-06 22:59:06,341 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:06,342 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [956099480] [2023-11-06 22:59:06,342 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:06,342 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:06,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:06,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:59:06,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:06,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2023-11-06 22:59:06,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:06,458 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:06,458 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:06,458 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [956099480] [2023-11-06 22:59:06,459 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [956099480] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:06,459 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:06,459 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 22:59:06,459 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [444113363] [2023-11-06 22:59:06,459 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:06,460 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:59:06,460 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:06,461 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:59:06,461 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:59:06,461 INFO L87 Difference]: Start difference. First operand 142 states and 174 transitions. Second operand has 8 states, 8 states have (on average 4.75) internal successors, (38), 7 states have internal predecessors, (38), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:59:06,787 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:06,787 INFO L93 Difference]: Finished difference Result 263 states and 328 transitions. [2023-11-06 22:59:06,788 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-06 22:59:06,788 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.75) internal successors, (38), 7 states have internal predecessors, (38), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 43 [2023-11-06 22:59:06,789 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:06,790 INFO L225 Difference]: With dead ends: 263 [2023-11-06 22:59:06,790 INFO L226 Difference]: Without dead ends: 103 [2023-11-06 22:59:06,791 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=181, Unknown=0, NotChecked=0, Total=240 [2023-11-06 22:59:06,792 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 131 mSDsluCounter, 368 mSDsCounter, 0 mSdLazyCounter, 219 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 457 SdHoareTripleChecker+Invalid, 244 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 219 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:06,792 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 457 Invalid, 244 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 219 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:59:06,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2023-11-06 22:59:06,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 99. [2023-11-06 22:59:06,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 99 states, 78 states have (on average 1.2179487179487178) internal successors, (95), 83 states have internal predecessors, (95), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (11), 9 states have call predecessors, (11), 10 states have call successors, (11) [2023-11-06 22:59:06,812 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 116 transitions. [2023-11-06 22:59:06,812 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 116 transitions. Word has length 43 [2023-11-06 22:59:06,813 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:06,813 INFO L495 AbstractCegarLoop]: Abstraction has 99 states and 116 transitions. [2023-11-06 22:59:06,813 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.75) internal successors, (38), 7 states have internal predecessors, (38), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:59:06,814 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 116 transitions. [2023-11-06 22:59:06,814 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2023-11-06 22:59:06,815 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:06,815 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:06,815 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-06 22:59:06,815 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:06,816 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:06,816 INFO L85 PathProgramCache]: Analyzing trace with hash -168912990, now seen corresponding path program 1 times [2023-11-06 22:59:06,816 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:06,816 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1662379890] [2023-11-06 22:59:06,817 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:06,817 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:06,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:06,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:59:06,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:06,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-06 22:59:06,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:06,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 22:59:06,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:06,907 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:06,907 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:06,907 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1662379890] [2023-11-06 22:59:06,908 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1662379890] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:06,908 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:06,908 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:59:06,908 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1633120252] [2023-11-06 22:59:06,909 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:06,909 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:59:06,909 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:06,910 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:59:06,910 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:59:06,910 INFO L87 Difference]: Start difference. First operand 99 states and 116 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:59:07,015 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:07,015 INFO L93 Difference]: Finished difference Result 168 states and 200 transitions. [2023-11-06 22:59:07,016 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:59:07,016 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 45 [2023-11-06 22:59:07,016 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:07,019 INFO L225 Difference]: With dead ends: 168 [2023-11-06 22:59:07,019 INFO L226 Difference]: Without dead ends: 117 [2023-11-06 22:59:07,020 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:59:07,020 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 59 mSDsluCounter, 132 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 61 SdHoareTripleChecker+Valid, 198 SdHoareTripleChecker+Invalid, 67 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:07,022 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [61 Valid, 198 Invalid, 67 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:59:07,023 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2023-11-06 22:59:07,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 99. [2023-11-06 22:59:07,043 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 99 states, 78 states have (on average 1.205128205128205) internal successors, (94), 83 states have internal predecessors, (94), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (11), 9 states have call predecessors, (11), 10 states have call successors, (11) [2023-11-06 22:59:07,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 115 transitions. [2023-11-06 22:59:07,044 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 115 transitions. Word has length 45 [2023-11-06 22:59:07,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:07,044 INFO L495 AbstractCegarLoop]: Abstraction has 99 states and 115 transitions. [2023-11-06 22:59:07,045 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:59:07,045 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 115 transitions. [2023-11-06 22:59:07,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2023-11-06 22:59:07,046 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:07,046 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:07,046 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-06 22:59:07,047 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:07,047 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:07,048 INFO L85 PathProgramCache]: Analyzing trace with hash -986561440, now seen corresponding path program 1 times [2023-11-06 22:59:07,048 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:07,048 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [4216833] [2023-11-06 22:59:07,048 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:07,048 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:07,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:07,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:59:07,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:07,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-06 22:59:07,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:07,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 22:59:07,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:07,173 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:07,174 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:07,174 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [4216833] [2023-11-06 22:59:07,174 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [4216833] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:07,174 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:07,174 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 22:59:07,175 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [738985823] [2023-11-06 22:59:07,175 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:07,176 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:59:07,177 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:07,177 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:59:07,178 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:59:07,178 INFO L87 Difference]: Start difference. First operand 99 states and 115 transitions. Second operand has 8 states, 8 states have (on average 4.75) internal successors, (38), 7 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:59:07,326 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:07,326 INFO L93 Difference]: Finished difference Result 153 states and 179 transitions. [2023-11-06 22:59:07,328 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:59:07,328 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.75) internal successors, (38), 7 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 45 [2023-11-06 22:59:07,330 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:07,332 INFO L225 Difference]: With dead ends: 153 [2023-11-06 22:59:07,332 INFO L226 Difference]: Without dead ends: 97 [2023-11-06 22:59:07,333 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=100, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:59:07,333 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 66 mSDsluCounter, 221 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 272 SdHoareTripleChecker+Invalid, 126 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:07,334 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 272 Invalid, 126 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:59:07,334 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2023-11-06 22:59:07,349 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2023-11-06 22:59:07,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 76 states have (on average 1.1973684210526316) internal successors, (91), 81 states have internal predecessors, (91), 10 states have call successors, (10), 10 states have call predecessors, (10), 10 states have return successors, (11), 9 states have call predecessors, (11), 10 states have call successors, (11) [2023-11-06 22:59:07,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 112 transitions. [2023-11-06 22:59:07,350 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 112 transitions. Word has length 45 [2023-11-06 22:59:07,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:07,351 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 112 transitions. [2023-11-06 22:59:07,351 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.75) internal successors, (38), 7 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:59:07,351 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 112 transitions. [2023-11-06 22:59:07,352 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2023-11-06 22:59:07,352 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:07,352 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:07,352 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2023-11-06 22:59:07,353 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:07,353 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:07,353 INFO L85 PathProgramCache]: Analyzing trace with hash -387767708, now seen corresponding path program 1 times [2023-11-06 22:59:07,353 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:07,354 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1624384870] [2023-11-06 22:59:07,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:07,354 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:07,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:07,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:59:07,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:07,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-06 22:59:07,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:07,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 22:59:07,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:07,476 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:07,476 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:07,476 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1624384870] [2023-11-06 22:59:07,476 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1624384870] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:07,477 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:07,477 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:59:07,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [112464985] [2023-11-06 22:59:07,477 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:07,478 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:59:07,478 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:07,479 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:59:07,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:59:07,480 INFO L87 Difference]: Start difference. First operand 97 states and 112 transitions. Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:59:07,663 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:07,663 INFO L93 Difference]: Finished difference Result 162 states and 193 transitions. [2023-11-06 22:59:07,664 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:59:07,664 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 45 [2023-11-06 22:59:07,664 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:07,664 INFO L225 Difference]: With dead ends: 162 [2023-11-06 22:59:07,664 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:59:07,665 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:59:07,666 INFO L413 NwaCegarLoop]: 44 mSDtfsCounter, 77 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 63 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 163 SdHoareTripleChecker+Invalid, 77 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 63 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:07,666 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 163 Invalid, 77 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 63 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:59:07,667 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:59:07,667 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:59:07,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:59:07,667 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:59:07,668 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 45 [2023-11-06 22:59:07,668 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:07,669 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:59:07,669 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:59:07,669 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:59:07,669 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:59:07,673 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:59:07,673 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2023-11-06 22:59:07,676 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:59:09,545 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 724 730) no Hoare annotation was computed. [2023-11-06 22:59:09,546 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 724 730) the Hoare annotation is: true [2023-11-06 22:59:09,546 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: true [2023-11-06 22:59:09,546 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2023-11-06 22:59:09,546 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2023-11-06 22:59:09,546 INFO L899 garLoopResultBuilder]: For program point L704-1(lines 703 722) no Hoare annotation was computed. [2023-11-06 22:59:09,547 INFO L895 garLoopResultBuilder]: At program point L746(line 746) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (= |old(~pumpRunning~0)| 0)) (or (= |timeShift_isHighWaterSensorDry_#res#1| 1) (not (= |old(~waterLevel~0)| 1)) .cse0) (or (and (= ~pumpRunning~0 0) (not (= 2 ~waterLevel~0)) (= |timeShift_processEnvironment_~tmp~5#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0))) [2023-11-06 22:59:09,547 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 700 723) no Hoare annotation was computed. [2023-11-06 22:59:09,547 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 136 149) the Hoare annotation is: (let ((.cse0 (= |timeShift_isHighWaterSensorDry_#res#1| 1)) (.cse3 (not (= 1 ~systemActive~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) .cse3 (and .cse1 (= |timeShift_isHighWaterSensorDry_#res#1| 0) .cse2))) (or .cse3 (= |old(~pumpRunning~0)| 0)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3))) [2023-11-06 22:59:09,547 INFO L899 garLoopResultBuilder]: For program point L858(lines 858 878) no Hoare annotation was computed. [2023-11-06 22:59:09,547 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 127 135) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not .cse5)) (.cse3 (not .cse2)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse3 .cse1 (and (not (= 2 |timeShift_getWaterLevel_#res#1|)) (not (= 2 ~waterLevel~0)) .cse4) (and .cse0 .cse4))) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse1 (and (= |timeShift_isHighWaterSensorDry_#res#1| 1) .cse5 (= |timeShift_getWaterLevel_#res#1| 1)))))) [2023-11-06 22:59:09,548 INFO L895 garLoopResultBuilder]: At program point L751(line 751) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= ~pumpRunning~0 0)) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2023-11-06 22:59:09,548 INFO L899 garLoopResultBuilder]: For program point L623(line 623) no Hoare annotation was computed. [2023-11-06 22:59:09,548 INFO L895 garLoopResultBuilder]: At program point L751-1(lines 732 756) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse0 (not .cse6)) (.cse4 (not .cse3)) (.cse5 (not .cse1))) (and (or .cse0 (and (= |timeShift_isHighWaterSensorDry_#res#1| 1) .cse1 .cse2 .cse3) (not (= |old(~waterLevel~0)| 1)) .cse4) (or .cse5 .cse4 .cse6) (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse1 (not (= 2 ~waterLevel~0)) .cse2 .cse3 .cse7) .cse0 .cse4 (and .cse5 .cse7)))))) [2023-11-06 22:59:09,548 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2023-11-06 22:59:09,548 INFO L899 garLoopResultBuilder]: For program point L838(lines 838 842) no Hoare annotation was computed. [2023-11-06 22:59:09,548 INFO L899 garLoopResultBuilder]: For program point L838-2(lines 838 842) no Hoare annotation was computed. [2023-11-06 22:59:09,548 INFO L895 garLoopResultBuilder]: At program point activatePump_returnLabel#1(lines 757 764) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse0 (and (not (= ~pumpRunning~0 0)) (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (= |old(~pumpRunning~0)| 0)))) [2023-11-06 22:59:09,549 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 619 626) the Hoare annotation is: (not (= 1 ~systemActive~0)) [2023-11-06 22:59:09,549 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 700 723) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and (not .cse2) .cse3)) (or (not .cse1) (and .cse2 .cse3) .cse0))) [2023-11-06 22:59:09,549 INFO L899 garLoopResultBuilder]: For program point L711-1(lines 711 717) no Hoare annotation was computed. [2023-11-06 22:59:09,549 INFO L899 garLoopResultBuilder]: For program point L740(lines 740 748) no Hoare annotation was computed. [2023-11-06 22:59:09,549 INFO L899 garLoopResultBuilder]: For program point L868(lines 868 874) no Hoare annotation was computed. [2023-11-06 22:59:09,549 INFO L899 garLoopResultBuilder]: For program point L736(lines 736 753) no Hoare annotation was computed. [2023-11-06 22:59:09,549 INFO L899 garLoopResultBuilder]: For program point L864(lines 864 877) no Hoare annotation was computed. [2023-11-06 22:59:09,549 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2023-11-06 22:59:09,550 INFO L895 garLoopResultBuilder]: At program point L864-1(lines 849 881) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse4 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse4)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not .cse2))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and (= |timeShift_isHighWaterSensorDry_#res#1| 1) .cse2)) (or .cse3 .cse1 .cse4) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and (not (= 2 ~waterLevel~0)) .cse5) .cse1 (and .cse3 .cse5)))))) [2023-11-06 22:59:09,550 INFO L895 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= ~pumpRunning~0 0)) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) .cse0))) [2023-11-06 22:59:09,550 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 829 847) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse4)) (.cse2 (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 0)) (.cse1 (= |timeShift_isHighWaterLevel_#res#1| 0))) (and (or .cse0 (= |old(~pumpRunning~0)| 0)) (or (not (= |old(~waterLevel~0)| 1)) .cse0 (and (= |timeShift_isHighWaterSensorDry_#res#1| 1) .cse1 (= |timeShift_isHighWaterLevel_~tmp~6#1| 1) .cse2)) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse3 (not (= 2 ~waterLevel~0)) .cse4 .cse5) (and .cse3 (not .cse2) .cse4 .cse5 (not .cse1))))))) [2023-11-06 22:59:09,550 INFO L895 garLoopResultBuilder]: At program point L856(line 856) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse4 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse4)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not .cse2))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and (= |timeShift_isHighWaterSensorDry_#res#1| 1) .cse2)) (or .cse3 .cse1 .cse4) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and (not (= 2 ~waterLevel~0)) .cse5) .cse1 (and .cse3 .cse5)))))) [2023-11-06 22:59:09,550 INFO L899 garLoopResultBuilder]: For program point L856-1(line 856) no Hoare annotation was computed. [2023-11-06 22:59:09,550 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 700 723) no Hoare annotation was computed. [2023-11-06 22:59:09,551 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 784 792) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (and (not (= ~pumpRunning~0 0)) (not (= |timeShift_isPumpRunning_#res#1| 0))) .cse0) (or .cse1 .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse1 (not (= |old(~waterLevel~0)| 1)) .cse0))) [2023-11-06 22:59:09,551 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 623) no Hoare annotation was computed. [2023-11-06 22:59:09,551 INFO L902 garLoopResultBuilder]: At program point L163-2(lines 163 177) the Hoare annotation is: true [2023-11-06 22:59:09,551 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 153 182) no Hoare annotation was computed. [2023-11-06 22:59:09,551 INFO L902 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: true [2023-11-06 22:59:09,551 INFO L899 garLoopResultBuilder]: For program point L159-1(line 159) no Hoare annotation was computed. [2023-11-06 22:59:09,551 INFO L902 garLoopResultBuilder]: At program point L178(lines 153 182) the Hoare annotation is: true [2023-11-06 22:59:09,551 INFO L899 garLoopResultBuilder]: For program point L174(line 174) no Hoare annotation was computed. [2023-11-06 22:59:09,552 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 153 182) the Hoare annotation is: true [2023-11-06 22:59:09,552 INFO L899 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2023-11-06 22:59:09,552 INFO L902 garLoopResultBuilder]: At program point L167-1(lines 167 171) the Hoare annotation is: true [2023-11-06 22:59:09,552 INFO L899 garLoopResultBuilder]: For program point L164(line 164) no Hoare annotation was computed. [2023-11-06 22:59:09,552 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 95 103) the Hoare annotation is: true [2023-11-06 22:59:09,552 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 95 103) no Hoare annotation was computed. [2023-11-06 22:59:09,552 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2023-11-06 22:59:09,552 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 216 225) the Hoare annotation is: true [2023-11-06 22:59:09,553 INFO L895 garLoopResultBuilder]: At program point L684(lines 637 685) the Hoare annotation is: false [2023-11-06 22:59:09,553 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 894 900) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:59:09,553 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 229 251) the Hoare annotation is: true [2023-11-06 22:59:09,553 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:59:09,553 INFO L899 garLoopResultBuilder]: For program point L639(lines 638 683) no Hoare annotation was computed. [2023-11-06 22:59:09,553 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:59:09,553 INFO L899 garLoopResultBuilder]: For program point L668(lines 668 679) no Hoare annotation was computed. [2023-11-06 22:59:09,553 INFO L895 garLoopResultBuilder]: At program point L660(line 660) the Hoare annotation is: (and (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:59:09,553 INFO L899 garLoopResultBuilder]: For program point L239(lines 239 246) no Hoare annotation was computed. [2023-11-06 22:59:09,554 INFO L899 garLoopResultBuilder]: For program point L239-2(lines 239 246) no Hoare annotation was computed. [2023-11-06 22:59:09,554 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 208 214) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:59:09,554 INFO L895 garLoopResultBuilder]: At program point L681(lines 638 683) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2 .cse3) (and (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 .cse3))) [2023-11-06 22:59:09,554 INFO L899 garLoopResultBuilder]: For program point L648(lines 648 654) no Hoare annotation was computed. [2023-11-06 22:59:09,554 INFO L899 garLoopResultBuilder]: For program point L648-1(lines 648 654) no Hoare annotation was computed. [2023-11-06 22:59:09,554 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:59:09,554 INFO L899 garLoopResultBuilder]: For program point L640(lines 640 644) no Hoare annotation was computed. [2023-11-06 22:59:09,554 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:59:09,555 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 901 907) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:59:09,555 INFO L899 garLoopResultBuilder]: For program point L674(lines 674 678) no Hoare annotation was computed. [2023-11-06 22:59:09,555 INFO L895 garLoopResultBuilder]: At program point L674-2(lines 668 679) the Hoare annotation is: (and (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:59:09,555 INFO L899 garLoopResultBuilder]: For program point L658(lines 658 664) no Hoare annotation was computed. [2023-11-06 22:59:09,555 INFO L899 garLoopResultBuilder]: For program point L658-1(lines 658 664) no Hoare annotation was computed. [2023-11-06 22:59:09,555 INFO L902 garLoopResultBuilder]: At program point L687(lines 628 691) the Hoare annotation is: true [2023-11-06 22:59:09,555 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 908 916) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:59:09,555 INFO L895 garLoopResultBuilder]: At program point L650(line 650) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2 .cse3) (and (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 .cse3))) [2023-11-06 22:59:09,555 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2023-11-06 22:59:09,556 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2023-11-06 22:59:09,556 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| 2)) (or (= ~pumpRunning~0 0) .cse0 .cse1))) [2023-11-06 22:59:09,560 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:09,562 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:59:09,604 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:59:09 BoogieIcfgContainer [2023-11-06 22:59:09,604 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:59:09,605 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:59:09,605 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:59:09,605 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:59:09,606 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:59:03" (3/4) ... [2023-11-06 22:59:09,608 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:59:09,612 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:59:09,612 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:59:09,612 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:59:09,613 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:59:09,613 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:59:09,613 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:59:09,621 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2023-11-06 22:59:09,622 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:59:09,622 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:59:09,623 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:59:09,623 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:59:09,655 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:59:09,656 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:59:09,656 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((\result == 1) && !((2 == waterLevel))) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((!((pumpRunning == 0)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0))) [2023-11-06 22:59:09,657 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((pumpRunning == 0)) || !((1 == systemActive))) && (!((\old(pumpRunning) == 0)) || !((1 == systemActive)))) [2023-11-06 22:59:09,658 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || ((((\result == 1) && (pumpRunning == 0)) && (tmp == 0)) && (1 == systemActive))) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) && ((!((pumpRunning == 0)) || !((1 == systemActive))) || (\old(pumpRunning) == 0))) && ((((((((pumpRunning == 0) && !((2 == waterLevel))) && (tmp == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (!((pumpRunning == 0)) && (\old(waterLevel) == waterLevel)))) [2023-11-06 22:59:09,658 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((\result == 1) && (pumpRunning == 0))) && ((!((pumpRunning == 0)) || !((1 == systemActive))) || (\old(pumpRunning) == 0))) && (((!((\old(pumpRunning) == 0)) || (!((2 == waterLevel)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (!((pumpRunning == 0)) && (\old(waterLevel) == waterLevel)))) [2023-11-06 22:59:09,659 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((pumpRunning == 0)) || !((1 == systemActive))) || (\old(pumpRunning) == 0)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((!((2 == \result)) && !((2 == waterLevel))) && (\old(waterLevel) == waterLevel))) || (!((pumpRunning == 0)) && (\old(waterLevel) == waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (((\result == 1) && (pumpRunning == 0)) && (\result == 1)))) [2023-11-06 22:59:09,659 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((\result == 1) && (pumpRunning == 0)) && !((2 == waterLevel))) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) && (!((1 == systemActive)) || (\old(pumpRunning) == 0))) && (((\result == 1) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) [2023-11-06 22:59:09,660 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((1 == systemActive)) || (\old(pumpRunning) == 0)) && ((!((\old(waterLevel) == 1)) || !((1 == systemActive))) || ((((\result == 1) && (\result == 0)) && (tmp == 1)) && (tmp___0 == 0)))) && ((!((1 == systemActive)) || ((((pumpRunning == 0) && !((2 == waterLevel))) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || (((((pumpRunning == 0) && !((tmp___0 == 0))) && (1 == systemActive)) && (\old(waterLevel) == waterLevel)) && !((\result == 0))))) [2023-11-06 22:59:09,660 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((pumpRunning == 0)) && !((\result == 0))) || !((1 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) [2023-11-06 22:59:09,660 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(waterLevel) == 1)) || !((1 == systemActive))) && (!((1 == systemActive)) || (!((pumpRunning == 0)) && (\old(waterLevel) == waterLevel)))) && (!((1 == systemActive)) || (\old(pumpRunning) == 0))) [2023-11-06 22:59:09,710 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:59:09,711 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:59:09,711 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((\result == 1) && !((2 == waterLevel))) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((!((pumpRunning == 0)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0))) [2023-11-06 22:59:09,711 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((pumpRunning == 0)) || !((1 == systemActive))) && (!((\old(pumpRunning) == 0)) || !((1 == systemActive)))) [2023-11-06 22:59:09,712 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || ((((\result == 1) && (pumpRunning == 0)) && (tmp == 0)) && (1 == systemActive))) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) && ((!((pumpRunning == 0)) || !((1 == systemActive))) || (\old(pumpRunning) == 0))) && ((((((((pumpRunning == 0) && !((2 == waterLevel))) && (tmp == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (!((pumpRunning == 0)) && (\old(waterLevel) == waterLevel)))) [2023-11-06 22:59:09,712 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((\result == 1) && (pumpRunning == 0))) && ((!((pumpRunning == 0)) || !((1 == systemActive))) || (\old(pumpRunning) == 0))) && (((!((\old(pumpRunning) == 0)) || (!((2 == waterLevel)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (!((pumpRunning == 0)) && (\old(waterLevel) == waterLevel)))) [2023-11-06 22:59:09,713 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((pumpRunning == 0)) || !((1 == systemActive))) || (\old(pumpRunning) == 0)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((!((2 == \result)) && !((2 == waterLevel))) && (\old(waterLevel) == waterLevel))) || (!((pumpRunning == 0)) && (\old(waterLevel) == waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (((\result == 1) && (pumpRunning == 0)) && (\result == 1)))) [2023-11-06 22:59:09,713 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((\result == 1) && (pumpRunning == 0)) && !((2 == waterLevel))) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) && (!((1 == systemActive)) || (\old(pumpRunning) == 0))) && (((\result == 1) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) [2023-11-06 22:59:09,713 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((1 == systemActive)) || (\old(pumpRunning) == 0)) && ((!((\old(waterLevel) == 1)) || !((1 == systemActive))) || ((((\result == 1) && (\result == 0)) && (tmp == 1)) && (tmp___0 == 0)))) && ((!((1 == systemActive)) || ((((pumpRunning == 0) && !((2 == waterLevel))) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || (((((pumpRunning == 0) && !((tmp___0 == 0))) && (1 == systemActive)) && (\old(waterLevel) == waterLevel)) && !((\result == 0))))) [2023-11-06 22:59:09,714 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((pumpRunning == 0)) && !((\result == 0))) || !((1 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) [2023-11-06 22:59:09,714 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(waterLevel) == 1)) || !((1 == systemActive))) && (!((1 == systemActive)) || (!((pumpRunning == 0)) && (\old(waterLevel) == waterLevel)))) && (!((1 == systemActive)) || (\old(pumpRunning) == 0))) [2023-11-06 22:59:09,740 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:59:09,740 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:59:09,741 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:59:09,741 INFO L158 Benchmark]: Toolchain (without parser) took 7099.29ms. Allocated memory was 157.3MB in the beginning and 188.7MB in the end (delta: 31.5MB). Free memory was 124.3MB in the beginning and 92.8MB in the end (delta: 31.6MB). Peak memory consumption was 65.2MB. Max. memory is 16.1GB. [2023-11-06 22:59:09,742 INFO L158 Benchmark]: CDTParser took 0.33ms. Allocated memory is still 119.5MB. Free memory is still 61.1MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:59:09,742 INFO L158 Benchmark]: CACSL2BoogieTranslator took 502.56ms. Allocated memory is still 157.3MB. Free memory was 124.3MB in the beginning and 105.6MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:59:09,743 INFO L158 Benchmark]: Boogie Procedure Inliner took 63.71ms. Allocated memory is still 157.3MB. Free memory was 105.2MB in the beginning and 103.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:59:09,743 INFO L158 Benchmark]: Boogie Preprocessor took 45.96ms. Allocated memory is still 157.3MB. Free memory was 103.1MB in the beginning and 101.9MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:59:09,743 INFO L158 Benchmark]: RCFGBuilder took 668.88ms. Allocated memory is still 157.3MB. Free memory was 101.9MB in the beginning and 86.3MB in the end (delta: 15.7MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2023-11-06 22:59:09,744 INFO L158 Benchmark]: TraceAbstraction took 5674.85ms. Allocated memory was 157.3MB in the beginning and 188.7MB in the end (delta: 31.5MB). Free memory was 85.8MB in the beginning and 100.1MB in the end (delta: -14.3MB). Peak memory consumption was 69.9MB. Max. memory is 16.1GB. [2023-11-06 22:59:09,744 INFO L158 Benchmark]: Witness Printer took 135.75ms. Allocated memory is still 188.7MB. Free memory was 100.1MB in the beginning and 92.8MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:59:09,746 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33ms. Allocated memory is still 119.5MB. Free memory is still 61.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 502.56ms. Allocated memory is still 157.3MB. Free memory was 124.3MB in the beginning and 105.6MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 63.71ms. Allocated memory is still 157.3MB. Free memory was 105.2MB in the beginning and 103.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 45.96ms. Allocated memory is still 157.3MB. Free memory was 103.1MB in the beginning and 101.9MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 668.88ms. Allocated memory is still 157.3MB. Free memory was 101.9MB in the beginning and 86.3MB in the end (delta: 15.7MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 5674.85ms. Allocated memory was 157.3MB in the beginning and 188.7MB in the end (delta: 31.5MB). Free memory was 85.8MB in the beginning and 100.1MB in the end (delta: -14.3MB). Peak memory consumption was 69.9MB. Max. memory is 16.1GB. * Witness Printer took 135.75ms. Allocated memory is still 188.7MB. Free memory was 100.1MB in the beginning and 92.8MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 150]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [150] - GenericResultAtLocation [Line: 252]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [252] - GenericResultAtLocation [Line: 618]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [618] - GenericResultAtLocation [Line: 627]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [627] - GenericResultAtLocation [Line: 692]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [692] - GenericResultAtLocation [Line: 848]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [848] - GenericResultAtLocation [Line: 882]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [882] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 623]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 76 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.6s, OverallIterations: 12, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 615 SdHoareTripleChecker+Valid, 0.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 600 mSDsluCounter, 2535 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1663 mSDsCounter, 72 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 559 IncrementalHoareTripleChecker+Invalid, 631 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 72 mSolverCounterUnsat, 872 mSDtfsCounter, 559 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 128 GetRequests, 70 SyntacticMatches, 0 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=179occurred in iteration=6, InterpolantAutomatonStates: 65, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 75 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 34 LocationsWithAnnotation, 502 PreInvPairs, 600 NumberOfFragments, 738 HoareAnnotationTreeSize, 502 FomulaSimplifications, 1020 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 34 FomulaSimplificationsInter, 2661 FormulaSimplificationTreeSizeReductionInter, 1.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 452 NumberOfCodeBlocks, 452 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 440 ConstructedInterpolants, 0 QuantifiedInterpolants, 736 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 12 InterpolantComputations, 12 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 628]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 637]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 619]: Loop Invariant Derived loop invariant: !((1 == systemActive)) - InvariantResult [Line: 757]: Loop Invariant Derived loop invariant: (((!((\old(waterLevel) == 1)) || !((1 == systemActive))) && (!((1 == systemActive)) || (!((pumpRunning == 0)) && (\old(waterLevel) == waterLevel)))) && (!((1 == systemActive)) || (\old(pumpRunning) == 0))) - InvariantResult [Line: 894]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: ((((!((pumpRunning == 0)) || !((1 == systemActive))) || (\old(pumpRunning) == 0)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((!((2 == \result)) && !((2 == waterLevel))) && (\old(waterLevel) == waterLevel))) || (!((pumpRunning == 0)) && (\old(waterLevel) == waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (((\result == 1) && (pumpRunning == 0)) && (\result == 1)))) - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 901]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((((((\result == 1) && (pumpRunning == 0)) && !((2 == waterLevel))) && (\old(waterLevel) == waterLevel)) || !((1 == systemActive))) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) && (!((1 == systemActive)) || (\old(pumpRunning) == 0))) && (((\result == 1) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) - InvariantResult [Line: 229]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 784]: Loop Invariant Derived loop invariant: ((((!((pumpRunning == 0)) && !((\result == 0))) || !((1 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) - InvariantResult [Line: 732]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || ((((\result == 1) && (pumpRunning == 0)) && (tmp == 0)) && (1 == systemActive))) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) && ((!((pumpRunning == 0)) || !((1 == systemActive))) || (\old(pumpRunning) == 0))) && ((((((((pumpRunning == 0) && !((2 == waterLevel))) && (tmp == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (!((pumpRunning == 0)) && (\old(waterLevel) == waterLevel)))) - InvariantResult [Line: 638]: Loop Invariant Derived loop invariant: ((((((\result == 1) && !((2 == waterLevel))) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((!((pumpRunning == 0)) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((!((pumpRunning == 0)) || !((1 == systemActive))) && (!((\old(pumpRunning) == 0)) || !((1 == systemActive)))) - InvariantResult [Line: 849]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((\result == 1) && (pumpRunning == 0))) && ((!((pumpRunning == 0)) || !((1 == systemActive))) || (\old(pumpRunning) == 0))) && (((!((\old(pumpRunning) == 0)) || (!((2 == waterLevel)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (!((pumpRunning == 0)) && (\old(waterLevel) == waterLevel)))) - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: (((!((1 == systemActive)) || (\old(pumpRunning) == 0)) && ((!((\old(waterLevel) == 1)) || !((1 == systemActive))) || ((((\result == 1) && (\result == 0)) && (tmp == 1)) && (tmp___0 == 0)))) && ((!((1 == systemActive)) || ((((pumpRunning == 0) && !((2 == waterLevel))) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || (((((pumpRunning == 0) && !((tmp___0 == 0))) && (1 == systemActive)) && (\old(waterLevel) == waterLevel)) && !((\result == 0))))) - InvariantResult [Line: 216]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:59:09,787 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9699922c-55a9-4652-a562-df794e6ef684/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE